Disciplines

💬 Social Media Intelligence (SOCMINT)

🔍 Lookup

📊 Pre-built Queries · Social Media Intelligence

📜 Playbook — Social Media Intelligence collection

1. Direction — frame the requirement for Social Media Intelligence: what decision does this support, by when?
2. Collection — collect from the 0 mapped sources (0 free) — filter the catalog by SOCMINT; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎯 Mission

SOCMINT collects and analyzes public social-media content, accounts, networks and behaviors to understand sentiment, detect coordinated activity, geolocate events and map online communities. It answers what people are saying and doing online, who influences whom, and whether the activity is authentic or manipulated.

📡 Collection methods

• Account and profile enumeration across platforms
• Follower/interaction graph and community-detection analysis
• Content, hashtag and keyword monitoring in near real time
• Sentiment and narrative analysis over time
• Bot and coordinated-inauthentic-behavior (CIB) detection
• Geolocation of posted media and reverse-image search
• Pattern-of-life and timeline reconstruction of target accounts

📚 Key sources & datasets

🎫 Data points produced

🔧 Tools & frameworks

• Maltego
• Gephi
• Sherlock
• snscrape
• InVID-WeVerify
• Telegago

📜 Social Media Intelligence Tradecraft

1. Enumerate target accounts and harvest public posts, follower graphs and hashtags across platforms.
2. Deduplicate, translate and structure content, extracting EXIF/geodata and media frames.
3. Run sentiment, narrative and network analysis and detect bot/CIB clusters via temporal and behavioral features.
4. Cluster sockpuppets and link personas to operators through shared infrastructure and stylometric overlap.
5. Publish narrative and influence-operation dashboards with reach and engagement metrics.
6. Geolocate posted media for GEOINT and refer personas to HUMINT vetting.

📊 Dashboard KPIs

🔍 Pre-built queries

🔗 Cross-discipline pivots

🗃 Data Management

🧩 Advanced Capabilities