News Intelligence (NEWSINT): Intelligence Discipline Guide
Reporting is evidence of what was published, by whom, when and sourced how. Treated that way it is one of...
Event / Incident
Disinformation Intelligence (DISINFOINT): Intelligence Discipline Guide
The finding is rarely that a claim is false. It is that a set of accounts, sites and outlets behaved...
Telephony Intelligence (TELINT): Intelligence Discipline Guide
A phone number is a routing address issued under a published plan, not a person. Telephony intelligence extracts everything the...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Social Media Intelligence (SOCMINT): Intelligence Discipline Guide
Social platforms record behaviour, not truth: what was posted, when, by an account, to an audience. Social media intelligence keeps...
Human Intelligence (HUMINT): Intelligence Discipline Guide
Human intelligence is the only discipline where the source can be harmed by your success. Every rule in the tradecraft...
Medical Intelligence (MEDINT): Intelligence Discipline Guide
Medical intelligence is not about outbreaks. It is about whether the hospital your team would actually be taken to can...
Epidemiological Intelligence (EPIINT): Intelligence Discipline Guide
An outbreak is visible in reporting well before it is measurable in statistics. Epidemiological intelligence is the discipline of reading...
Government Intelligence (GOVINT): Intelligence Discipline Guide
Decisions are made by named people, in named bodies, under written procedures. Government intelligence is knowing which body, which person...
Imagery Intelligence (IMINT): Intelligence Discipline Guide
An image is a measurement, not a picture. Imagery intelligence extracts what can be measured, then defends out loud the...
Geospatial Intelligence (GEOINT): Intelligence Discipline Guide
Place is the one attribute nearly every other data point carries. Geospatial intelligence makes place answer questions: what is here,...
Risk Intelligence (RISKINT): Intelligence Discipline Guide
Risk intelligence is what stops a briefing ending with it depends. It converts what you know, and what you do...
Reference Intelligence (REFINT): Intelligence Discipline Guide
Most wrong conclusions can be traced back to two records an analyst believed were about the same thing. Reference intelligence...
Open Source Intelligence (OSINT): Intelligence Discipline Guide
Open source is not free intelligence. It is unvalidated raw material available to anyone, including your adversary, and the discipline...
Financial Intelligence (FININT): Intelligence Discipline Guide
Follow the money is a cliche because it works. Financial intelligence is the discipline of following value through the institutions...
Economic Intelligence (ECONINT): Intelligence Discipline Guide
Economic intelligence is how you see a disruption forming while it is still a shipping rate, an export licence and...
Cryptocurrency Intelligence (CRYPTINT): Intelligence Discipline Guide
Public blockchains keep a permanent, complete record of every transfer. The hard part was never the data. It is knowing...
Meteorological Intelligence (METOCINT): Intelligence Discipline Guide
Weather is the one adversary that files its own forecast. Meteorological intelligence turns that forecast into decisions about people, assets...
Environmental Intelligence (ENVINT): Intelligence Discipline Guide
Physical conditions decide whether a site stays operational, whether a supplier ships, and whether a claim about the ground is...
Vulnerability Intelligence (VULNINT): Intelligence Discipline Guide
There are more vulnerabilities than you will ever patch. Vulnerability intelligence exists to tell you which few hundred actually matter...
Threat Actor Intelligence (ACTORINT): Intelligence Discipline Guide
Infrastructure changes weekly and tooling changes quarterly, but habits almost never change. Actor intelligence is the discipline of tracking what...
Dark Web Intelligence (DARKINT): Intelligence Discipline Guide
The dark web is not a place, it is an access-control problem. Most of what matters happens in venues no...
Cyber Intelligence (CYBINT): Intelligence Discipline Guide
Cyber intelligence is what turns telemetry into a story about an adversary. Without it you have logs. With it you...
Risk Analysis: Mission Domain Intelligence Guide
The evacuation decision was made three days after the intelligence supported it. Nobody lacked information. What was missing was a...
Election Security & PSYOP: Mission Domain Intelligence Guide
The claim that the count was rigged was already trending three weeks before polls opened. The infrastructure held perfectly. The...
