Data Points

🔍 Keyword / Narrative

🔗 Analyst pivots

🔍 Lookup

📜 Playbook — Keyword / Narrative exploitation

1. Direction — frame the requirement for Keyword / Narrative: what decision does this support, by when?
2. Collection — pull the 0 mapped sources (0 free) and the native workbench; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎫 Keyword / Narrative

A keyword / narrative is a tracked term, phrase, hashtag, or thematic framing monitored across social, news, and forum sources to observe discourse and emerging threats. It matters in investigations for detecting coordinated inauthentic behavior, disinformation campaigns, executive/brand threats, and the seeding of specific narratives.

Format: Free-text token or phrase; hashtag (#term); boolean/regex monitor query; Unicode NFC-normalized, case-folded, optionally language-tagged (ISO 639)

📡 How it is collected

• Social platform search/streaming APIs
• Boolean-query listening monitors
• RSS and news aggregation feeds
• Telegram / Discord channel scraping
• Web forum and imageboard crawls
• Bluesky firehose subscription

📚 Enrichment & validation sources

🔗 Pivot to

🧩 Analysis & hunting techniques

• Burst / spike (velocity) detection
• Narrative clustering and topic modeling
• Coordinated posting / co-tweet network analysis
• N-gram and hashtag co-occurrence mapping
• Named-entity extraction
• Sentiment and stance classification
• Bot / amplification ratio analysis
• Cross-platform propagation tracing

🔧 Tools

• GDELT
• spaCy
• Gephi
• twarc
• snscrape
• OpenRefine
• Maltego

⚡ Workbench actions

• Plot trend timeline
• Cluster narratives
• Detect bursts
• Extract entities
• Map amplifier network
• Track hashtag co-occurrence
• Score sentiment
• Geo-map mentions

📊 Dashboard KPIs

📂 Open