Fraud analysis and corporate threat are fundamentally centred on identifying the unknown. But where do organisations begin looking and what do they look for?