https://isc.sans.edu/handler_list.html#rob-vandenbrink