START Terrorism Research: Intelligence Source Guide
START at the University of Maryland publishes the Global Terrorism Database and a family of radicalisation datasets built by human...
Extremism & Radicalization
GNET (Global Network on Extremism & Tech): Intelligence Source Guide
GNET is the academic research arm of the Global Internet Forum to Counter Terrorism, led by ICSR at King's College...
Global Terrorism Database: Intelligence Source Guide
The GTD is the longest-running open event dataset on terrorist attacks, coded incident by incident from public reporting since 1970....
Keyword / Narrative: Data Point Intelligence Guide
A keyword is a hypothesis about language. Track the wrong string and you will measure nothing at all, very confidently....
Messaging Handle: Data Point Intelligence Guide
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Video: Data Point Intelligence Guide
A video is not evidence of what its caption claims. It is a container of measurable facts, and those facts...
Image / Photograph: Data Point Intelligence Guide
Every photograph makes two claims: this is what it shows, and this is where and when it was taken. Both...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
News Intelligence (NEWSINT): Intelligence Discipline Guide
Reporting is evidence of what was published, by whom, when and sourced how. Treated that way it is one of...
Disinformation Intelligence (DISINFOINT): Intelligence Discipline Guide
The finding is rarely that a claim is false. It is that a set of accounts, sites and outlets behaved...
Social Media Intelligence (SOCMINT): Intelligence Discipline Guide
Social platforms record behaviour, not truth: what was posted, when, by an account, to an audience. Social media intelligence keeps...
Dark Web Intelligence (DARKINT): Intelligence Discipline Guide
The dark web is not a place, it is an access-control problem. Most of what matters happens in venues no...
Disinformation / IO: Mission Domain Intelligence Guide
Two hundred accounts posted the same seven-word phrase within ninety seconds. None of them had existed six weeks earlier. The...
Election Security & PSYOP: Mission Domain Intelligence Guide
The claim that the count was rigged was already trending three weeks before polls opened. The infrastructure held perfectly. The...
Transnational Repression: Mission Domain Intelligence Guide
A dissident's family is visited at home, an INTERPOL notice appears, and a spyware link arrives by messenger, all within...
Extremism & Radicalization: Mission Domain Intelligence Guide
Radicalisation is not a conveyor belt. It is a set of grievances, communities and content economies, and most of what...
Counter-Terrorism: Mission Domain Intelligence Guide
Attack planning leaves a logistics trail before it leaves an ideological one: a rented van, a chemical purchase, a reconnaissance...
