324

OSINT Tools Lists OSINT Tools Lists Tool

Link

101+ OSINT Resources for Investigators (i-sight)

https://i-sight.com/resources/101-osint-resources-for- investigators

Aware Online Academy OSINT Links

https://aware-online.com/academy/osint-links

Awesome OSINT https://github.com/jivoi/awesome-osint

Awesome_osint https://github.com/Ph055a/awesome_osint

Bellingcat OSINT Links https://docs.google.com/document/d/1BfLPJpRtyq4 RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit

Bruno Mortier Sources https://start.me/p/3g0aKK/sources

Bruno Mortier Sources CNTY https://start.me/p/W2kwBd/sources-cnty

CiberPatrulla https://ciberpatrulla.com/links

DFIR Training Tool Directory https://www.dfir.training/index.php/tools/advanced- search

Digital intelligence Research Tools

https://atlas.mindmup.com/digintel/digital_intelligenc e_training/index.html

Emmanuelle Welch Dating apps and sites for investigators

https://start.me/p/VRxaj5/dating-apps-and-sites-for- investigators

HR Sourcing Toolbox https://hrsourcingtoolbox.wixsite.com/main

Julia Bayer Verification Toolset https://start.me/p/ZGAzN7/verification-toolset

inteltechniques Internet Search Links

https://inteltechniques.com/menu.links.html

MidaSearch OSINT Websites https://midasearch.org/osint-websites

Netbootcamp OSINT Tools https://netbootcamp.org/osinttools

325

Onstrat OSINT Starting Points http://www.onstrat.com/osint/#startingpoints

OSINT Browser Plugins https://github.com/IVMachiavelli/OSINT-Browser- Plugins

OSINT Framework http://osintframework.com

OSINT Link http://osint.link

OSINT Post https://osintpost.com

OSINT Team Links https://github.com/IVMachiavelli/OSINT_Team_Links

RBA Business Information Resources

http://www.rba.co.uk/sources

Research Clinic http://www.researchclinic.net

Reuser OSINT Discovery Toolkit http://rr.reuser.biz

Startme Open Source Investigative Tools by Malachy Browne

https://start.me/p/gyvaAJ/open-source-investigative- tools

Startme OSINT Technisette https://start.me/p/m6XQ08/osint || https://start.me/p/nRQNRb/addons

Sprp77 Awesome OSINT https://drive.google.com/drive/folders/0BwyWDQ59j RVGMFp3UnBfeUEzanM

Toddington Resources https://www.toddington.com/resources

Tomoko Discovery Tools List https://tomokodiscovery.com/free-tools-osint- socmint-dark-web-darknet-tor-bitcoin

ToolsInsight http://www.toolsinsight.com

Uk-osint http://www.uk-osint.net/addons.html

ATP 2-33.4

Intelligence Analysis

JANUARY 2020

DISTRIBUTION RESTRICTION: Approved for public release; distribution is unlimited.

This publication supersedes ATP 2-33.4, dated 18 August 2014.

Headquarters, Department of the Army

This publication is available at Army Knowledge Online

(https://armypubs.army.mil), and the Central Army Registry site

(https://atiam.train.army.mil/catalog/dashboard).

*ATP 2-33.4

DISTRIBUTION RESTRICTION: Approved for public release; distribution is unlimited.

*This publication supersedes ATP 2-33.4, dated 18 August 2014.

i

Army Techniques Publication

No. 2-33.4

Headquarters

Department of the Army

Washington, DC, 10 January 2020

Intelligence Analysis

Contents

Page

PREFACE………………………………………………………………………………………………. vii

INTRODUCTION ……………………………………………………………………………………… xi

PART ONE FUNDAMENTALS

Chapter 1 UNDERSTANDING INTELLIGENCE ANALYSIS ……………………………………… 1-1 Intelligence Analysis Overview ………………………………………………………………… 1-1 Conducting Intelligence Analysis ……………………………………………………………… 1-5 Intelligence Analysis and Collection Management ……………………………………… 1-8 The All-Source Intelligence Architecture and Analysis Across the Echelons ….. 1-9 Intelligence Analysis During Large-Scale Ground Combat Operations ……….. 1-11 Intelligence Analysis During the Army’s Other Strategic Roles …………………… 1-13

