Biometric Identifier: Data Point Intelligence Guide
Biometrics are the only identifier a person cannot change after it leaks. That single property should govern every decision you...
Social Profile
National ID Number: Data Point Intelligence Guide
A national ID number is the closest thing that exists to a primary key for a human being. It is...
Device / Advertising ID: Data Point Intelligence Guide
An advertising identifier was designed to be a resettable, privacy-preserving marketing token. In practice it became one of the most...
Social Profile: Data Point Intelligence Guide
A social profile is a persona's self-published intelligence report. The metadata around it is usually more truthful than anything written...
Physical Address: Data Point Intelligence Guide
A physical address is where the digital investigation touches the ground. It is also where thousands of shell companies quietly...
Phone Number: Data Point Intelligence Guide
A phone number is a globally routable identifier attached to a real contract and, increasingly, to every account a person...
Username / Handle: Data Point Intelligence Guide
People change platforms, phones and email providers. They almost never change the handle they picked at fifteen. That inertia is...
Email Address: Data Point Intelligence Guide
An email address is an account key, a routing instruction and a reputation record in one string. It is also...
Person / Name: Data Point Intelligence Guide
A name is the weakest identifier in intelligence work and the one most likely to end a career when handled...
Legal Intelligence (LEGINT): Intelligence Discipline Guide
Litigation is an involuntary disclosure engine. Adversaries in court say, under oath and on the public record, what they will...
News Intelligence (NEWSINT): Intelligence Discipline Guide
Reporting is evidence of what was published, by whom, when and sourced how. Treated that way it is one of...
Disinformation Intelligence (DISINFOINT): Intelligence Discipline Guide
The finding is rarely that a claim is false. It is that a set of accounts, sites and outlets behaved...
Identity Intelligence (IDENT): Intelligence Discipline Guide
Identity resolution fails in two directions and only one of them is visible. A missed link costs you the investigation;...
Social Media Intelligence (SOCMINT): Intelligence Discipline Guide
Social platforms record behaviour, not truth: what was posted, when, by an account, to an audience. Social media intelligence keeps...
Human Intelligence (HUMINT): Intelligence Discipline Guide
Human intelligence is the only discipline where the source can be harmed by your success. Every rule in the tradecraft...
Government Intelligence (GOVINT): Intelligence Discipline Guide
Decisions are made by named people, in named bodies, under written procedures. Government intelligence is knowing which body, which person...
Election Intelligence (ELECTINT): Intelligence Discipline Guide
An election is the most predictable high-risk event on any calendar: fixed date, known actors, published rules. Election intelligence is...
Threat Actor Intelligence (ACTORINT): Intelligence Discipline Guide
Infrastructure changes weekly and tooling changes quarterly, but habits almost never change. Actor intelligence is the discipline of tracking what...
Disinformation / IO: Mission Domain Intelligence Guide
Two hundred accounts posted the same seven-word phrase within ninety seconds. None of them had existed six weeks earlier. The...
Election Security & PSYOP: Mission Domain Intelligence Guide
The claim that the count was rigged was already trending three weeks before polls opened. The infrastructure held perfectly. The...
Transnational Repression: Mission Domain Intelligence Guide
A dissident's family is visited at home, an INTERPOL notice appears, and a spyware link arrives by messenger, all within...
Extremism & Radicalization: Mission Domain Intelligence Guide
Radicalisation is not a conveyor belt. It is a set of grievances, communities and content economies, and most of what...
Counter-Terrorism: Mission Domain Intelligence Guide
Attack planning leaves a logistics trail before it leaves an ideological one: a rented van, a chemical purchase, a reconnaissance...
Gangs & Street Crime: Mission Domain Intelligence Guide
Retaliation after a stabbing is usually measured in days, sometimes hours. The intelligence question is not who did it but...
Child Protection: Mission Domain Intelligence Guide
The pattern that ends most sextortion cases is depressingly consistent: contact within hours, escalation within a day, and a payment...
