https://www.techopedia.com/detecting-lotl-attacks