Radio Frequency Intelligence (RFINT): Intelligence Discipline Guide

The spectrum is a public utility with a public map. Licences, allocations and open receiver networks let you characterise the electromagnetic environment without ever touching a signal you are not entitled to hear.

What Radio Frequency Intelligence is as a discipline

Radio frequency intelligence treats the electromagnetic spectrum as a collection environment: who is licensed to transmit where, what is actually radiating, and what that says about infrastructure, activity and interference. Practised lawfully in the open, it is built on documentary spectrum intelligence and observation of unencrypted transmissions that are broadcast for public reception. It characterises emitters by frequency, bandwidth, modulation, duty cycle and location, and it maps the spectral environment of an area so that changes such as new infrastructure, interference or denial become visible.

Sub-methods include licence and allocation analysis, emitter characterisation from published parameters, propagation and coverage modelling, interference and denial mapping, and observation of open beacons such as aviation, maritime, amateur and weather transmissions. In the cycle it is a collection and environment-characterisation discipline that underpins aviation, maritime and space work, and it feeds electromagnetic hygiene assessments on the defensive side.

Why it matters

Only radiofrequency work answers what the electromagnetic environment at a location actually looks like: which services are licensed there, which are radiating, and where interference or denial is occurring. It answers whether a reported outage is equipment failure or spectrum denial, which infrastructure exists at a site that shows nothing distinctive from above, how far a given emitter can plausibly reach given terrain and power, and whether an organisation's own emissions reveal more than it intends.

What analysts actually look for

These are the concrete, observable signals that carry weight in this area of work:

Licence records giving callsign, licensee, frequency, emission designator, transmit power, antenna height and precise site coordinates
National and ITU frequency allocation tables establishing which services may lawfully occupy a band in a given region
Occupancy and duty cycle patterns from open receiver networks, showing when a band is active rather than merely licensed
Modulation and bandwidth characteristics of open transmissions, identifying the equipment class and service in use
Interference and denial footprints, including reported degradation of open navigation and broadcast signals over an area
Antenna structure registrations and tower records tying an emitter to a physical mast, height and ownership
Propagation modelling outputs bounding realistic coverage and line-of-sight for an emitter given terrain and power
Changes in licensing activity for an area, such as new applications or modifications preceding physical construction

Where the data comes from

Authoritative and openly available collection points. Always confirm licensing and terms before operational or commercial use:

FCC Universal Licensing System and ULS databases — Free US licence records with frequencies, power, coordinates and licensee identity across most radio services
ITU Radio Regulations and allocation tables — Authoritative international band allocations by region, the baseline for interpreting any observed frequency
Ofcom and national regulator spectrum registers — Licence and allocation data for the UK and other states, including public spectrum information portals
KiwiSDR and WebSDR public receiver networks — Volunteer-operated internet receivers letting you observe open bands remotely and lawfully from many locations
FCC Antenna Structure Registration — Registered tower locations, heights and owners, linking licensed emissions to physical infrastructure
GPSJAM and public GNSS interference reporting — Aggregated indications of navigation interference derived from aircraft-reported navigation integrity data
SigidWiki signal identification guide — Community reference of signal appearances and parameters for classifying observed open transmissions

A working method

A repeatable sequence beats ad-hoc searching. This is a practical starting workflow:

Scope lawfully — Define the bands and services in scope, confirming each is open to reception in your jurisdiction and excluding anything carrying private communications.
Build the paper picture first — Pull licence, allocation and tower records for the area to establish what should be present before observing anything.
Observe open bands — Use public receiver networks or your own compliant receiver to sample the bands in scope, recording time, location and receiver characteristics.
Characterise emitters — Record centre frequency, bandwidth, modulation and duty cycle for each observation and match against reference guides and licence entries.
Model propagation — Apply terrain and power based coverage modelling to test whether an observation is consistent with the licensed emitter or implies another source.
Detect the delta — Compare against your baseline to surface new emitters, silent emitters and interference, which is where the intelligence value sits.
Fuse and report — Correlate spectral findings with aviation, maritime, satellite and site data, stating clearly what was observed versus inferred from records.

How this connects across the intelligence taxonomy

Intelligence work does not respect neat boundaries. The mission domain you are working, the disciplines you practise, and the data points you pivot on are one connected system. These are the direct relationships for this entry — every link is also a tag, so you can follow any thread across the whole library.

