Global Terrorism Database: Intelligence Source Guide
The GTD is the longest-running open event dataset on terrorist attacks, coded incident by incident from public reporting since 1970....
Kidnap, Hostage & Extortion
ACLED Conflict Events: Intelligence Source Guide
ACLED codes individual political violence and protest events - date, place, actors, sub-event type and a conservative fatality figure -...
Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
Messaging Handle: Data Point Intelligence Guide
A messaging handle outlives phone numbers, domains and marketplaces. It is the thread that ties an operation together across years...
Location / Coordinates: Data Point Intelligence Guide
A place name is not a point. It is a claim about where something happened, carrying a resolution, a source...
Cryptocurrency Address: Data Point Intelligence Guide
A blockchain address is a pseudonymous account with a permanent, public and complete transaction history. That combination makes it the...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Telephony Intelligence (TELINT): Intelligence Discipline Guide
A phone number is a routing address issued under a published plan, not a person. Telephony intelligence extracts everything the...
Human Intelligence (HUMINT): Intelligence Discipline Guide
Human intelligence is the only discipline where the source can be harmed by your success. Every rule in the tradecraft...
Geospatial Intelligence (GEOINT): Intelligence Discipline Guide
Place is the one attribute nearly every other data point carries. Geospatial intelligence makes place answer questions: what is here,...
Risk Intelligence (RISKINT): Intelligence Discipline Guide
Risk intelligence is what stops a briefing ending with it depends. It converts what you know, and what you do...
Financial Intelligence (FININT): Intelligence Discipline Guide
Follow the money is a cliche because it works. Financial intelligence is the discipline of following value through the institutions...
Cryptocurrency Intelligence (CRYPTINT): Intelligence Discipline Guide
Public blockchains keep a permanent, complete record of every transfer. The hard part was never the data. It is knowing...
Maritime Piracy: Mission Domain Intelligence Guide
Piracy risk is not a map. It is a product of monsoon windows, mothership range, freeboard and speed, and how...
Counter-Terrorism: Mission Domain Intelligence Guide
Attack planning leaves a logistics trail before it leaves an ideological one: a rented van, a chemical purchase, a reconnaissance...
Kidnap, Hostage & Extortion: Mission Domain Intelligence Guide
A kidnap-for-ransom market has a price list, a broker layer and a settlement rail. Treat it as an economy rather...
Gangs & Street Crime: Mission Domain Intelligence Guide
Retaliation after a stabbing is usually measured in days, sometimes hours. The intelligence question is not who did it but...
