https://www.jaacorn.com/posts/Active-Directory-Lab-with-Splunk/
Active Directory Lab with Splunk - Josh Yingling