Is the US Pursuing More "Offensive" Cyberattacks?

How might the US take a more "aggressive" and "offensive" approach in cyberwar