IP Address: Data Point Intelligence Guide
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
Criminal Intelligence
Domain Name: Data Point Intelligence Guide
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
Legal Intelligence (LEGINT): Intelligence Discipline Guide
Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will...
Criminal Intelligence (CRIMINT): Intelligence Discipline Guide
Criminal intelligence is not case notes with better formatting. It is the discipline that turns scattered incidents into an articulable...
Healthcare & Drug Security: Mission Domain Intelligence Guide
A hospital that cannot access its imaging system diverts ambulances. A falsified antimalarial with no active ingredient kills quietly, one...
Maritime Piracy: Mission Domain Intelligence Guide
Piracy risk is not a map. It is a product of monsoon windows, mothership range, freeboard and speed, and how...
Environmental Crime: Mission Domain Intelligence Guide
Illegal gold rarely travels as gold. It travels as scrap, as jewellery, as a refinery invoice in a third country....
Border Security & Migration: Mission Domain Intelligence Guide
A migration surge rarely begins at the border. It begins weeks earlier in a Telegram price list, a change in...
Counter-Terrorism: Mission Domain Intelligence Guide
Attack planning leaves a logistics trail before it leaves an ideological one: a rented van, a chemical purchase, a reconnaissance...
Fraud & Identity: Mission Domain Intelligence Guide
The synthetic identity that just passed your onboarding checks has a credit file, a utility bill and eighteen months of...
Forced Labour & Modern Slavery: Mission Domain Intelligence Guide
Forced labour is rarely announced by chains and locked doors. It shows up as recruitment fees, retained passports, and a...
Art & Antiquities Trafficking: Mission Domain Intelligence Guide
Looted antiquities rarely arrive with a forged export licence. They arrive with a vague provenance line, usually a private European...
Counterfeiting & IP Crime: Mission Domain Intelligence Guide
A counterfeit is not a bad copy. It is a parallel supply chain with real factories, freight forwarders, payment processors...
Kidnap, Hostage & Extortion: Mission Domain Intelligence Guide
A kidnap-for-ransom market has a price list, a broker layer and a settlement rail. Treat it as an economy rather...
Gangs & Street Crime: Mission Domain Intelligence Guide
Retaliation after a stabbing is usually measured in days, sometimes hours. The intelligence question is not who did it but...
Child Protection: Mission Domain Intelligence Guide
The pattern that ends most sextortion cases is depressingly consistent: contact within hours, escalation within a day, and a payment...
Wildlife Trafficking: Mission Domain Intelligence Guide
A container declared as plastic scrap weighing four tonnes more than plastic scrap should weigh is the whole case. The...
Weapons Trafficking: Mission Domain Intelligence Guide
Most weapons in an illicit market were legal once. The investigative question is not where the gun came from but...
Human Trafficking: Mission Domain Intelligence Guide
Very few trafficking victims arrive at a police station and describe themselves as trafficked. What arrives first is a wage...
Drug Trafficking: Mission Domain Intelligence Guide
A cluster of six overdoses in one town over a weekend is not a public health footnote. It is the...
Organized Crime: Mission Domain Intelligence Guide
Organised crime leaves paperwork. Not confessions, but a notary who appears in eleven unrelated share transfers, a haulage firm with...
Insider Threat: Mission Domain Intelligence Guide
The insider case that goes to court usually has a boring first indicator: an access request that was granted because...
Dark Web Intel: Mission Domain Intelligence Guide
Most of what is posted on a criminal forum is advertising. The intelligence value is not in the claim but...
Ransomware: Mission Domain Intelligence Guide
A leak site countdown is a negotiating instrument, not a report. Half the value of ransomware intelligence lies in knowing...
Cyber Crime: Mission Domain Intelligence Guide
A single business email compromise crew does not need malware. It needs a lookalike domain registered on a Tuesday, a...
