https://www.modernsecurity.nl/soc-optimization-in-microsoft-sentinel/