Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Court records are the only open dataset where an adversary is compelled to describe their own conduct under oath. Analysts...
A place name is not a point. It is a claim about where something happened, carrying a resolution, a source...
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will...
Criminal intelligence is not case notes with better formatting. It is the discipline that turns scattered incidents into an articulable...
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...