Event / Incident: Data Point Intelligence Guide
An event is where every other data point converges: a time, a place, a set of actors, and the messy...
Risk Intelligence
Keyword / Narrative: Data Point Intelligence Guide
A keyword is a hypothesis about language. Track the wrong string and you will measure nothing at all, very confidently....
Software Package: Data Point Intelligence Guide
You do not audit the code you install. You audit, at best, the top of a dependency tree whose depth...
Satellite Imagery: Data Point Intelligence Guide
Overhead imagery does not tell you what happened. It tells you what changed between two dates, and the analyst supplies...
Facility / Site: Data Point Intelligence Guide
A facility is where corporate paper meets physical reality. Registries tell you who claims the site; the ground truth tells...
GPS Coordinates: Data Point Intelligence Guide
Six decimal places is a doorstep. Two is a district. Precision in a coordinate is a decision about harm, not...
Location / Coordinates: Data Point Intelligence Guide
A place name is not a point. It is a claim about where something happened, carrying a resolution, a source...
CVE / Vulnerability: Data Point Intelligence Guide
A CVE identifier is a label for a flaw, not a measure of your risk. Treating the two as the...
ASN: Data Point Intelligence Guide
The ASN is where infrastructure stops being anonymous. Every packet on the public internet is routed by an organisation that...
Risk Intelligence (RISKINT): Intelligence Discipline Guide
Risk intelligence is what stops a briefing ending with it depends. It converts what you know, and what you do...
Reference Intelligence (REFINT): Intelligence Discipline Guide
Most wrong conclusions can be traced back to two records an analyst believed were about the same thing. Reference intelligence...
Open Source Intelligence (OSINT): Intelligence Discipline Guide
Open source is not free intelligence. It is unvalidated raw material available to anyone, including your adversary, and the discipline...
Risk Analysis: Mission Domain Intelligence Guide
The evacuation decision was made three days after the intelligence supported it. Nobody lacked information. What was missing was a...
Maritime Piracy: Mission Domain Intelligence Guide
Piracy risk is not a map. It is a product of monsoon windows, mothership range, freeboard and speed, and how...
Food & Agricultural Security: Mission Domain Intelligence Guide
The famine is declared months after the data said it was coming. Vegetation anomaly, staple price, and the first export...
Water Security: Mission Domain Intelligence Guide
You can watch a diplomatic crisis fill up. Reservoir altimetry showed the impoundment rate months before the downstream government said...
Climate Security: Mission Domain Intelligence Guide
Climate intelligence is not weather forecasting. It is the discipline of working out which rainfall deficit ends in a cabinet...
Conflict & Humanitarian: Mission Domain Intelligence Guide
The first measurable sign of a coming famine is usually not hunger. It is a market price series breaking from...
Kidnap, Hostage & Extortion: Mission Domain Intelligence Guide
A kidnap-for-ransom market has a price list, a broker layer and a settlement rail. Treat it as an economy rather...
Emerging Technology & AI Security: Mission Domain Intelligence Guide
The finance team approved the transfer because they recognised the chief executive on the call. Voice, face and cadence were...
Critical Infrastructure: Mission Domain Intelligence Guide
In an office network the worst outcome is data loss. On a substation or a water treatment line the worst...
Threat Analysis: Mission Domain Intelligence Guide
An indicator list is not intelligence. Intelligence is a judgement, held to a stated confidence, that changes what a decision-maker...
