https://www.jaacorn.com/posts/Active-Directory-Lab-with-Splunk/