Identifying Threats: Why Behavior Matters