https://rafeeqrehman.com/2019/08/04/security-operations-center-soc-prioritizing-log-sources/