Data Points

👁️ Biometric Identifier

🔗 Analyst pivots

🔍 Lookup

📜 Playbook — Biometric Identifier exploitation

1. Direction — frame the requirement for Biometric Identifier: what decision does this support, by when?
2. Collection — pull the 0 mapped sources (0 free) and the native workbench; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎫 Biometric Identifier

A biometric identifier is a measurable physiological or behavioral trait — fingerprint minutiae, facial embedding, iris code, voiceprint, gait, or DNA STR profile — used to recognize or verify an individual. It matters in investigations because it is a near-immutable link to a physical person that survives alias changes, document forgery, and device rotation.

Format: ISO/IEC 19794 template, NIST NFIQ2 quality score, face embedding vector (128/512-d), IrisCode 2048-bit, CODIS/STR 20-loci profile; raw as WSQ/JP2/PNG.

📡 How it is collected

• Enrollment at border control, KYC, or access-control systems (fingerprint/face capture)
• Extraction from seized media — photos, videos, voice notes — via face/voice recognition
• Latent lift from physical evidence or scanned booking records
• Scraping of public profile imagery and building face embeddings
• Wiretap / intercept audio yielding voiceprints
• Leaked biometric databases (Aadhaar-style, HR access logs)

📚 Enrichment & validation sources

🔗 Pivot to

🧩 Analysis & hunting techniques

• 1:1 verification vs 1:N identification matching
• Face embedding cosine-distance clustering across media sets
• Liveness / presentation-attack (spoof) detection
• Cross-modal correlation (face-to-voice) on seized video
• Template quality scoring (NFIQ2) to weight matches
• Deepfake / synthetic-media detection before enrollment
• Kinship inference from STR profiles
• Demographic bias / false-match-rate calibration

🔧 Tools

• OpenFace / face_recognition (dlib)
• InsightFace (ArcFace)
• NIST NBIS / NFIQ2
• Kaldi / SpeechBrain (x-vector)
• DeepFace
• Amazon Rekognition (self-host alt: CompreFace)
• OpenBR

⚡ Workbench actions

• Enroll & generate template
• Run 1:N gallery search
• Cluster embeddings across media
• Score liveness / deepfake
• Cross-link face to voiceprint
• Compute match confidence & FMR
• Screen against watchlist gallery
• Export ISO template

📊 Dashboard KPIs

📂 Open