https://mayankramnani.com/posts/threat-modeling-notes/