Applied in these mission domains

Operates on these data points

Radio Callsign — A licensed radio identifier for a station, vessel, aircraft, or operator.
GPS Coordinates — Precise latitude/longitude coordinates identifying an exact point on Earth — the atomic unit of GEOINT analysi
Location / Coordinates — A geographic point, place, or region — the basis of GEOINT analysis.
Event / Incident — A discrete real-world occurrence — protest, strike, breach, seizure — with time, place, and actors.
Vessel / Ship — A maritime vessel identified by IMO, MMSI, or call sign.
Company / Organization — A legal entity — corporation, LLC, NGO, or business.

Related disciplines

Measurement & Signature Intel — Signatures, Measurements, and Physical Phenomena
Signals Intelligence — Intelligence from Intercepted Communications and Emissions
Space Intelligence — Orbital Activity, Space Assets, and Counterspace

Inside the platform: where Radio Frequency Intelligence lives

The Quantus platform is 204 pages behind a 147-item sidebar organised into six working groups: Command (24 items), Dashboards (15), Threat Theaters (14), Intelligence Domains (15), Investigate (34), and Administration (45). This entry is not a page in isolation — it is a thread running through several of them.

The modules that matter most here:

discipline.php?d=RFINT — Discipline hub
source-catalog.php?disc=RFINT — Source catalogue filtered to this discipline
domain.php?d=mar — Vessel / Ship profile
search.php — Advanced search, filter and pivot
correlate.php — Correlation graph
cases.php — Case management

Each dashboard is local-first: it renders from the platform’s own database rather than depending on a live third-party call, so it still works when an upstream API is unreachable or rate-limited. Heavy aggregates are cached with a hard query time cap and degrade to the last good value instead of hanging the page.

Automation, playbooks and AI skills

Analysis that only happens when someone remembers to run it is not a capability. The platform ships a 30-step automation pipeline (cron.php) that collects, ingests, resolves, enriches, correlates and scores on a schedule — 25 seeders, 11 resolvers and 7 enrichment runners, all idempotent and cursor-based so a run can be interrupted and resumed without duplicating or losing work.

AI skills that apply

The 16 one-click operations in ai-skills.php are deterministic jobs, not free-text generation. The ones that matter here:

Score Country Risk
Sync Intel Domains
Resolve Everything
Summarise (Copilot)
Generate Report

Alerting closes the loop: rules in alerts.php fire on new indicators matching a saved query, so a first sighting in this area raises a notification rather than waiting to be noticed at the next review.

Feeds, data sources and the API

The collection layer runs a feed registry of free, machine-readable sources — bulk blocklists and trackers (Maltrail, IPsum, FireHOL, the full abuse.ch corpora, phishing databases, Emerging Threats, Spamhaus, DigitalSide, ThreatView), authoritative government feeds (CISA KEV, OFAC, UN and EU sanctions lists), and reference datasets (RIR allocations, ip-to-ASN and geolocation tables, MITRE ATT&CK, EPSS). collect.php pulls them server-side on a schedule; feeds.php and source-catalog.php show what is registered, what it covers and when it last ran.

Anything the platform holds is reachable programmatically. The REST API in api.php exposes 11 endpoints — status, stats, search, lookup, recent, export, bulk_check, top_threats, by_category, categories, check — and export.php streams 18 formats in bounded chunks, so a million-row export neither exhausts memory nor times out:

STIX 2.1, MISP, OpenIOC 1.1, CEF (ArcSight), LEEF 2.0 (QRadar), Zeek/Bro intel, Snort/Suricata rules, Palo Alto EDL, BIND RPZ, hosts blackhole, iptables, CSV, JSON, NDJSON/JSONL, XML.

That covers the CTI standards (STIX 2.1, MISP, OpenIOC), SIEM ingestion (CEF, LEEF, Zeek), detection engines (Snort/Suricata), and direct enforcement (Palo Alto EDL, BIND RPZ, hosts, iptables) — so intelligence developed here can be actioned in the tools you already run, without a manual reformatting step. A TAXII 2.1 server and a MISP/RSS feed are also served for pull-based sharing.

Use cases

Three ways this entry earns its keep in day-to-day work:

Triage under time pressure. An artifact or report lands and you need a defensible read in minutes, not days. Scope lawfully is the first move; the platform pre-computes the enrichment so the analyst spends the time on judgement rather than lookups.
Building the picture. A single indicator is rarely the story. Observe open bands turns one artifact into a network — shared infrastructure, repeated selectors, the same operator behind different names — via the correlation graph and the cross-entity link engine.
Producing something actionable. Analysis that ends in a document nobody can use is wasted. Fuse and report feeds the case file, the detection rule, the block list or the referral — with sourcing attached so the recipient can verify it.

Case management (cases.php), watchlists, saved searches and scheduled reports mean the work persists between sessions and survives an analyst leaving the team.

