10. The method of claim 8 , wherein the hash value uniquely identifies the first portion of executable content.
8. The method of claim 1 , further comprising before the receiving: detecting executable content within the at least one network of an enterprise with the at least one of a plurality of collection agents disposed within the at least one network of the enterprise; copying the executable content; and distributing the executable content copies to the central analysis server.