This will get you started: https://blog.12security.com/two-minutes-to-midnight/