would be interesting to train on a normal laptop spewing events vs a laptop infected w/ malware