https://redbeardsec.com/how-to-use-cti-to-reduce-alerts/