5. The method of claim 4 , further comprising: monitoring executable content associated with the non-trusted entity profile within the enterprise by detecting at least one common characteristic between extracted characteristics of the first portion of received executable content and the non-trusted entity profile.
5. The method of claim 4 , further comprising: monitoring executable content associated with the non-trusted entity profile within the enterprise by detecting at least one common characteristic between extracted characteristics of the first portion of received executable content and the non-trusted entity profile. 6. The method of claim 5 , further comprising: attributing the first piece of executable content to the non-trusted entity profile.