Discuss the task of understanding potential threats, which is part of the analysis phase of the SecSDLC. What are some ways to truly understand the enemy? How can you be sure you’ve covered all the bases? Following the 12 threat categories is one helpful method. What are some others?