Epidemiological Intelligence (EPIINT): Intelligence Discipline Guide
An outbreak is visible in reporting well before it is measurable in statistics. Epidemiological intelligence is the discipline of reading...
Intelligence Disciplines
Government Intelligence (GOVINT): Intelligence Discipline Guide
Decisions are made by named people, in named bodies, under written procedures. Government intelligence is knowing which body, which person...
Election Intelligence (ELECTINT): Intelligence Discipline Guide
An election is the most predictable high-risk event on any calendar: fixed date, known actors, published rules. Election intelligence is...
Imagery Intelligence (IMINT): Intelligence Discipline Guide
An image is a measurement, not a picture. Imagery intelligence extracts what can be measured, then defends out loud the...
Geospatial Intelligence (GEOINT): Intelligence Discipline Guide
Place is the one attribute nearly every other data point carries. Geospatial intelligence makes place answer questions: what is here,...
Risk Intelligence (RISKINT): Intelligence Discipline Guide
Risk intelligence is what stops a briefing ending with it depends. It converts what you know, and what you do...
Reference Intelligence (REFINT): Intelligence Discipline Guide
Most wrong conclusions can be traced back to two records an analyst believed were about the same thing. Reference intelligence...
Open Source Intelligence (OSINT): Intelligence Discipline Guide
Open source is not free intelligence. It is unvalidated raw material available to anyone, including your adversary, and the discipline...
Sanctions Intelligence (SANCINT): Intelligence Discipline Guide
A sanctions hit is not a finding. It is the start of one, and the work is proving whether the...
Financial Intelligence (FININT): Intelligence Discipline Guide
Follow the money is a cliche because it works. Financial intelligence is the discipline of following value through the institutions...
Economic Intelligence (ECONINT): Intelligence Discipline Guide
Economic intelligence is how you see a disruption forming while it is still a shipping rate, an export licence and...
Cryptocurrency Intelligence (CRYPTINT): Intelligence Discipline Guide
Public blockchains keep a permanent, complete record of every transfer. The hard part was never the data. It is knowing...
Corporate Intelligence (CORPINT): Intelligence Discipline Guide
Every company is a legal fiction held together by filings. Corporate intelligence reads those filings to establish who is actually...
Accounting Intelligence (ACCTINT): Intelligence Discipline Guide
Financial statements are an argument, not a record. Accounting intelligence is the discipline of testing whether the argument actually holds....
Meteorological Intelligence (METOCINT): Intelligence Discipline Guide
Weather is the one adversary that files its own forecast. Meteorological intelligence turns that forecast into decisions about people, assets...
Environmental Intelligence (ENVINT): Intelligence Discipline Guide
Physical conditions decide whether a site stays operational, whether a supplier ships, and whether a claim about the ground is...
Vulnerability Intelligence (VULNINT): Intelligence Discipline Guide
There are more vulnerabilities than you will ever patch. Vulnerability intelligence exists to tell you which few hundred actually matter...
Threat Actor Intelligence (ACTORINT): Intelligence Discipline Guide
Infrastructure changes weekly and tooling changes quarterly, but habits almost never change. Actor intelligence is the discipline of tracking what...
Paste Site Intelligence (PASTINT): Intelligence Discipline Guide
Paste sites are where data goes to be shared quickly and forgotten slowly. A dump that lives for eleven minutes...
Network Intelligence (NETINT): Intelligence Discipline Guide
Every packet on the internet is routed by an announcement someone made, on trust. Network intelligence reads those announcements, and...
Malware Intelligence (MALINT): Intelligence Discipline Guide
A malware sample is a confession. It documents what its author wanted, how they build software, and where they expect...
Domain Intelligence (DOMINT): Intelligence Discipline Guide
Domains are the cheapest and most disposable part of an attack, and the most revealing. Registration and DNS leave a...
Dark Web Intelligence (DARKINT): Intelligence Discipline Guide
The dark web is not a place, it is an access-control problem. Most of what matters happens in venues no...
Cyber Intelligence (CYBINT): Intelligence Discipline Guide
Cyber intelligence is what turns telemetry into a story about an adversary. Without it you have logs. With it you...
Certificate Intelligence (CERTINT): Intelligence Discipline Guide
Every publicly trusted TLS certificate is logged in public within seconds of issuance. That log is one of the richest...
