https://poppopretn.com/2024/03/15/sans-infosec-handlers-diary-blog-5ghoul-revisited-three-months-later/