Historically, technologies have been focused on threat kinetics, which identify the threat as it exposes itself within a network. Threat kinetics relies on metrics gathered inside a network, while identity kinetics depends on information gathered externally. New technologies and methodologies are being developed to expose attackers as they are disguising themselves. The ability to identify potential threats upstream using identity kinetic significantly changes the landscape. Any newly observed domain should be associated with an elevated risk, says author.”]