How each sector uses Radio Frequency Intelligence

The same entry is worked very differently depending on who you are, what authority you hold, and what you are ultimately producing. A military analyst is supporting a commander’s decision; a journalist is meeting a publication standard; an NGO caseworker is protecting a person. The underlying artifacts are shared — the constraints, outputs and thresholds are not.

🎖 Military and defence

Defence users characterise the electromagnetic environment of an area of operations: which services are licensed there, what infrastructure exists, where interference or denial is occurring, and what the terrain permits in terms of coverage. Lawful open-source work supports spectrum management, emissions control planning and electromagnetic hygiene for deployed units, and it feeds the environmental layer of IPB. Products help commanders understand whether a communications outage is equipment failure, congestion or deliberate denial. Actual interception of foreign communications is a governmental signals intelligence function requiring specific authority, and analysts working in the open lane must stay on the reception side of that boundary at all times.

🕵 National intelligence

For national intelligence, open radiofrequency work provides an unclassified environmental picture that can be shared widely: licence and allocation records, tower registrations, published emitter parameters and observations from public receiver networks. It supports requirements about infrastructure presence, interference events and satellite ground segment location, and it validates or bounds claims made in classified reporting. Because the material is open, findings can be released to partners and industry. The discipline boundary must be stated in the product: characterising the spectrum from records and open beacons is not interception, and any collection against private communications belongs to authorised signals intelligence programmes.

👮 Law enforcement

Law enforcement uses spectrum records in unlicensed transmitter investigations, interference complaints, illegal jammer cases and locating unauthorised broadcast operations, usually alongside the national regulator who holds the enforcement powers. Evidentially, direction-finding results need calibrated equipment, recorded methodology and an operator who can testify. Interception of communications content requires the same statutory authorisation as any wiretap, regardless of how easy the signal was to receive, and the fact that a transmission was unencrypted is legally irrelevant. Most investigations are best run jointly with the regulator, which can lawfully compel licence records and conduct enforcement monitoring.

🔍 Private investigation and corporate security

Corporate security teams use this discipline defensively: mapping the licensed and observed spectral environment around their own sites, detecting unauthorised transmitters on their own property during technical surveillance countermeasures sweeps, and assessing whether their own emissions disclose more than intended. That is lawful when conducted on estate you own or control with documented authorisation. What a private actor must never do is intercept, record, decode or disclose private communications, monitor a third party's transmissions, or deploy jamming equipment, all of which are criminal in most jurisdictions and carry no professional exception.

📰 Journalism and OSINT media

Journalists use spectrum records and open beacon reception to document infrastructure, interference and denial events, for example mapping GNSS jamming near conflict zones or identifying who holds a licence at a contested site. Verification standards require distinguishing what came from a licence record from what was observed, naming the receiver used and its location, and having a radio engineer review technical claims. Publication ethics require restraint about location precision where it could endanger people, and absolute avoidance of publishing the content of any private communication, which is unlawful to intercept and usually unlawful to disclose.

🌍 NGO, humanitarian and human rights

Humanitarian and human rights organisations use radiofrequency work to document communications shutdowns, broadcast jamming and GNSS interference that affect civilian populations and aid operations, and to plan their own resilient communications. Do no harm applies to publishing locations of transmitters that communities rely on, since exposure can lead to their destruction. Duty of care includes teaching field staff what their own devices emit, because an aid worker's satellite terminal or radio is a locatable emitter in a contested environment. Documentation for accountability should record receiver metadata and timestamps to survive later challenge.

🎓 University and research

Researchers in radio science, spectrum policy and wireless security use licence databases, allocation tables and open receiver networks for propagation studies, spectrum occupancy measurement and interference characterisation. Methodology requires documenting receiver hardware, antenna, gain settings, location and calibration, because occupancy measurements are notoriously dependent on the front end. Ethics review applies where measurements could capture identifiable communications, and study designs should exclude those bands by construction rather than by post hoc filtering. Publish raw spectral records and processing code where licensing permits, and cite the regulator database version and extraction date.

Playbook: working Radio Frequency Intelligence end to end

A repeatable sequence, from the moment the requirement lands to the moment a product is delivered and the case is closed out. Each phase states what you are trying to establish, not merely what to click — the point is a defensible chain of reasoning, not a checklist.

Phase 1 — Draw the legal line first

Before any collection, list the bands and services in scope and confirm each is a broadcast-for-public-reception service in your jurisdiction: aviation surveillance broadcasts, maritime safety broadcasts, amateur bands, terrestrial broadcast, weather satellite downlinks, beacon services. Exclude anything carrying private communications, encrypted or not. A good output is a written scope with a legal citation per band. Stop and take legal advice if any part of the requirement can only be satisfied by receiving communications between parties who are not addressing the public.

