Absolutely nothing, and in many cases they prefer it. State sponsored malware will often do an inventory of the system they are running on, and send details ba

Absolutely nothing, and in many cases they prefer it. State sponsored malware will often do an inventory of the system they are running on, and send details back to help identify the machines that are being used to analyze the samples. NSA steals things like IDA when they come across them (in the same way they target companies to steal things like code signing certificates) so the analysis environment is completely non-attributable.