Chapter 2 THE INTELLIGENCE ANALYSIS PROCESS …………………………………………… 2-1 Overview ………………………………………………………………………………………………. 2-1 The Phases of the Intelligence Analysis Process ………………………………………. 2-1

Chapter 3 ALL-SOURCE ANALYTICAL TASKS ……………………………………………………… 3-1 Overview ………………………………………………………………………………………………. 3-1 Generate Intelligence Knowledge (ART 2.1.4) …………………………………………… 3-2 Perform Intelligence Preparation of the Battlefield (ART 2.2.1) ……………………. 3-3 Provide Warnings (ART 2.1.1.1) ……………………………………………………………… 3-3 Perform Situation Development (ART 2.2.2) ……………………………………………… 3-4 Provide Intelligence Support to Targeting and Information Operations (ART 2.4) ……………………………………………………………………………………………… 3-4

PART TWO TASK TECHNIQUES

Chapter 4 ANALYTIC TECHNIQUES ……………………………………………………………………… 4-1 Overview ………………………………………………………………………………………………. 4-1 Applying Structured Analytic Techniques ………………………………………………….. 4-1

Chapter 5 BASIC AND DIAGNOSTIC STRUCTURED ANALYTIC TECHNIQUES ………. 5-1

Section I – Basic Structured Analytic Techniques ………………………………… 5-1 Sorting …………………………………………………………………………………………………. 5-1 Chronologies ………………………………………………………………………………………… 5-4

Contents

ii ATP 2-33.4 10 January 2020

Matrices ………………………………………………………………………………………………… 5-6 Weighted Ranking ………………………………………………………………………………….. 5-7 Link Analysis …………………………………………………………………………………………. 5-8 Event Tree …………………………………………………………………………………………… 5-12 Event Mapping …………………………………………………………………………………….. 5-13

Section II – Diagnostic Structured Analytic Techniques ………………………. 5-15 Key Assumptions Check ……………………………………………………………………….. 5-15 Quality of Information Check ………………………………………………………………….. 5-16 Indicators/Signposts of Change ……………………………………………………………… 5-18

Chapter 6 ADVANCED STRUCTURED ANALYTIC TECHNIQUES ……………………………. 6-1

Section I – Contrarian Structured Analytic Techniques …………………………. 6-1 Analysis of Competing Hypotheses ………………………………………………………….. 6-1 Devil’s Advocacy ……………………………………………………………………………………. 6-3 Team A/Team B …………………………………………………………………………………….. 6-4 High-Impact/Low-Probability Analysis ……………………………………………………….. 6-5 “What If?” Analysis …………………………………………………………………………………. 6-6

Section II – Imaginative Structured Analytic Techniques ……………………….. 6-7 Brainstorming ………………………………………………………………………………………… 6-8 Functional Analysis Using Critical Factors Analysis ……………………………………. 6-9 Outside-In Thinking ………………………………………………………………………………. 6-10 Red Hat/Team Analysis ………………………………………………………………………… 6-11

PART THREE INTELLIGENCE ANALYSIS CONSIDERATIONS

Chapter 7 ANALYTIC SUPPORT TO ARMY FORCES AND OPERATIONS ……………….. 7-1 Overview ………………………………………………………………………………………………. 7-1 Analysis Across the Echelons ………………………………………………………………….. 7-1 Support to Functional Elements ……………………………………………………………….. 7-3 Analysis Across the Army’s Strategic Roles ………………………………………………. 7-6

Chapter 8 ANALYSIS AND LARGE-SCALE GROUND COMBAT OPERATIONS ……….. 8-1 Overview ………………………………………………………………………………………………. 8-1 Tactical to Operational Situation: An Enemy Attack ……………………………………. 8-1

Chapter 9 MANAGING LONG-TERM ANALYTICAL ASSESSMENTS ……………………….. 9-1 Overview ………………………………………………………………………………………………. 9-1 The Basics of Analytic Design …………………………………………………………………. 9-1 Collaboration During Analytic Design ……………………………………………………….. 9-6 Transitioning from the Analytic Design Process to Presenting the Results …….. 9-6 Crosswalking Analytic Design with Tactical Intelligence Analysis …………………. 9-7

