Hunting APTs with threat intelligence and EQL