how to confirm an application is a threat