Appendix A AUTOMATION SUPPORT TO INTELLIGENCE ANALYSIS ……………………… A-1

Appendix B COGNITIVE CONSIDERATIONS FOR INTELLIGENCE ANALYSTS …………. B-1

Appendix C ANALYTIC STANDARDS AND ANALYSIS VALIDATION ………………………… C-1

Appendix D THREAT CONSIDERATIONS DURING LARGE-SCALE GROUND COMBAT OPERATIONS ……………………………………………………………………………………… D-1

Appendix E INTELLIGENCE PRODUCTION …………………………………………………………….. E-1

Appendix F INTELLIGENCE SUPPORT TO TARGETING …………………………………………… F-1

Contents

10 January 2020 ATP 2-33.4 iii

GLOSSARY ……………………………………………………………………………… Glossary-1

REFERENCES ………………………………………………………………………. References-1

INDEX ……………………………………………………………………………………………. Index-1

Figures

Introductory figure. Intelligence analysis at a glance ……………………………………………………… xii

Figure 1-1. Achieving situational awareness and understanding ……………………………………. 1-1

Figure 1-2. Intelligence analysis within doctrinal constructs ………………………………………….. 1-3

Figure 1-3. Information and intelligence reporting example …………………………………………… 1-4

Figure 1-4. Analytic standards …………………………………………………………………………………… 1-8

Figure 1-5. All-source analysis across the echelons …………………………………………………… 1-10

Figure 1-6. Key aspects of the operational framework ………………………………………………… 1-12

Figure 2-1. The intelligence analysis process ……………………………………………………………… 2-2

Figure 3-1. The all-source analytical tasks ………………………………………………………………….. 3-1

Figure 4-1. Applying analytic techniques to understand the operational environment ………. 4-2

Figure 4-2. Structured analytic techniques summarized ……………………………………………….. 4-3

Figure 5-1. Sorting data using a pattern analysis plot sheet example …………………………….. 5-3

Figure 5-2. Timeline example ……………………………………………………………………………………. 5-5

Figure 5-3. Time event chart example ………………………………………………………………………… 5-5

Figure 5-4. Threat intentions matrix example ………………………………………………………………. 5-7

Figure 5-5. Weighted ranking (steps 1–5) to determine the threat’s most likely COA ……….. 5-8

Figure 5-6. Weighted ranking (step 6) to determine the threat’s most likely COA …………….. 5-8

Figure 5-7. Link diagram example ……………………………………………………………………………. 5-10

Figure 5-8. Association matrix example ……………………………………………………………………. 5-11

Figure 5-9. Activities matrix example ……………………………………………………………………….. 5-11

Figure 5-10. Event tree example ……………………………………………………………………………… 5-13

Figure 5-11. Event mapping example ………………………………………………………………………. 5-14

Figure 6-1. Analysis of competing hypotheses used during step 4 of the IPB process ……… 6-3

Figure 6-2. Team A/Team B used during step 4 of the IPB process ……………………………….. 6-5

Figure 6-3. Functional analysis using critical factors analysis ………………………………………. 6-10

Figure 6-4. Outside-in thinking used during step 2 of the IPB process ………………………….. 6-11

Figure 8-1. Brigade combat team situation example …………………………………………………….. 8-2

Figure 8-2. Division situation example ……………………………………………………………………….. 8-4

Figure 8-3. Tactical/Operational (corps) situation example ……………………………………………. 8-6

Figure 9-1. Analytic design steps ………………………………………………………………………………. 9-2

Figure 9-2. Frame the question/issue …………………………………………………………………………. 9-3

Figure 9-3. Review and assess knowledge …………………………………………………………………. 9-3

Figure 9-4. Review resources ……………………………………………………………………………………. 9-4

Figure 9-5. Select the analytic approach/methodology and plan project …………………………. 9-4

