https://www.crowdstrike.com/blog/how-to-leverage-apple-unified-log-for-incident-response/