Phase 2 — Build the documentary picture

Pull licence records, allocation tables, tower and antenna structure registrations, and national spectrum plans for the area. This establishes what should be radiating, who holds the authorisation, at what power and from what structure, before you observe anything. A good output is an expected emitter list with licensee, frequency, power, antenna height and coordinates. Stop when the records for every service class in scope have been retrieved, noting jurisdictions where no public register exists.

Phase 3 — Characterise the terrain and propagation environment

Model coverage from the licensed parameters using terrain data and an appropriate propagation model, so you know where each licensed emitter should and should not be receivable. This turns later observations into evidence rather than curiosities. A good output is a coverage prediction per emitter with the model and terrain source stated. Stop when predictions are good enough to distinguish plausible from implausible reception at your observation points, not when the model is perfect.

Phase 4 — Select receivers and record their characteristics

Choose public receiver networks or your own compliant equipment, and record receiver location, antenna type and height, front end, gain settings, sample rate and any filtering. Occupancy results are meaningless without these. A good output is a receiver profile that another analyst could replicate. Stop and reconsider if the only way to observe the target is a receiver you do not control in a jurisdiction whose reception rules you have not checked.

Phase 5 — Establish the spectral baseline

Sample the bands in scope repeatedly across times of day and days of week to build a baseline of normal occupancy, including local noise floor and known interferers. Anomalies only exist relative to this. A good output is a baseline occupancy record with timestamps in UTC and receiver metadata attached. Stop when the baseline covers at least one full weekly cycle, since many emitters follow working patterns and weekend behaviour differs sharply.

Phase 6 — Characterise observed emitters

For each observation record centre frequency, bandwidth, modulation, symbol rate where determinable, duty cycle, signal strength and time. Match against reference guides and the licence list. Identification is by parameter set, not by guesswork. A good output is an emitter table where each entry is either matched to a licence, matched to a known signal type, or explicitly unidentified. Stop before speculating about the user of an unidentified emitter on the basis of its location alone.

Phase 7 — Reconcile observation against record

Compare what you observed with what should be present. Three categories matter: licensed emitters that are silent, unlicensed emitters that are radiating, and emitters whose parameters differ from their licence. Each has a different investigative meaning. A good output is a reconciliation table with a category and confidence per entry. Stop when discrepancies are characterised well enough to hand to the regulator, which is usually the correct next actor.

Phase 8 — Map interference and denial

Where an emitter is degraded or absent, test whether the cause is propagation, equipment, congestion or deliberate interference, using time patterns, geographic extent and correlation with events. GNSS interference in particular is well documented by open reporting networks. A good output is an interference assessment naming the discriminators used. Stop before attributing deliberate jamming without geographic and temporal evidence, since equipment faults produce very similar single-site symptoms.

Phase 9 — Correlate with other disciplines

Tie spectral findings to aviation and maritime movement data, satellite ground segment records, imagery of masts and antennas, corporate records of the licensee and open reporting. A spectrum observation acquires meaning when it is attached to infrastructure and an operator. A good output links each significant emitter to a physical structure and a legal entity where possible. Stop when the link is documented or explicitly unresolved rather than assumed.

Phase 10 — Assess your own emissions

For defensive work, inventory what your own organisation radiates: wireless networks, radio systems, vehicle telematics, wireless microphones, building systems, personal devices. Establish what is visible from the perimeter and what it discloses about occupancy, movement and operations. A good output is a prioritised emissions exposure list with mitigations. Stop when the assessment covers estate you own or control with written authorisation; do not extend it to neighbouring premises.

Phase 11 — Preserve records to an evidential standard

Retain raw recordings or spectral captures with UTC timestamps, receiver metadata, location and operator identity, hashed and stored unmodified. Interference and unlicensed transmitter cases frequently end with a regulator or a court. A good output is a preserved dataset a third party could analyse independently. Stop and delete immediately if any capture inadvertently contains private communications, recording the deletion and the circumstances.

Phase 12 — Report on the right side of the line

Write findings as environment characterisation: who is licensed, what was observed, what discrepancies exist and what interference is occurring. State explicitly which statements come from records and which from observation. Never include, paraphrase or allude to the content of private communications. A good output could be handed to the national regulator without embarrassment. Stop and escalate to counsel if a customer presses for content-derived conclusions rather than environmental ones.

The platform ships this as a step-checked workflow in playbooks.php, so progress is recorded against a case rather than held in someone’s head.

