The Stuxnet class of attacks fit in a plausible framework of offensive cyber activities. Some steps leading to an attack may be spotted by an alert defender, who has the home-field advantage after all, in time to raise the alarm.