https://csirt.sr/incident-response-planning-for-faster-threat-recovery/