Definition includes the concept that there are organizations (e.g., Dragos, Nozomi Networks) that capture and analyze malware and report on the targets, capabilities, infrastructure, and attribution of the malware.

Process/Skill Questions: