Credential / API Token: Data Point Intelligence Guide
An exposed credential is not a curiosity to explore. It is an incident with a clock running, and the only...
Identity Intelligence
Messaging Handle: Data Point Intelligence Guide
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Court Case / Docket: Data Point Intelligence Guide
Court records are the only open dataset where an adversary is compelled to describe their own conduct under oath. Analysts...
Password / Credential: Data Point Intelligence Guide
An exposed credential is a defensive workload, not an offensive opportunity. The only question worth asking is which of your...
Biometric Identifier: Data Point Intelligence Guide
Biometrics are the only identifier a person cannot change after it leaks. That single property should govern every decision you...
National ID Number: Data Point Intelligence Guide
A national ID number is the closest thing that exists to a primary key for a human being. It is...
Device / Advertising ID: Data Point Intelligence Guide
An advertising identifier was designed to be a resettable, privacy-preserving marketing token. In practice it became one of the most...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Subdomain: Data Point Intelligence Guide
Organisations defend the domain they advertise and forget the hundred hostnames beneath it. Subdomain enumeration is where the real attack...
Telephony Intelligence (TELINT): Intelligence Discipline Guide
A phone number is a routing address issued under a published plan, not a person. Telephony intelligence extracts everything the...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Email Intelligence (EMAILINT): Intelligence Discipline Guide
An email address is three things at once: an identifier, a routing instruction and a piece of infrastructure history. Email...
Border Security & Migration: Mission Domain Intelligence Guide
A migration surge rarely begins at the border. It begins weeks earlier in a Telegram price list, a change in...
Transnational Repression: Mission Domain Intelligence Guide
A dissident's family is visited at home, an INTERPOL notice appears, and a spyware link arrives by messenger, all within...
Fraud & Identity: Mission Domain Intelligence Guide
The synthetic identity that just passed your onboarding checks has a credit file, a utility bill and eighteen months of...
Anti-Money Laundering: Mission Domain Intelligence Guide
Money laundering intelligence is not about spotting dirty money. It is about spotting structures whose only purpose is to make...
Child Protection: Mission Domain Intelligence Guide
The pattern that ends most sextortion cases is depressingly consistent: contact within hours, escalation within a day, and a payment...
Human Trafficking: Mission Domain Intelligence Guide
Very few trafficking victims arrive at a police station and describe themselves as trafficked. What arrives first is a wage...
Insider Threat: Mission Domain Intelligence Guide
The insider case that goes to court usually has a boring first indicator: an access request that was granted because...
Operational Security: Mission Domain Intelligence Guide
Investigations are compromised by their own footprint far more often than by adversary brilliance. A referrer header, a reused persona,...