Source register: what to collect from, and how

Sources are listed with their access model so you can plan around cost and licensing before you build a dependency on them. Open means no account required; registration means a free account or API key; licensed means paid or institutional access. Always confirm current terms — licensing changes, and a source that was free for research may not be free for commercial or evidential use.

Source	Access	What it gives you	How it is used here
FCC Universal Licensing System	Open	US wireless licence records covering licensee, call sign, frequency, emission designator, power, location and expiry	Establishes who is authorised to transmit where before any observation, and identifies the licensee behind an emitter
FCC Antenna Structure Registration	Open	Registered tower and antenna structures with coordinates, heights, owners and lighting requirements	Connects an observed emitter to a physical structure and an owning entity for site-level analysis
ITU Radio Regulations and Table of Frequency Allocations	Open	International treaty allocations of spectrum to services by region, plus procedures for coordination and notification	Determines which service a given frequency is allocated to, the starting point for identifying any observation
Ofcom spectrum information and licence registers	Open	UK licence data, interface requirements, allocation tables and technical parameters for authorised transmissions	UK equivalent of the licence baseline, including the conditions under which reception is lawful
European Communications Office frequency information system	Open	European national frequency allocation tables and harmonised applications across CEPT administrations	Cross-border allocation comparison when working in or near multiple European jurisdictions
NOAA Space Weather Prediction Center	Open	Real time and archived solar, geomagnetic and ionospheric conditions with alerts, indices and propagation-relevant products	Explains HF propagation changes and absorption events that would otherwise be misread as emitter silence or interference
WebSDR network	Open	Volunteer-hosted web accessible receivers with waterfall displays across HF and some VHF and UHF segments	Second observation point for corroborating an HF signal and for propagation comparison
Signal Identification Wiki	Open	Community reference of signal waveforms with spectrograms, audio samples and modulation parameters	Matches an observed waterfall pattern to a known signal type before any speculation about its user
GPSJAM	Open	Daily maps of GNSS interference derived from aircraft navigation integrity reporting, with historical archives	Documents GNSS jamming and spoofing geography and duration without any interception
OpenSky Network	Registration	Crowd-sourced aircraft surveillance broadcast data with historical archives and research access	Cross-checks aircraft-reported navigation integrity against claimed interference areas, corroborating jamming geography independently
ITU space network filings and BR IFIC	Open	Satellite network filings including frequencies, orbital positions, coverage and administration responsible	Identifies which administration and operator is authorised for an observed satellite downlink
NOAA and EUMETSAT weather satellite documentation	Open	Published downlink frequencies, formats and schedules for meteorological satellite broadcasts intended for public reception	Reference for lawfully receiving and decoding open weather satellite transmissions intended for general public reception
IARU band plans	Open	Amateur radio band plans by region specifying modes, segments and beacon allocations	Defines what is expected in amateur segments so unusual activity is recognisable as unusual
Radio Reference database	Registration	Community-maintained frequency database of public safety, business and other licensed systems with system details	Practical cross-reference to official licence records, useful where regulator data is hard to query
ETSI harmonised standards for radio equipment	Open	Technical standards defining emission masks, spurious limits and test methods for equipment in specific bands	Determines whether an observed emitter is behaving within the standard it was certified against
SatNOGS network	Open	Open ground station network receiving and archiving satellite telemetry beacons intended for open reception	Confirms satellite downlink presence and timing from distributed receivers with recorded metadata

Prefer sources that publish a methodology and a revision history. A dataset that changes silently is a liability in any product that has to survive challenge.

Tooling

Tools commonly used against Radio Frequency Intelligence. None of these replace judgement, and each carries its own failure modes — know what a tool infers versus what it observes.

GNU Radio — Modular framework for building signal processing chains from software defined radio input; extremely flexible, with a real learning curve and no built-in legal guardrails.
SDRangel or SDR Console — General purpose receivers with demodulators, scanning and recording; convenient for characterisation, though defaults can capture more than the analyst intended.
Inspectrum and Universal Radio Hacker — Analyse recorded captures to determine modulation, symbol rate and framing; useful for parameter extraction on open signals, and easily misapplied to private traffic.
SPLAT or Radio Mobile — Terrain-based propagation and coverage prediction from licence parameters; results depend heavily on terrain data quality and clutter assumptions.
Spectrum analysers and calibrated field receivers — Provide measured power and occupancy suitable for evidential use; expensive, and calibration certificates are required for any regulatory proceeding.
Directional antennas with a documented method — Support bearing determination on a lawful target such as an unlicensed transmitter on your own estate; accuracy depends on multipath and operator technique.
QGIS — Plots licence records, coverage predictions and observation points on terrain; strong for spatial reconciliation, requires care with coordinate systems.
gr-satellites and open telemetry decoders — Decode publicly documented satellite beacons and open downlinks; strictly limited to transmissions intended for open reception.
Automated occupancy logging scripts — Sample bands on a schedule to build baselines; must be configured to exclude bands carrying private communications by design, not by later filtering.

