Hias focuses on identifying the infrastructure used by adversaries to set up botnets and various attacks before they occur by monitoring domain lookups and cash refreshes to identify compromised computers within a network.