New federal regulations designed to constrain the sale of surveillance tools and “intrusion software” abroad are drawing confusion from private sector companies, with some claiming they are overly complex, may inhibit some forms of proactive threat hunting and will cost more to implement than the government estimates.