Fraud & Identity: Mission Domain Intelligence Guide
The synthetic identity that just passed your onboarding checks has a credit file, a utility bill and eighteen months of...
Mission Domains
Sanctions Evasion: Mission Domain Intelligence Guide
Sanctions evasion leaves a documentary shadow: a new intermediary in a familiar corridor, a vessel that stops transmitting for eleven...
Anti-Money Laundering: Mission Domain Intelligence Guide
Money laundering intelligence is not about spotting dirty money. It is about spotting structures whose only purpose is to make...
Financial Crime: Mission Domain Intelligence Guide
Most financial crime cases are not cracked by a clever trade reconstruction. They are cracked by an entity that should...
Forced Labour & Modern Slavery: Mission Domain Intelligence Guide
Forced labour is rarely announced by chains and locked doors. It shows up as recruitment fees, retained passports, and a...
Mining & Resource Crime: Mission Domain Intelligence Guide
Gold laundering does not require a refinery that knows it is complicit. It requires one refinery that accepts a dore...
Art & Antiquities Trafficking: Mission Domain Intelligence Guide
Looted antiquities rarely arrive with a forged export licence. They arrive with a vague provenance line, usually a private European...
Counterfeiting & IP Crime: Mission Domain Intelligence Guide
A counterfeit is not a bad copy. It is a parallel supply chain with real factories, freight forwarders, payment processors...
Kidnap, Hostage & Extortion: Mission Domain Intelligence Guide
A kidnap-for-ransom market has a price list, a broker layer and a settlement rail. Treat it as an economy rather...
Gangs & Street Crime: Mission Domain Intelligence Guide
Retaliation after a stabbing is usually measured in days, sometimes hours. The intelligence question is not who did it but...
Child Protection: Mission Domain Intelligence Guide
The pattern that ends most sextortion cases is depressingly consistent: contact within hours, escalation within a day, and a payment...
Wildlife Trafficking: Mission Domain Intelligence Guide
A container declared as plastic scrap weighing four tonnes more than plastic scrap should weigh is the whole case. The...
Weapons Trafficking: Mission Domain Intelligence Guide
Most weapons in an illicit market were legal once. The investigative question is not where the gun came from but...
Human Trafficking: Mission Domain Intelligence Guide
Very few trafficking victims arrive at a police station and describe themselves as trafficked. What arrives first is a wage...
Drug Trafficking: Mission Domain Intelligence Guide
A cluster of six overdoses in one town over a weekend is not a public health footnote. It is the...
Organized Crime: Mission Domain Intelligence Guide
Organised crime leaves paperwork. Not confessions, but a notary who appears in eleven unrelated share transfers, a haulage firm with...
Emerging Technology & AI Security: Mission Domain Intelligence Guide
The finance team approved the transfer because they recognised the chief executive on the call. Voice, face and cadence were...
Insider Threat: Mission Domain Intelligence Guide
The insider case that goes to court usually has a boring first indicator: an access request that was granted because...
Operational Security: Mission Domain Intelligence Guide
Investigations are compromised by their own footprint far more often than by adversary brilliance. A referrer header, a reused persona,...
Critical Infrastructure: Mission Domain Intelligence Guide
In an office network the worst outcome is data loss. On a substation or a water treatment line the worst...
Threat Analysis: Mission Domain Intelligence Guide
An indicator list is not intelligence. Intelligence is a judgement, held to a stated confidence, that changes what a decision-maker...
Malware: Mission Domain Intelligence Guide
A hash tells you a file was seen. A configuration extraction tells you the campaign identifier, the operator's infrastructure and,...
Dark Web Intel: Mission Domain Intelligence Guide
Most of what is posted on a criminal forum is advertising. The intelligence value is not in the claim but...
Ransomware: Mission Domain Intelligence Guide
A leak site countdown is a negotiating instrument, not a report. Half the value of ransomware intelligence lies in knowing...
Cyber Crime: Mission Domain Intelligence Guide
A single business email compromise crew does not need malware. It needs a lookalike domain registered on a Tuesday, a...
