https://www.splunk.com/en_us/blog/security/msix-weaponization-threat-detection-splunk.html