Disciplines

📞 Telephony Intelligence (TELINT)

🔍 Lookup

📊 Pre-built Queries · Telephony Intelligence

📜 Playbook — Telephony Intelligence collection

1. Direction — frame the requirement for Telephony Intelligence: what decision does this support, by when?
2. Collection — collect from the 0 mapped sources (0 free) — filter the catalog by TELINT; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎯 Mission

TELINT collects intelligence from phone numbers, carrier metadata, and messaging-app presence to bind numbers to subscribers, devices, and accounts. It answers who owns a number, what carrier and line type it is, and which apps and identities are tied to it.

📡 Collection methods

• Number validation with carrier, line-type, and mobile-number-portability (HLR/MNP) lookup
• Country/area-code and prefix geolocation to region and originating operator
• Messaging-app presence checks on WhatsApp/Telegram/Signal for registration and profile photo
• CNAM and reverse-caller-ID enumeration for subscriber name resolution
• Number correlation against breach corpora and masked account-recovery hints
• TAC/IMEI decoding to derive device make and model when available

📚 Key sources & datasets

🎫 Data points produced

🔧 Tools & frameworks

• PhoneInfoga
• libphonenumber
• Ignorant
• Moriarty
• Maltego
• SpiderFoot

📜 Telephony Intelligence Tradecraft

1. Collect: validate the number and pull carrier, line type, and region metadata
2. Process: normalize to E.164 and cross-check messaging-app registration state
3. Analyze: correlate the number with breach records, emails, and recovery hints
4. Attribute: bind the number to a named subscriber and device via reuse pivots
5. Disseminate: deliver a number dossier with app presence and confidence scoring
6. Action: add high-risk numbers to monitoring or fraud watchlists

📊 Dashboard KPIs

🔍 Pre-built queries

🔗 Cross-discipline pivots

🗃 Data Management

🧩 Advanced Capabilities