AI skills and automation in detail

These are deterministic jobs with defined inputs and outputs, not open-ended prompting. Each is idempotent and cursor-based: interrupt one and it resumes where it stopped rather than duplicating work or losing progress.

Score Country Risk — Recomputes country risk from the weighted inputs and snapshots the result so movement over time is measurable.
Sync Intel Domains — Refreshes the reference and country-level intelligence datasets from their authorities.
Resolve Everything — Batch-resolves ASN, country, org and netblock for every IP from local reference datasets — no API calls, so it runs at millions of rows and works offline.
Summarise (Copilot) — Produces a narrative summary beside the underlying records. It explains; it never creates indicators or assigns attribution.
Generate Report — Assembles a sourced product from the current case or query, with provenance attached to each element.

A note on the boundary: the only skill that involves a language model is Summarise (Copilot), and it writes prose about records that already exist. Nothing else on this list involves generation of any kind. No indicator, relationship or attribution in the platform originates from a model. See the full skill list.

Tradecraft notes

The distinctions that separate a competent analyst from a fast one:

The line between reception and interception is legal, not technical. Ease of reception and absence of encryption are irrelevant. What matters is whether the transmission is broadcast for general reception or a communication between parties.
The paper picture comes first. Licence and structure records tell you what should be present, who is responsible and at what power. An observation reconciled against a record is intelligence; an observation without a record is a curiosity that invites speculation.
Receiver metadata is half the finding. Location, antenna, gain and front end determine what you could have heard. Occupancy measurements without a receiver profile cannot be compared with anything, including your own earlier measurements.
Silence is a finding. A licensed emitter that stops radiating tells you something about the site, the operator or the environment, and it is often more informative than a new signal, but it can only be detected against a documented baseline.
Distinguish denial from failure with geography and time. Deliberate interference usually affects an area and follows an operational pattern; equipment failure affects one emitter and does not respect boundaries. A single degraded receiver proves neither.
Never record what you must not receive. Configure captures to exclude private communications bands by construction. Discovering afterwards that a wideband recording contains private traffic creates a legal problem that filtering does not solve.
Refer enforcement to the regulator. Unlicensed transmitters, interference and jamming are the national regulator's jurisdiction, and joint work gives access to compelled records and lawful enforcement monitoring that no private actor can replicate.

Measuring whether it is working

Capability claims should be falsifiable. These are the measures that show whether work on Radio Frequency Intelligence is producing anything, and they are worth baselining before you change process or tooling.

Proportion of observed emitters reconciled to a licence record or a documented signal type, rather than left unidentified in the product.
Baseline coverage, measured as the share of monitored bands and sites with a documented weekly occupancy baseline.
Time from an interference event beginning to it being detected and characterised, which determines whether it can be reported while still occurring.
Rate of scope violations, meaning captures found to contain private communications, tracked as a compliance defect with mandatory review.
Number of regulator referrals accepted and acted upon, as a measure of whether the technical product is usable by the body with enforcement powers.
Reduction in unauthorised or unnecessary emissions from your own estate after a defensive assessment, measured by repeat survey.
Reproducibility of occupancy measurements, tested by repeating a survey with the documented receiver profile and comparing results.

Beware of measuring volume alone. Indicator counts and report counts rise easily and say little; time-to-attribution, proportion of findings that survive review, and how often a product changed a decision say a great deal.

Common pitfalls

Assuming a licence record reflects reality; licensed sites go dark, move, or operate at parameters different from those authorised
Misidentifying signals from waterfall appearance alone, where many distinct modes look near-identical at low resolution
Ignoring propagation conditions, so a distant skywave signal is attributed to a local emitter or vice versa
Treating receiver network coverage as unbiased when public receivers cluster in wealthy, populated and connected areas
Attributing interference to deliberate jamming when faulty equipment, harmonics and intermodulation are far more common causes
Drifting from open reception into decoding or logging private communications, which is unlawful regardless of technical ease

Legal and ethical considerations

This discipline is lawful only when it stays on the reception side of a bright line. Intercepting, decoding, recording or disclosing private communications is a criminal offence in most jurisdictions, including under wiretap and computer misuse statutes, and it makes no difference that the signal was unencrypted or easy to receive. Confine work to published records and to transmissions intended for general reception, such as broadcast, aviation, maritime and amateur services. Direction-finding and receiving equipment may itself be licence-controlled or export controlled.

