https://www.guiadoti.com/2017/08/ossec-entendendo-os-decoders-hids-parte-9/