Paste / Leak Post: Data Point Intelligence Guide
The paste is usually the first time stolen data touches the open internet, and often the only time before it...
Criminal Intelligence
Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
Messaging Handle: Data Point Intelligence Guide
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Real Property / Parcel: Data Point Intelligence Guide
Property is the asset that cannot be moved offshore overnight. Deeds, charges and valuations leave a permanent, dated, jurisdictional trail....
Court Case / Docket: Data Point Intelligence Guide
Court records are the only open dataset where an adversary is compelled to describe their own conduct under oath. Analysts...
Image / Photograph: Data Point Intelligence Guide
Every photograph makes two claims: this is what it shows, and this is where and when it was taken. Both...
License Plate: Data Point Intelligence Guide
A plate identifies a registration, not a person and not permanently a vehicle. It is the most privacy-loaded identifier most...
Vessel / Ship: Data Point Intelligence Guide
A ship can change its name, its flag and its owner in a week. The IMO number assigned at build...
Shipping Container: Data Point Intelligence Guide
Eleven characters follow a steel box from a factory yard to a customs hold. The check digit tells you in...
Shipment / Bill of Lading: Data Point Intelligence Guide
A bill of lading names the shipper, the consignee and the goods on the same page. It is the closest...
HS Commodity Code: Data Point Intelligence Guide
Six digits decide the tariff, the licence and the level of scrutiny. Getting them wrong is how controlled goods travel...
Location / Coordinates: Data Point Intelligence Guide
A place name is not a point. It is a claim about where something happened, carrying a resolution, a source...
Cryptocurrency Address: Data Point Intelligence Guide
A blockchain address is a pseudonymous account with a permanent, public and complete transaction history. That combination makes it the...
Company / Organization: Data Point Intelligence Guide
Companies are how money, liability and control get organised. Follow the entity and you find the people who preferred not...
Password / Credential: Data Point Intelligence Guide
An exposed credential is a defensive workload, not an offensive opportunity. The only question worth asking is which of your...
Data Breach: Data Point Intelligence Guide
A breach is not a single event, it is a dataset with a life of its own. The incident ends...
Onion / Hidden Service: Data Point Intelligence Guide
An onion address is a public key, not a location. Everything you can learn about a hidden service comes from...
File Hash: Data Point Intelligence Guide
A file hash is the cheapest reliable fact in cyber threat intelligence: fixed length, unambiguous, and either it matches or...
National ID Number: Data Point Intelligence Guide
A national ID number is the closest thing that exists to a primary key for a human being. It is...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
URL: Data Point Intelligence Guide
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