Data integrity: no fabrication, no drift, no hallucination

Intelligence that cannot be traced back to a source is not intelligence, it is assertion. Everything in this entry — and everything in the platform behind it — is built on a small number of non-negotiable rules.

Provenance on every record

Every indicator carries the source that supplied it, a first-seen and last-seen timestamp, and a sighting count. Where several feeds report the same artifact, each contribution is recorded separately rather than collapsed, so you can see whether a finding rests on one source or twelve. Source attribution travels with the data into every export, so a recipient can audit a claim without asking you for the working.

Nothing is invented to fill a gap

If the platform has no data for Radio Frequency Intelligence, it says so. Empty is displayed as empty — never padded with plausible-looking placeholder values, sample records or illustrative examples that a reader might mistake for observations. A dashboard with no rows is a true statement about collection coverage, and it is treated as a gap to close, not a blemish to hide.

Scoring is deterministic and reproducible

Threat scores, reputation grades and risk tiers are computed from stated inputs with fixed weights, not estimated. The same inputs always produce the same output, and the formula is visible rather than a black box. Aggregates are cached with an explicit time-to-live so a figure on screen is never silently stale — and when a heavy query exceeds its time budget the platform serves the last known-good value and labels it, rather than inventing a fresh number or hanging.

Where AI is used, and where it is not

Language models summarise and explain. They do not create indicators, assign attribution or manufacture relationships. No IP address, wallet, hash or identity in the platform originates from a model — every one is ingested from a named feed, resolved from a reference dataset, or entered by an analyst with a source recorded. Copilot output is presented as narrative alongside the underlying records, never in place of them, so a reader can always check the summary against the evidence.

Guarding against drift

Enrichment is additive and timestamped rather than overwriting. Reference data — sanctions lists, allocations, taxonomies — is re-synchronised from the authority on a schedule instead of being edited in place, so local copies cannot quietly diverge from the source of truth. Attribution is recorded with a confidence level and the reporting it rests on, and inferred relationships are labelled as inferred. When a source retracts or corrects, the correction propagates rather than leaving a stale assertion behind.

What this means for you

You can put a finding from this platform in front of a regulator, a court, a board or a partner agency and show where each element came from. That is the standard the tooling is built to — because in this work, being confidently wrong is more damaging than being usefully uncertain.

By the numbers

The taxonomy this entry belongs to is not a marketing list — it is the actual structure of the platform: 52 mission domains, 52 intelligence disciplines and 65 data points, each with a live dashboard behind it. Supporting that: 18 indicator types, 14 playbooks, 16 AI skills, 18 export formats and a 30-step automated pipeline.

This particular entry connects directly to 6 data points, 5 mission domains, 3 closely related entries — every one of them a tag you can follow, and a dashboard you can open.

Questions analysts actually ask

Where exactly is the line between reception and interception?

It is drawn by statute, not by technology. Services broadcast for general reception, such as terrestrial broadcast, aircraft surveillance broadcasts, maritime safety broadcasts, amateur transmissions, open weather satellite downlinks and navigation beacons, may generally be received. Communications between parties who are not addressing the public may not be intercepted, recorded, decoded or disclosed without lawful authority, and it makes no difference that the transmission was unencrypted, easy to receive or accidentally captured. Some jurisdictions go further and restrict even the possession of decoding equipment. Check the specific national law before you switch a receiver on.

Can I legally monitor police or emergency services radio?

In many jurisdictions no, and the position varies sharply. Some countries permit reception of unencrypted public safety transmissions, some prohibit it outright, and several permit reception but criminalise use of the information or disclosure to a third party, particularly in furtherance of an offence. Modern systems are usually encrypted, and attempting to decrypt is a separate and more serious offence everywhere. For professional work, treat public safety traffic as out of scope by default and obtain the position in writing from counsel if a legitimate requirement genuinely depends on it.

Is receiving ADS-B or AIS the same discipline?

It uses the same reception skills but sits in a clearly lawful lane, because both are cooperative safety broadcasts transmitted specifically for reception by anyone. That is why aviation and maritime intelligence can rely on them openly. The distinction is worth stating in products, because customers often assume that if you can receive aircraft positions you can receive anything. Redistribution of received data may still be restricted by the terms of the aggregator you obtained it from, which is a contractual rather than a criminal constraint.

How do I identify an unknown signal responsibly?

