Which description is correct about a tool used by organizations to verify whether or not a staff member has been involved in malicious activity?