[Dolores12]

Now compare it to how fast US intelligence analysts are. They may conclude who is behind attack in a matter of days. (For example, recent solarwinds attack)

[nzmsv]

Conclusion prefetching is awesome, isn't it?

[auiya]

Correct, different campaign signatures can make attribution happen quickly, or slowly. Just depends what data the analyst has to work with.