Characterise it by parameters rather than by narrative: centre frequency, bandwidth, modulation, symbol rate, duty cycle, polarisation if determinable, and time pattern. Compare against allocation tables, licence records and public signal reference collections. If the parameters match a known type, say so with the evidence. If they do not, report it as unidentified with its parameters. Do not attempt to demodulate content that may be a private communication in order to identify it, and do not infer the operator from location alone, which is how misattribution happens.

What can I lawfully do about a suspected jammer near my site?

Document and refer. Record the affected services, the geographic extent, the timing pattern and the effect, using your own receivers on your own property and public interference reporting datasets. Then report it to the national regulator, which holds the enforcement powers and the lawful monitoring authority. Do not attempt to locate it by entering property you do not control, and never deploy counter-jamming or transmit in response, which is itself an offence. If the interference affects safety of life services, treat it as urgent and escalate through the regulator immediately.

How do I assess my own organisation's emissions lawfully?

Get written authorisation from the estate owner and from your own management, define the perimeter of the assessment as property you own or control, and inventory what is radiating: wireless networks, radio systems, building and industrial control links, wireless peripherals, vehicle telematics. Measure what is receivable from the perimeter. Where staff personal devices are involved, employee privacy law applies, so measure the radio environment rather than attributing emissions to individuals. Report as exposure and mitigation, and delete any capture that contains communications content.

Are public receiver networks safe to rely on for evidence?

They are excellent for observation and corroboration and weak for evidence. You do not control the receiver, its calibration, its antenna or its logging, and the operator may be in a jurisdiction with different reception rules. Use them to establish that a signal was present, to compare propagation across sites and to guide your own collection. For anything that may reach a regulator or court, use calibrated equipment you control, with recorded methodology, timestamps and an operator who can testify to the process.

Standards, frameworks and further reading

Work that references a recognised framework is easier to defend, easier to hand over, and easier for a partner to consume:

ITU Radio Regulations, the binding international treaty allocating spectrum to services by region and governing interference and coordination.
National wiretap and interception statutes, such as the US Wiretap Act and Electronic Communications Privacy Act and the UK Investigatory Powers Act, which define the reception and interception boundary.
US Communications Act section 705 and equivalent provisions, which restrict divulgence of intercepted radio communications even where reception was incidental.
UK Wireless Telegraphy Act, which prohibits unauthorised use of receiving apparatus to obtain information about the contents of messages not intended for the recipient.
EU Radio Equipment Directive and national equipment authorisation rules, which govern what receiving and transmitting equipment may lawfully be placed on the market and used.
Wassenaar Arrangement dual-use controls, which cover certain interception, direction-finding and cryptanalytic equipment and technology for export purposes.
ETSI harmonised standards for radio equipment, defining emission masks and spurious limits against which observed emitter behaviour can be judged.
ITU-R recommendations on spectrum monitoring, notably the Spectrum Monitoring Handbook, which set methodology for occupancy measurement and direction finding.

References

Primary sources and authoritative references for this entry. Publishers revise and retire material, so treat the retrieval date as part of the citation and re-check before relying on any of it in a formal product.

Universal Licensing System — US Federal Communications Commission. Public database of US wireless licences with technical parameters and licensee details
Radio Regulations and Table of Frequency Allocations — International Telecommunication Union. Treaty-level allocation of spectrum to radio services and the procedures governing interference
Spectrum management information and licence registers — Ofcom. UK spectrum allocations, licence conditions and interface requirements
Signal Identification Guide — Signal Identification Wiki community. Reference collection of signal waveforms, spectrograms and parameters for identification
GPSJAM interference maps — GPSJAM. Daily global maps of GNSS interference derived from aircraft navigation integrity reports
OpenSky Network research data — OpenSky Network. Archived aircraft surveillance broadcast data used to corroborate navigation interference
Harmonised standards for radio equipment — ETSI. Technical standards defining emission limits and test methods for equipment in specific bands
SatNOGS open ground station network — Libre Space Foundation. Distributed network receiving and archiving openly documented satellite beacons
IARU region band plans — International Amateur Radio Union. Amateur band usage plans defining expected modes and segments by region

Link integrity: every reference above was verified with a live request when this page was generated. Where a publisher had moved or withdrawn a document, the link was repointed at a preserved copy in the Internet Archive and marked as archived. Anything with no reachable copy anywhere had its link removed rather than left to rot — the source is still credited, it simply cannot be linked.

Put it into practice

The Quantus Intel threat intelligence platform operationalises this entry: combines licence records, allocation tables and open receiver observations into a baseline you can alert against. Explore the platform, or browse the rest of the library by following any tag above.