Top 3 Mistakes When Simulating Cyber Attacks