; (2) develop offensive cyber capabilities and specific plans and strategies to put at risk targets most valued by adversaries of the United States and their key decision makers; (3) enhance attribution capabilities to reduce the time required to positively attribute an attack with high confidence; and (4) develop intelligence and offensive cyber capabilities to detect, disrupt, and potentially expose malicious cyber activities. (f) Policies relating to offensive cyber capabilities and sovereignty It is the policy of the United States that, when a cyber attack or malicious cyber activity transits or otherwise relies upon the networks or infrastructure of a third country— (1) the United States shall, to the greatest extent practicable, notify and encourage the government of that country to take action to eliminate the threat