Disciplines

✈️ Aviation Intelligence (AVINT)

🔍 Lookup

📊 Pre-built Queries · Aviation Intelligence

📜 Playbook — Aviation Intelligence collection

1. Direction — frame the requirement for Aviation Intelligence: what decision does this support, by when?
2. Collection — collect from the 0 mapped sources (0 free) — filter the catalog by AVINT; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎯 Mission

Aviation Intelligence collects aircraft movements, transponder emissions, ownership records and airspace activity to reconstruct who is flying, where, and why. It answers questions of aircraft identity and beneficial ownership, anomalous or clandestine flight patterns, and the pattern-of-life of aircraft of interest.

📡 Collection methods

• ADS-B and Mode-S transponder collection via public aggregators and own dump1090/readsb receivers
• MLAT multilateration to position non-ADS-B (Mode-A/C) aircraft from timing of multiple stations
• ACARS/VDL VHF datalink monitoring for position, free-text and OOOI messages
• Tail-number (registration) enrichment against national aircraft registries
• Squawk-code watch for 7500/7600/7700 emergencies and reserved/blocked-tail hits
• Flight-schedule, route and NOTAM scraping for planned vs. actual comparison

📚 Key sources & datasets

🎫 Data points produced

🔧 Tools & frameworks

• ADS-B Exchange
• OpenSky API
• tar1090
• dump1090/readsb
• acarsdec
• Maltego
• QGIS
• ADSBexchange history API

📜 Aviation Intelligence Tradecraft

1. Ingest ADS-B/Mode-S and MLAT feeds from ADS-B Exchange, OpenSky and adsb.fi alongside local dump1090 receivers.
2. Deduplicate ICAO24 hex codes, decode callsigns and squawks, and reconstruct continuous tracks in tar1090.
3. Flag anomalies: blocked/reserved tails, loitering orbits, ADS-B dropouts, and registry-vs-callsign mismatches.
4. Resolve ICAO24 hex to tail number and beneficial owner via the FAA registry and OpenCorporates.
5. Disseminate a tracked-aircraft watchlist and pattern-of-life brief to the AVINT dashboard.
6. Cue sanctions or MARINT review and tip suspected illicit charter, surveillance or state flights.

📊 Dashboard KPIs

🔍 Pre-built queries

🔗 Cross-discipline pivots

🗃 Data Management

🧩 Advanced Capabilities