CISA is a terrible bill and not a solution to this problem. Security teams have been able to manage this data on their own for years without government intervention.<p>There have always been other methods for determining if an attacker is state sponsored. One example: Seeing your account, and a number of dissident or activists being attacked from a block of IPs or similar password attempts, probably means the attack is state sponsored.<p>That being said, in security, attribution is a very hard problem, and the methods used to determine state sponsored attacks are also quite hard to design.<p>There&#x27;s a reason why companies won&#x27;t elaborate on how they do this, but it is usually a combination of login&#x2F;account intelligence and threat feeds.