Data Points

✈️ Flight Number / Route

🔗 Analyst pivots

🔍 Lookup

📜 Playbook — Flight Number / Route exploitation

1. Direction — frame the requirement for Flight Number / Route: what decision does this support, by when?
2. Collection — pull the 0 mapped sources (0 free) and the native workbench; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎫 Flight Number / Route

A flight number / route identifies a scheduled or actual aircraft movement, combining a carrier code and number with an origin-destination pair. It matters in investigations for tracking movements of persons of interest, sanctioned or state aircraft, special-mission flights, and covert logistics.

Format: IATA callsign 'AA123' (2-alpha carrier + 1-4 digits) or ICAO 'AAL123' (3-alpha + digits); route as IATA airport codes 'JFK-LHR' or ICAO 'KJFK-EGLL'; associated ICAO24 tail hex is 6 hex chars

📡 How it is collected

• ADS-B / Mode-S transponder feeds
• Flight-tracker APIs
• Published airline schedules
• Airport departure/arrival boards
• NOTAM parsing
• Community receiver networks

📚 Enrichment & validation sources

🔗 Pivot to

🧩 Analysis & hunting techniques

• Trajectory and track analysis
• Pattern-of-life profiling
• Tail-number to operator correlation
• Callsign-to-flight mapping
• Loitering / orbit detection
• Squawk (7500/7600/7700) monitoring
• Blocked / opted-out aircraft inference
• Route-frequency anomaly detection

🔧 Tools

• OpenSky API
• ADS-B Exchange
• dump1090
• tar1090
• VirtualRadar Server
• readsb

⚡ Workbench actions

• Plot live track
• Resolve tail number
• Map route history
• Detect orbit patterns
• Cross-reference callsign
• Screen operator against sanctions
• Export flight path
• Correlate to event

📊 Dashboard KPIs

📂 Open