trying to figure out the threat processes