Domains
Social Media Platforms
ETM Tools
Intelligence Cycle
ETM Reports
100

Also referred to as an Address Record. Is used in DNS to map a domain to an IP address. Directs traffic from the domain name to the correct server's IP address where the website or web application is hosted.

What is an A Record?

100

Launched in 2004, was originally created as an exclusive platform to foster connections among Harvard college students. Its initial purpose was to facilitate communication and networking within the campus community. Today, it is a platform that connects friends, families, colleagues, and businesses across the world. Key features include a news feed, groups, pages, live streaming, and a marketplace. 

What is Facebook?

100

This web service allows users to capture and create screenshots of web pages quickly, providing a visual snapshot of a website's content on a specific date and time.

100

This initial phase of the Intelligence Cycle involves defining the scope, objectives, and priorities of intelligence activities.

What is Planning and Direction?

100

Delivered on an ad hoc basis and primarily contains alerts pertaining to social media profiles.

What is the BMC AS?

200

The individual or organization granted ownership rights to a specific domain name, entrusted with the authority to manage, utilize, and transfer it as deemed appropriate.

Who is the Registrant?

200

This formerly iOS-exclusive app, whose name blends 'instant camera' and 'telegram,' initially focused on photo sharing but has expanded to include videos, stories, and a shopping feature.

What is Instagram?

200

This platform offers a suite of internet tools that help users track and investigate domain name registration and website hosting information, popular in cybersecurity and investigative research.

What is DomainTools?

200

In this phase, information is gathered from various sources to be converted into actionable intelligence.

What is Collection?

200

Delivered bi-weekly and contains alerts primarily pertaining to malicious domains hosting EY content.

What is the CIR AS?

300

Pivotal in internet navigation, translating domain names into IP addresses. They transform the complex numerical IP addresses into user-friendly, readable names, making web browsing intuitive.

What is a Name Server?

300

Famous for its 280-character limit, this social media platform is a hub for real-time news, trending hashtags, and tweets from around the globe. The acquisition of the platform was officially completed on 27 October 2022 by Elon Musk.

What is X (Twitter)?

300

Known for enhancing digital safety, this company specializes in identifying, managing, and mitigating information security risks associated with social media, mobile apps, and other online platforms.

What is ZeroFOX?

300

This stage involves converting the collected information into a format that can be analyzed and includes evaluation, sorting, and filtering.

What is Processing?

300

Delivered bi-weekly and contains domains that will unlikely be removed based on the content hosted.

What is the UDRP AS?

400

Provides the infrastructure, software, security, and maintenance services to host websites.

What is the Hosting Provider?

400

This professional networking platform, founded in 2002, connects colleagues, classmates, and industry peers, and is popular for job searching and corporate networking.

What is LinkedIn?

400

This cybersecurity firm is known for its focus on malware detection and analysis, offering solutions that enable rapid threat identification and response, safeguarding digital environments. We use this tool as a sandbox.

What is VMRay?

400

In this critical phase, analysts evaluate and interpret data to create meaningful insights, assessing reliability and relevance.

What is Analysis?

400

These reports are requested by the client and task the ETM team with conducting specialized research tailored to specific topics of interest.

What is a Request for Intelligence (RFI)?

500

A specialized DNS entry that designates which mail servers are authorized to receive emails for a particular domain, ensuring messages are accurately and securely delivered.

What is an MX record?

500

Founded in 2005 and now owned by Google, this popular platform is where users upload, share, and stream videos, from music clips to how-to tutorials and everything in between.

What is YouTube?

500

This acronym refers to the process of collecting and analyzing information that is publicly available, often used in security, investigation, and intelligence fields to gather insights without direct engagement or intrusion.

What is OSINT?

500

This final stage ensures that intelligence is communicated to the appropriate parties in a usable and accessible format.

What is Dissemination?

500

Delivered bi-weekly and covers all ETM activity for a specified timeframe. Stakeholders include BMC, CIR, and UDRP team members.

What is the Bi-Weekly Report?

M
e
n
u