Malware_Analysis / Inspect suspicious files, hashes, processes, domains, IPs, and behavioral indicators. Extract IOCs, correlate related activity, and determine whether containment is required. · size 20 · threshold 4 · max attempts 3