Whenever you're ready, walk me through how you'd approach this.
Tell me how you would approach identifying an unknown threat vector in a secure network and what steps you would take to characterize it.