https://9dok.net/document/q2n7xepp-using-root-cause-analysis-handle-intrusion-detection-alarms.html