Attack Trees For High-Impact Threats