To identify unauthorized actions , security analysts must understand the strategies employed by attackers . Common procedures involve deceptive emails designed to fool users into sharing sensitive information . Others depend on vulnerability scanning to find weaknesses in networks . Advanced threats often leverage spyware and persuasion to gain acc