Low and slow reconnaissance scans used to gain information about a system to see if it is vulnerable to an attack can be stopped with CSA quarantine lists