Figure 9-6. Develop knowledge …………………………………………………………………………………. 9-5

Contents

iv ATP 2-33.4 10 January 2020

Figure 9-7. Perform analysis …………………………………………………………………………………….. 9-5

Figure 9-8. Evaluate analysis ……………………………………………………………………………………. 9-6

Figure A-1. Intelligence analysis enabled by DCGS-A …………………………………………………. A-3

Figure B-1. Types of reasoning examples ………………………………………………………………….. B-3

Figure C-1. Estimative language: expressions of likelihood ………………………………………….. C-2

Figure E-1. Annex B (Intelligence) to the operation order example ………………………………… E-2

Figure E-2. Appendix 1 (Intelligence Estimate) example ………………………………………………. E-4

Figure E-3. Intelligence running estimate example ………………………………………………………. E-5

Figure E-4. Intelligence summary example…………………………………………………………………. E-6

Figure E-5. Graphic intelligence summary example …………………………………………………….. E-8

Figure E-6. Intelligence report example ……………………………………………………………………… E-8

Figure E-7. Periodic intelligence report example …………………………………………………………. E-9

Figure F-1. High-payoff target list example …………………………………………………………………. F-4

Figure F-2. Example target selection standard matrix ………………………………………………….. F-5

Figure F-3. Battle damage assessment chart (based on threat organization)………………… F-10

Figure F-4. Battle damage assessment chart (based on location) ……………………………….. F-10

Tables

Table 1-1. Intelligence analysis during large-scale ground combat operations ………………. 1-11

Table 1-2. Intelligence analysis during the other Army strategic roles ………………………….. 1-14

Table 2-1. Evaluation ratings for source reliability and information accuracy …………………… 2-5

Table 5-1. Sorting technique …………………………………………………………………………………….. 5-2

Table 5-2. Chronologies technique ……………………………………………………………………………. 5-4

Table 5-3. Matrices technique …………………………………………………………………………………… 5-6

Table 5-4. Weighted ranking technique ……………………………………………………………………… 5-7

Table 5-5. Link analysis technique …………………………………………………………………………….. 5-9

Table 5-6. Event tree technique ………………………………………………………………………………. 5-12

Table 5-7. Event mapping technique ……………………………………………………………………….. 5-14

Table 5-8. Key assumptions check technique …………………………………………………………… 5-15

Table 5-9. Quality of information check technique ……………………………………………………… 5-16

Table 5-10. Questioning guideline for checking information quality ……………………………… 5-17

Table 5-11. Indicators/Signposts of change technique ……………………………………………….. 5-18

Table 6-1. Analysis of competing hypotheses technique ………………………………………………. 6-2

Table 6-2. Devil’s advocacy technique ………………………………………………………………………. 6-3

Table 6-3. Team A/Team B technique ……………………………………………………………………….. 6-4

Table 6-4. High-impact/Low-probability analysis technique …………………………………………… 6-6

Table 6-5. “What if?” analysis technique …………………………………………………………………….. 6-7

Table 6-6. Brainstorming structured technique ……………………………………………………………. 6-8

Table 6-7. Functional analysis technique using critical factors analysis ………………………….. 6-9

Table 6-8. Outside-in thinking technique ………………………………………………………………….. 6-10

Contents

10 January 2020 ATP 2-33.4 v

Table 6-9. Red hat/team analysis technique ……………………………………………………………… 6-12

Table 7-1. Intelligence analysis support to functional elements ……………………………………… 7-3

Table 7-2. Intelligence requirements associated with operations to shape ……………………… 7-6

Table 7-3. Intelligence requirements associated with operations to prevent ……………………. 7-7

Table 7-4. Intelligence requirements associated with large-scale ground combat operations …………………………………………………………………………………………….. 7-7

Table 7-5. Intelligence requirements associated with the offense ………………………………….. 7-9

Table 7-6. Intelligence requirements associated with the defense ……………………………….. 7-10

Table 7-7. Intelligence requirements associated with operations to consolidate gains ……. 7-11

Table 8-1. Intelligence analysis (brigade combat team) example …………………………………… 8-2

Table 8-2. Intelligence analysis (division) example ………………………………………………………. 8-5

Table 8-3. Intelligence analysis (tactical/operational [corps]) example ……………………………. 8-7

Table 9-1. Analytic design to tactical intelligence analysis crosswalk ……………………………… 9-7

Table B-1. Checklist for reasoning ……………………………………………………………………………..B-5

Table C-1. Analytical actions and levels of rigor …………………………………………………………. C-5

Table D-1. Threat analysis by warfighting function example …………………………………………. D-2

Table D-2. Analyst considerations based on threat equipment capabilities …………………….. D-4

Table E-1. Support to orders and briefings ………………………………………………………………..E-11

Table F-1. Battle damage assessment components …………………………………………………….. F-9

This page intentionally left blank.

