The Wayback Machine - https://web.archive.org/web/20130223105754/https://isc.sans.edu/presentations/sansfire2012-Rob_Vandenbrink-obd-preso.pdf