https://v3ntus.github.io/posts/setting-up-a-siem-xdr-ids/