Different situations that call for different responses
Machine is doing ́something badî
Machine is compromised, but not actively doing ́something badî
Another site says MIT machines are scanning them
Another site scans MITnet
Someone tells us that an MIT machine is vulnerable
We determine that a machine is vulnerable