10 January 2020 ATP 2-33.4 vii

Preface

ATP 2-33.4 provides fundamental information to a broad audience, including commanders, staffs, and

leaders, on how intelligence personnel conduct analysis to support Army operations. It describes the

intelligence analysis process and specific analytic techniques and information on the conduct of intelligence

analysis performed by intelligence personnel, especially all-source analysts, across all intelligence

disciplines. Additionally, ATP 2-33.4 describes how intelligence analysis facilitates the commander’s

decision making and understanding of complex environments.

The principal audience for ATP 2-33.4 is junior to midgrade intelligence analysts conducting intelligence

analysis. This publication provides basic information on intelligence analysis for commanders, staffs, and

other senior military members.

ATP 2-33.4 readers must have an understanding of the following:

 Intelligence doctrine described in ADP 2-0 and FM 2-0.

 Collection management described in ATP 2-01.

 Intelligence preparation of the battlefield (IPB) described in ATP 2-01.3.

 Operational doctrine described in ADP 3-0 and FM 3-0.

 Joint targeting described in JP 3-60.

Commanders, staffs, and subordinates ensure their decisions and actions comply with applicable United

States (U.S.), international, and, in some cases, host-nation laws and regulations. Commanders at all levels

ensure their Soldiers operate in accordance with the law of war and the rules of engagement. (See FM 6-27.)

This publication contains copyrighted material.

ATP 2-33.4 uses joint terms where applicable. Selected joint and Army terms and definitions appear in both

the glossary and the text. For definitions shown in the text, the term is italicized, and the number of the

proponent publication follows the definition. This publication is not the proponent for any Army terms.

ATP 2-33.4 applies to the Active Army, Army National Guard/Army National Guard of the United States,

and U.S. Army Reserve unless otherwise stated.

The proponent of ATP 2-33.4 is the U.S. Army Intelligence Center of Excellence. The preparing agency is

the Directorate of Doctrine and Intelligence Systems Training, U.S. Army Intelligence Center of Excellence,

Fort Huachuca, AZ. Send comments and recommendations on a DA Form 2028 (Recommended Changes to

Publications and Blank Forms) to Commander, U.S. Army Intelligence Center of Excellence, ATTN:

ATZS-DST-D (ATP 2-33.4), 550 Cibeque Street, Fort Huachuca, AZ 85613-7017; by email to

[email protected]; or submit an electronic DA Form 2028.

This page intentionally left blank.

10 January 2020 ATP 2-33.4 ix

Acknowledgement

The critical thinking material in appendix B has been used with permission from the Foundation for Critical

Thinking, http://www.criticalthinking.org/: The Thinker’s Guide to Analytic Thinking, 2017, and The

Miniature Guide to Critical Thinking: Concepts and Tools, 2014, by Dr. Linda Elder and Dr. Richard Paul.

The copyright owners have granted permission to reproduce material from their works. With their permission,

some of the text has been paraphrased and adapted for military purposes.

This page intentionally left blank.

10 January 2020 ATP 2-33.4 xi

Introduction

ATP 2-33.4 discusses doctrinal techniques—descriptive methods for performing missions, functions, or tasks

as they apply to intelligence analysis. ATP 2-33.4—

 Describes the intelligence analysis process.

 Discusses structured analytic techniques and the methods for implementing them.

 Describes unique considerations related to intelligence analysis.

ATP 2-33.4 does not discuss—

 The Army’s intelligence fundamentals and the intelligence warfighting function. See ADP 2-0 and

FM 2

Related Tags