Disciplines

📰 News Intelligence (NEWSINT)

Media Reporting as an Intelligence Source
Information
🔄 Pivot:🎯 Kidnap, Hostage & Extortion🎯 Conflict & Humanitarian🎯 Extremism & Radicalization🎯 Financial Crime🎯 Fraud & Identity🎯 Corruption & Governance

Sources

6
5 no-auth

Mission domains

7
reach

Data points

5
covered

Related INT

4
disciplines

🔌 Sources for News Intelligence (6)

SourceCategoryAuthFormat
DOJ Press Releases (financial fraud)
DOJ financial-crime prosecutions.		EnforcementNONEjsonhome↗ api↗
GDELT DOC 2.0 (adverse media)
Global news monitoring for adverse media.		Adverse MediaNONEjsonhome↗ api↗
Global Terrorism Database
Kidnapping/hostage incident dataset (START).		Kidnap & ExtortionNONEhtmlhome↗ api↗
ReliefWeb (OCHA)
Humanitarian situation & disaster feed.		Conflict & HumanitarianNONEjsonhome↗ api↗
START Terrorism Research
Radicalization & terrorism datasets (PIRUS/GTD).		ExtremismNONEhtmlhome↗ api↗
ACLED Conflict Events
Geocoded political-violence & kidnapping events.		Kidnap & ExtortionKEYjsonhome↗ api↗

🎯 Mission Domains served

Kidnap, Hostage & Extortion (2) →Conflict & Humanitarian (2) →Extremism & Radicalization (2) →Financial Crime (2) →Fraud & Identity (2) →Corruption & Governance (2) →Military & Defense (1) →

🎫 Data Points

event (5) →location (3) →person (2) →court_case (1) →keyword (1) →

🔍 Lookup

📊 Pre-built Queries · News Intelligence

Sources for NEWSINTNo-auth sourcesOSINT pivotsHunting queriesDetection rulesAnalytics

🔄 Live Datasets & APIs (3 key-free · ingestible)

Dataset / APIFormatEndpoint
DOJ Press Releases (financial fraud)jsonhttps://www.justice.gov/api/v1/press_releases.jsoncollect
GDELT DOC 2.0 (adverse media)jsonhttps://api.gdeltproject.org/api/v2/doc/doccollect
ReliefWeb (OCHA)jsonhttps://api.reliefweb.int/v1/disasterscollect
Run Auto-Collect Datasets Hub Import

📜 Playbook — News Intelligence collection

  1. Direction — frame the requirement for News Intelligence: what decision does this support, by when?
  2. Collection — collect from the 6 mapped sources (5 free) — filter the catalog by NEWSINT; capture provenance and observe OPSEC.
  3. Processing — normalize, de-duplicate and enrich the collected data.
  4. Analysis — correlate against local holdings; apply ACH; assign confidence.
  5. Dissemination — open a case, draft a report, share via STIX/MISP.
  6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

🤖 Copilot brief⚡ AI SkillsResolveEnrichAuto-CollectHuntReportExport

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

+ Case+ CampaignWatchlistTagSave searchWhitelistExport STIX/MISPReport

🧩 Advanced Capabilities

Link AnalysisPivot ExplorerTimelineThreat HuntingAnalyticsDetection RulesBlockchainOSINT PivotPassive DNSTAXII 2.1MISP FeedCreate Alert RuleNetFlowCoverage & Gaps

🔗 Pivot to related disciplines

OSINT Open Source Intelligence →GEOINT Geospatial Intelligence →LEGINT Legal Intelligence →DISINFOINT Disinformation Intelligence →

✨ Enrichment pathways

Enrichment Runner →Integrations / keys →Enrichments on file →Resolve locally →

🎯 Mission

NEWSINT monitors global news and media to extract events, entities, and sentiment for early warning and situational awareness. It answers what happened, where and when, who is involved, and how coverage and tone are trending.

📡 Collection methods

  • Global multilingual news aggregation with geocoded event extraction
  • Named-entity recognition and CAMEO-style event coding of actors and actions
  • Sentiment, tone, and framing analysis compared across outlets
  • Machine translation and cross-source deduplication of the same story
  • Media-bias and source-reliability tagging for weighting
  • Breakout and anomaly detection on coverage volume for alerting

📚 Key sources & datasets

GDELT →Media Cloud →ACLED →GNews →Google News RSS →Wikipedia Current Events →Wayback Machine →EventRegistry →

🎫 Data points produced

Event / Incident →Keyword / Narrative →Location / Coordinates →Person / Name →Company / Organization →GPS Coordinates →URL →

🔧 Tools & frameworks

  • GDELT Analysis tools
  • Media Cloud
  • spaCy
  • newspaper3k
  • QGIS
  • Elasticsearch/Kibana

📜 News Intelligence Tradecraft

  1. Collect: ingest multilingual news feeds and RSS scoped to watch topics
  2. Process: extract entities, geocode events, translate, and deduplicate
  3. Analyze: score sentiment and detect coverage breakouts against baseline
  4. Attribute: link events to actors, locations, and prior reporting threads
  5. Disseminate: publish a geocoded news brief with trend lines and citations
  6. Action: fire alerts and cue collection in other disciplines

📊 Dashboard KPIs

Articles ingestedEvents geocodedSentiment indexBreakout alertsSources covered

🔍 Pre-built queries

NEWSINT command board →Live event stream (GDELT) →Pivot on dp_event →Geo/location pivot →Country dashboard →

🔗 Cross-discipline pivots

To DISINFOINT narrative check →To ENERGYINT infra events →Correlate event to actors →Open-source cross-search →

🗃 Data Management

+ Case+ CampaignWatchlistTagSave searchWhitelistExport STIX/MISPReport

🧩 Advanced Capabilities

Link AnalysisPivot ExplorerTimelineThreat HuntingAnalyticsDetection RulesBlockchainOSINT PivotPassive DNSTAXII 2.1MISP FeedCreate Alert RuleNetFlowCoverage & Gaps
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center