Airframes.io: Intelligence Source Guide
Airframes.io aggregates decoded aircraft datalink messages - ACARS, VDL Mode 2, HFDL and satellite AERO - from a volunteer receiver...
Signals Intelligence
Radio Callsign: Data Point Intelligence Guide
A callsign is a licensed identity broadcast in the clear. Few identifiers are simultaneously regulated, globally unique and publicly indexed....
IMEI / Device Identifier: Data Point Intelligence Guide
An IMEI identifies a handset, not a person and not a phone number. Confusing device identity with subscriber identity is...
Cell Tower / Cell ID: Data Point Intelligence Guide
A cell identifier is not a location. It is a piece of network infrastructure with a coverage footprint, and confusing...
Malware Family: Data Point Intelligence Guide
A malware family name is an analytical claim, not a fact stamped on the binary. It is the most useful...
SSL/TLS Certificate: Data Point Intelligence Guide
Adversaries change domains and IPs constantly. They reuse certificate configuration because it is tedious not to. That asymmetry makes the...
CVE / Vulnerability: Data Point Intelligence Guide
A CVE identifier is a label for a flaw, not a measure of your risk. Treating the two as the...
File Hash: Data Point Intelligence Guide
A file hash is the cheapest reliable fact in cyber threat intelligence: fixed length, unambiguous, and either it matches or...
TLS / JA3 Fingerprint: Data Point Intelligence Guide
Encryption hides the payload, not the handshake. The way a client says hello is often enough to name the software...
IP Address: Data Point Intelligence Guide
An IP address tells you where traffic went, not who sent it. Treat it as a lead on infrastructure, never...
Space Intelligence (SPACEINT): Intelligence Discipline Guide
Orbits are deterministic and observable. A satellite cannot hide its manoeuvres from anyone willing to do the arithmetic, and much...
Signals Intelligence (SIGINT): Intelligence Discipline Guide
Signals intelligence is a state function with a warrant behind it. For everyone else, the discipline still matters, because you...
Radio Frequency Intelligence (RFINT): Intelligence Discipline Guide
The spectrum is a public utility with a public map. Licences, allocations and open receiver networks let you characterise the...
Measurement & Signature Intel (MASINT): Intelligence Discipline Guide
Imagery shows you the object. Measurement and signature intelligence tells you what the object is doing, how hot it is...
RF & Signals Intel: Mission Domain Intelligence Guide
Aircraft over a whole region started reporting navigation integrity failures within the same hour. No one announced anything. The spectrum...
Space & Satellite Intel: Mission Domain Intelligence Guide
A satellite manoeuvred twice in one week and ended up station-keeping four kilometres from another operator's communications bird. Nothing was...
Military & Defense: Mission Domain Intelligence Guide
Order of battle used to be a classified product. Now a unit's deployment is visible from insignia in a soldier's...
Counter-Terrorism: Mission Domain Intelligence Guide
Attack planning leaves a logistics trail before it leaves an ideological one: a rented van, a chemical purchase, a reconnaissance...
APT / Espionage: Mission Domain Intelligence Guide
The median intrusion that matters is not loud. It is a valid credential, a legitimate administrative tool and eleven months...
Nation State: Mission Domain Intelligence Guide
State activity rarely arrives labelled. It surfaces as a procurement order routed through a third-country freight forwarder, a research institute...
