Russian cyber behavior: Where, when, and how to retaliate