Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
Critical Infrastructure
Facility / Site: Data Point Intelligence Guide
A facility is where corporate paper meets physical reality. Registries tell you who claims the site; the ground truth tells...
GPS Coordinates: Data Point Intelligence Guide
Six decimal places is a doorstep. Two is a district. Precision in a coordinate is a decision about harm, not...
Location / Coordinates: Data Point Intelligence Guide
A place name is not a point. It is a claim about where something happened, carrying a resolution, a source...
CVE / Vulnerability: Data Point Intelligence Guide
A CVE identifier is a label for a flaw, not a measure of your risk. Treating the two as the...
ASN: Data Point Intelligence Guide
The ASN is where infrastructure stops being anonymous. Every packet on the public internet is routed by an organisation that...
IP Address: Data Point Intelligence Guide
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
Measurement & Signature Intel (MASINT): Intelligence Discipline Guide
Imagery shows you the object. Measurement and signature intelligence tells you what the object is doing, how hot it is...
Technical Intelligence (TECHINT): Intelligence Discipline Guide
Every device carries a confession: certification filings, component markings, firmware strings and design choices. Technical intelligence reads that confession to...
Energy Intelligence (ENERGYINT): Intelligence Discipline Guide
Energy is where physics, contracts and politics meet, and all three leave records. Energy intelligence reads the flows and the...
Geospatial Intelligence (GEOINT): Intelligence Discipline Guide
Place is the one attribute nearly every other data point carries. Geospatial intelligence makes place answer questions: what is here,...
Risk Intelligence (RISKINT): Intelligence Discipline Guide
Risk intelligence is what stops a briefing ending with it depends. It converts what you know, and what you do...
Vulnerability Intelligence (VULNINT): Intelligence Discipline Guide
There are more vulnerabilities than you will ever patch. Vulnerability intelligence exists to tell you which few hundred actually matter...
Cyber Intelligence (CYBINT): Intelligence Discipline Guide
Cyber intelligence is what turns telemetry into a story about an adversary. Without it you have logs. With it you...
RF & Signals Intel: Mission Domain Intelligence Guide
Aircraft over a whole region started reporting navigation integrity failures within the same hour. No one announced anything. The spectrum...
Space & Satellite Intel: Mission Domain Intelligence Guide
A satellite manoeuvred twice in one week and ended up station-keeping four kilometres from another operator's communications bird. Nothing was...
Water Security: Mission Domain Intelligence Guide
You can watch a diplomatic crisis fill up. Reservoir altimetry showed the impoundment rate months before the downstream government said...
Energy Security: Mission Domain Intelligence Guide
Two things tell you a country is in trouble before its ministers do: how fast its gas storage is emptying,...
Military & Defense: Mission Domain Intelligence Guide
Order of battle used to be a classified product. Now a unit's deployment is visible from insignia in a soldier's...
Supply Chain Security: Mission Domain Intelligence Guide
You do not have one supply chain. You have a graph nobody has ever drawn. The compromise usually enters at...
Critical Infrastructure: Mission Domain Intelligence Guide
In an office network the worst outcome is data loss. On a substation or a water treatment line the worst...
Threat Analysis: Mission Domain Intelligence Guide
An indicator list is not intelligence. Intelligence is a judgement, held to a stated confidence, that changes what a decision-maker...
Malware: Mission Domain Intelligence Guide
A hash tells you a file was seen. A configuration extraction tells you the campaign identifier, the operator's infrastructure and,...
Ransomware: Mission Domain Intelligence Guide
A leak site countdown is a negotiating instrument, not a report. Half the value of ransomware intelligence lies in knowing...
APT / Espionage: Mission Domain Intelligence Guide
The median intrusion that matters is not loud. It is a valid credential, a legitimate administrative tool and eleven months...
