A former operational expert at multiple federal law enforcement agencies details how identity-based attacks are forcing change.