https://bytenotfound.com/blog/microsoft-developer-security-resource-kit/