5 1 processed by, or transiting an information sys- 2 tem. 3 (B) EXCLUSION.—The term ‘‘cybersecurity 4 threat’’ does not include any action that solely 5 involves a violation of a consumer term of serv- 6 ice or a consumer licensing agreement. 7 (6) CYBER THREAT INDICATOR.—The term 8 ‘‘cyber threat indicator’’ means information that is 9 necessary to describe or identify— 10 (A) malicious reconnaissance, including 11 anomalous patterns of communications that ap- 12 pear to be transmitted for the purpose of gath- 13 ering technical information related to a cyberse- 14 curity threat or security vulnerability; 15 (B) a method of defeating a security con- 16 trol or exploitation of a security vulnerability; 17 (C) a security vulnerability, including 18 anomalous activity that appears to indicate the 19 existence of a security vulnerability; 20 (D) a method of causing a user with legiti- 21 mate access to an information system or infor- 22 mation that is stored on, processed by, or 23 transiting an information system to unwittingly 24 enable the defeat of a security control or exploi- 25 tation of a security vulnerability; † S 754 ES