sources, and the timeframe in which the attacks occurred -- between roughly 9am and 5pm consistently over a protracted period of time3031 -- is indicative of a formalization of the activity. This is further evidenced by the resources required