Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
News Intelligence
Keyword / Narrative: Data Point Intelligence Guide
A keyword is a hypothesis about language. Track the wrong string and you will measure nothing at all, very confidently....
Video: Data Point Intelligence Guide
A video is not evidence of what its caption claims. It is a container of measurable facts, and those facts...
Image / Photograph: Data Point Intelligence Guide
Every photograph makes two claims: this is what it shows, and this is where and when it was taken. Both...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
URL: Data Point Intelligence Guide
A URL is the only artifact that carries the attacker instruction set in plain sight. Parse it properly and it...
Domain Name: Data Point Intelligence Guide
A domain name is the cheapest thing an adversary buys and the most expensive thing for them to keep clean....
News Intelligence (NEWSINT): Intelligence Discipline Guide
Reporting is evidence of what was published, by whom, when and sourced how. Treated that way it is one of...
Disinformation Intelligence (DISINFOINT): Intelligence Discipline Guide
The finding is rarely that a claim is false. It is that a set of accounts, sites and outlets behaved...
Risk Analysis: Mission Domain Intelligence Guide
The evacuation decision was made three days after the intelligence supported it. Nobody lacked information. What was missing was a...
Disinformation / IO: Mission Domain Intelligence Guide
Two hundred accounts posted the same seven-word phrase within ninety seconds. None of them had existed six weeks earlier. The...
Election Security & PSYOP: Mission Domain Intelligence Guide
The claim that the count was rigged was already trending three weeks before polls opened. The infrastructure held perfectly. The...
Biosecurity & Pandemic: Mission Domain Intelligence Guide
The first signal is almost never a laboratory confirmation. It is a rural clinic ordering more oxygen than usual, a...
Conflict & Humanitarian: Mission Domain Intelligence Guide
The first measurable sign of a coming famine is usually not hunger. It is a market price series breaking from...
Extremism & Radicalization: Mission Domain Intelligence Guide
Radicalisation is not a conveyor belt. It is a set of grievances, communities and content economies, and most of what...
Corruption & Governance: Mission Domain Intelligence Guide
Grand corruption almost never appears in a budget line. It appears as a contract awarded in nineteen days to a...
Threat Analysis: Mission Domain Intelligence Guide
An indicator list is not intelligence. Intelligence is a judgement, held to a stated confidence, that changes what a decision-maker...
