When malware infiltrates a user’s system, DNSWatch communicates directly with the malware to gather information about the attacker, the machine that's infected, and details about the malware itself (i.e. type, file, etc).