Electronic Service Providers Reporting Child Pornography

How do ESPs determine what to submit to NCMEC and what information qualifies a CyberTip as a referral?

(ESPs decide what to submit to the primarily under legal duty, internal detection policies, and available evidence about the content or user behavior; requires providers to report apparent child porno...