Cryptocurrency Address: Data Point Intelligence Guide
A blockchain address is a pseudonymous account with a permanent, public and complete transaction history. That combination makes it the...
Fraud & Identity
Password / Credential: Data Point Intelligence Guide
An exposed credential is a defensive workload, not an offensive opportunity. The only question worth asking is which of your...
Data Breach: Data Point Intelligence Guide
A breach is not a single event, it is a dataset with a life of its own. The incident ends...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
URL: Data Point Intelligence Guide
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
Domain Name: Data Point Intelligence Guide
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
Telephony Intelligence (TELINT): Intelligence Discipline Guide
A phone number is a routing address issued under a published plan, not a person. Telephony intelligence extracts everything the...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Email Intelligence (EMAILINT): Intelligence Discipline Guide
An email address is three things at once: an identifier, a routing instruction and a piece of infrastructure history. Email...
Financial Intelligence (FININT): Intelligence Discipline Guide
Follow the money is a cliche because it works. Financial intelligence is the discipline of following value through the institutions...
Breach Intelligence (BREACHINT): Intelligence Discipline Guide
Most intrusions begin with a password that already worked somewhere else. Breach intelligence is the discipline of knowing which of...
Healthcare & Drug Security: Mission Domain Intelligence Guide
A hospital that cannot access its imaging system diverts ambulances. A falsified antimalarial with no active ingredient kills quietly, one...
Fraud & Identity: Mission Domain Intelligence Guide
The synthetic identity that just passed your onboarding checks has a credit file, a utility bill and eighteen months of...
Anti-Money Laundering: Mission Domain Intelligence Guide
Money laundering intelligence is not about spotting dirty money. It is about spotting structures whose only purpose is to make...
Financial Crime: Mission Domain Intelligence Guide
Most financial crime cases are not cracked by a clever trade reconstruction. They are cracked by an entity that should...
Counterfeiting & IP Crime: Mission Domain Intelligence Guide
A counterfeit is not a bad copy. It is a parallel supply chain with real factories, freight forwarders, payment processors...
Organized Crime: Mission Domain Intelligence Guide
Organised crime leaves paperwork. Not confessions, but a notary who appears in eleven unrelated share transfers, a haulage firm with...
Insider Threat: Mission Domain Intelligence Guide
The insider case that goes to court usually has a boring first indicator: an access request that was granted because...
Dark Web Intel: Mission Domain Intelligence Guide
Most of what is posted on a criminal forum is advertising. The intelligence value is not in the claim but...
Cyber Crime: Mission Domain Intelligence Guide
A single business email compromise crew does not need malware. It needs a lookalike domain registered on a Tuesday, a...
