Disciplines

OSINT, SOCMINT, cyber threat intelligence, entity resolution, identity intelligence, behavioural analysis, network and link analysis, digital forensics, dark web intelligence.

Every Greyline engagement draws on a defined set of intelligence disciplines, combined according to what the specific question requires:

• OSINT — open-source intelligence collection across public records, media, and the open web.
• SOCMINT — social media intelligence: platform-native analysis of public posts, networks and behaviour.
• Cyber threat intelligence — tracking threat-actor infrastructure, tooling and behaviour relevant to a client’s exposure.
• Entity resolution — determining whether records, aliases or accounts across sources refer to the same real-world individual or organisation.
• Identity intelligence — verifying claimed identity against documentary and open-source evidence.
• Behavioural analysis — assessing patterns of activity, communication and lifestyle signal for consistency and anomaly.
• Network and link analysis — mapping relationships between people, entities and accounts to surface hidden connections.
• Digital forensics — forensically sound acquisition and analysis of digital evidence from devices and accounts.
• Dark web intelligence — structured, analyst-led investigation of dark web markets, forums and threat-actor channels.

Which disciplines apply to a given engagement is set out in the written scope, not assumed — a personal relationship verification draws on a different combination than a corporate insider-threat investigation, and the scope says which.