Mission Domains

🔗 Kidnap, Hostage & Extortion

Mission domain · code kidnap

Catalog sources

2 no-auth

Disciplines

mapped

Data points

covered

Skills

run →

automation

🔧 Workbench All sources → AI Skills Playbooks Copilot brief Report

Intelligence Disciplines

OSINT (3) NEWSINT (2) HUMINT (1) GEOINT (1)

Data Points

event (2) location (2) person (1)

Sources for this domain (3)

Name	Category	Auth	Format
Global Terrorism Database Kidnapping/hostage incident dataset (START).	Kidnap & Extortion	NONE	`html`	home↗ api↗
Hostage US Support/tracking for hostage cases.	Kidnap & Extortion	NONE	`html`	home↗
ACLED Conflict Events Geocoded political-violence & kidnapping events.	Kidnap & Extortion	KEY	`json`	home↗ api↗

🔍 Lookup

📊 Pre-built Queries · Kidnap, Hostage & Extortion

Sources in this domain No-auth feeds only High-severity indicators Recent additions Sanctioned entities Open cases

📜 Playbook — Kidnap, Hostage & Extortion operations

Direction — frame the requirement for Kidnap, Hostage & Extortion: what decision does this support, by when?
Collection — collect from the 3 mapped domain sources and enabled feeds; capture provenance and observe OPSEC.
Processing — normalize, de-duplicate and enrich the collected data.
Analysis — correlate against local holdings; apply ACH; assign confidence.
Dissemination — open a case, draft a report, share via STIX/MISP.
Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

🤖 Copilot brief ⚡ AI Skills Resolve Enrich Auto-Collect Hunt Report Export

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

+ Case + Campaign Watchlist Tag Save search Whitelist Export STIX/MISP Report

🧩 Advanced Capabilities

Link Analysis Pivot Explorer Timeline Threat Hunting Analytics Detection Rules Blockchain OSINT Pivot Passive DNS TAXII 2.1 MISP Feed Create Alert Rule NetFlow Coverage & Gaps

🔗 Pivots

Sources →Country risk →Threat feed →Cases →Campaigns →

✨ Enrichment pathways

Enrichment Runner →Resolve locally →Integrations →

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook