Biometric Identifier: Data Point Intelligence Guide
Biometrics are the only identifier a person cannot change after it leaks. That single property should govern every decision you...
Email Address
National ID Number: Data Point Intelligence Guide
A national ID number is the closest thing that exists to a primary key for a human being. It is...
Device / Advertising ID: Data Point Intelligence Guide
An advertising identifier was designed to be a resettable, privacy-preserving marketing token. In practice it became one of the most...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Physical Address: Data Point Intelligence Guide
A physical address is where the digital investigation touches the ground. It is also where thousands of shell companies quietly...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Email Intelligence (EMAILINT): Intelligence Discipline Guide
An email address is three things at once: an identifier, a routing instruction and a piece of infrastructure history. Email...
Cyber Intelligence (CYBINT): Intelligence Discipline Guide
Cyber intelligence is what turns telemetry into a story about an adversary. Without it you have logs. With it you...
Breach Intelligence (BREACHINT): Intelligence Discipline Guide
Most intrusions begin with a password that already worked somewhere else. Breach intelligence is the discipline of knowing which of...
Attack Surface Intelligence (ASMINT): Intelligence Discipline Guide
You cannot defend what you do not know you own. Attack surface intelligence is the discipline of inventorying your exposed...
Economic Espionage: Mission Domain Intelligence Guide
Industrial espionage rarely looks like a break-in. It looks like a departing researcher, a joint venture with an unusual data...
Fraud & Identity: Mission Domain Intelligence Guide
The synthetic identity that just passed your onboarding checks has a credit file, a utility bill and eighteen months of...
Insider Threat: Mission Domain Intelligence Guide
The insider case that goes to court usually has a boring first indicator: an access request that was granted because...
Operational Security: Mission Domain Intelligence Guide
Investigations are compromised by their own footprint far more often than by adversary brilliance. A referrer header, a reused persona,...
Cyber Crime: Mission Domain Intelligence Guide
A single business email compromise crew does not need malware. It needs a lookalike domain registered on a Tuesday, a...
