NCMEC CyberTipline: Intelligence Source Guide
The CyberTipline is the statutory funnel through which US service providers report apparent child sexual exploitation. Its published statistics are...
Child Protection
Internet Watch Foundation: Intelligence Source Guide
The IWF is the UK's hotline and assessment body for child sexual abuse imagery, and the operator of the industry...
INTERPOL ICSE / Crimes Against Children: Intelligence Source Guide
INTERPOL's International Child Sexual Exploitation database is the global victim identification system, accessible only to specialist investigators in connected countries....
INHOPE Hotline Network: Intelligence Source Guide
INHOPE is the international association of national hotlines that receive public reports of child sexual abuse material and route them...
Messaging Handle: Data Point Intelligence Guide
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Image / Photograph: Data Point Intelligence Guide
Every photograph makes two claims: this is what it shows, and this is where and when it was taken. Both...
Onion / Hidden Service: Data Point Intelligence Guide
An onion address is a public key, not a location. Everything you can learn about a hidden service comes from...
File Hash: Data Point Intelligence Guide
A file hash is the cheapest reliable fact in cyber threat intelligence: fixed length, unambiguous, and either it matches or...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Legal Intelligence (LEGINT): Intelligence Discipline Guide
Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will...
Criminal Intelligence (CRIMINT): Intelligence Discipline Guide
Criminal intelligence is not case notes with better formatting. It is the discipline that turns scattered incidents into an articulable...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Social Media Intelligence (SOCMINT): Intelligence Discipline Guide
Social platforms record behaviour, not truth: what was posted, when, by an account, to an audience. Social media intelligence keeps...
Human Intelligence (HUMINT): Intelligence Discipline Guide
Human intelligence is the only discipline where the source can be harmed by your success. Every rule in the tradecraft...
Dark Web Intelligence (DARKINT): Intelligence Discipline Guide
The dark web is not a place, it is an access-control problem. Most of what matters happens in venues no...
Gangs & Street Crime: Mission Domain Intelligence Guide
Retaliation after a stabbing is usually measured in days, sometimes hours. The intelligence question is not who did it but...
Child Protection: Mission Domain Intelligence Guide
The pattern that ends most sextortion cases is depressingly consistent: contact within hours, escalation within a day, and a payment...
Human Trafficking: Mission Domain Intelligence Guide
Very few trafficking victims arrive at a police station and describe themselves as trafficked. What arrives first is a wage...
Dark Web Intel: Mission Domain Intelligence Guide
Most of what is posted on a criminal forum is advertising. The intelligence value is not in the claim but...
