CVE / Vulnerability: Data Point Intelligence Guide
A CVE identifier is a label for a flaw, not a measure of your risk. Treating the two as the...
quantus
File Hash: Data Point Intelligence Guide
A file hash is the cheapest reliable fact in cyber threat intelligence: fixed length, unambiguous, and either it matches or...
Biometric Identifier: Data Point Intelligence Guide
Biometrics are the only identifier a person cannot change after it leaks. That single property should govern every decision you...
National ID Number: Data Point Intelligence Guide
A national ID number is the closest thing that exists to a primary key for a human being. It is...
Device / Advertising ID: Data Point Intelligence Guide
An advertising identifier was designed to be a resettable, privacy-preserving marketing token. In practice it became one of the most...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Physical Address: Data Point Intelligence Guide
A physical address is where the digital investigation touches the ground. It is also where thousands of shell companies quietly...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
TLS / JA3 Fingerprint: Data Point Intelligence Guide
Encryption hides the payload, not the handshake. The way a client says hello is often enough to name the software...
DNS Record: Data Point Intelligence Guide
DNS records are an organisation's architecture diagram, published voluntarily and updated in real time. Most defenders never read their own....
Wi-Fi BSSID: Data Point Intelligence Guide
A wireless access point shouts its identifier several times a second, and crowdsourced databases have been listening for years. A...
MAC Address: Data Point Intelligence Guide
A MAC address is the closest thing to a serial number that a network interface broadcasts for free. It is...
IP Range / CIDR: Data Point Intelligence Guide
Individual IPs rotate hourly. The block they come from does not. CIDR is the level at which infrastructure ownership actually...
Subdomain: Data Point Intelligence Guide
Organisations defend the domain they advertise and forget the hundred hostnames beneath it. Subdomain enumeration is where the real attack...
ASN: Data Point Intelligence Guide
The ASN is where infrastructure stops being anonymous. Every packet on the public internet is routed by an organisation that...
URL: Data Point Intelligence Guide
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
IP Address: Data Point Intelligence Guide
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
Domain Name: Data Point Intelligence Guide
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
Weapons Intelligence (WEAPINT): Intelligence Discipline Guide
Every weapon carries a serial number and a paper trail from a factory to a legal export licence. Trafficking investigation...
CBRN Intelligence (CBRNINT): Intelligence Discipline Guide
Chemical, biological, radiological and nuclear risk is monitored by an unusually open international architecture. The intelligence value is in reading...
Vehicle Intelligence (VEHINT): Intelligence Discipline Guide
A vehicle is a seventeen-character identifier attached to an engine. Decode it properly and you get the plant, the year,...
Supply Chain Intelligence (SUPPLYINT): Intelligence Discipline Guide
You do not have one supply chain. You have a tree of dependencies you have never enumerated, and your real...
