Module 2 of 17
Describe observed behavior precisely instead of forcing every incident into one malware label.