> For the complete documentation index, see [llms.txt](https://jieyab89-osint.gitbook.io/jieyab89-osint-cheat-sheet-wiki-tips/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jieyab89-osint.gitbook.io/jieyab89-osint-cheat-sheet-wiki-tips/intelligence-base/intelligence-base-and-knowledge-base.md).

# Intelligence Base & Knowledge Base

## OSINT and Other Category (Intelligence Base)

> Knowledge base and acronym likely glosarium

## 1. OSINT

Open Source Intelligence. In point one, OSINT search and Collection of information through open sources or the public internet. In contrast to intelligence obtained through secret methods or hidden, OSINT utilizes information available to general.

## 2. MASINT

Signature Measurement and Intelligence focuses on collection and analysis of data from various forms of temperature measurements and changes or climate. In contrast to intelligence which is based on visual reconnaissance or communications, MASINT relies on technology to detect and analyzing signals that cannot be detected directly by human senses.

## 3. GEOINT

Geospatial Intelligence focuses on geographic or system analysis geographic information (GIS) to collect and analyze geography or satellite imagery. Usually used for military or Speakers for analyzing information from satellite images, information a region and place

## 4. IMINT

Image Intelligence focuses on analyzing images or footage media such as videos or photos, visual analysis from various sources examples of satellite images, airplanes, building structures and cities. In process This an analyst will extract information from an image, for example in a mountainous area identifying the height of a plains, terrain and determining coordinates

## 5. DARKINT

Darkweb Intelligence focuses on the darkweb. Collection information and digital traces contained in darkwb (Dark Site) Usually used to track cyber threat actors, buying and selling illegal, human trafficking and monitoring crimes on the internet

## 6. SOCMINT

Social Media Intelligence focuses on gathering information through social media platforms such as Facebook, Instagram, Twitter and others. This collection of information can be used to view activity as well as monitoring on social media, the information collected various things such as usernames, posts, trending, dates and other things which can be used to track information

## 7. SIGINT

Signals intelligence is intelligence derived from signals and electronic systems used by foreign targets, such as communications systems, radars, and weapons systems to determine the capabilities, actions, and intentions of foreign enemies

## 8. ELINT

Electronic Intelligence focuses its attention on the Radar Systems and to the analysis of their characteristics. Usually used in military applications, information collected generally does not include personal communications. The sensors used to collect data may be active or passive. A particular signal is analyzed and compared with data recorded for a known signal type

## 9. HUMINT

Human Intelligence focuses collecting information or intelligence from humans and provided by human resources. For example interrogations and conversations, interviews, surveys, espionage with people who have access to information. Surveillance of targets, uncovering people with potential access to information, approaches to targets

## 10. OPSEC (Operational security)

Operational Security is a risk management and security process and strategy used to classify and protect sensitive information and prevent it from falling into unauthorized hands or people. In implementing OPSEC, information will be classified and steps will be taken to identify potential threats and vulnerabilities that may occur in that sensitive information. The approach involves analyzing an organization's systems and operations from the perspective of those who could potentially attack and retrieve sensitive information. Several applications in practice such as monitoring behavior, social media, and implementing best security practices will reduce the risk of exposure of sensitive information.

## 11. FISINT

Foreign instrumentation signals intelligence involves collecting information from foreign nationals who are testing or using aerospace, surface, or sub-surface systems. Foreign instrumentation signals intelligence involves the collection of information from foreign nationals who are testing or using aerospace, surface, or subsurface systems, related to the testing and operational deployment of foreign aerospace, surface, and subsurface systems. FISINT is not in ordinary human language, but in machine-to-machine (instrumentation) language or in a combination of ordinary human language and instrumentation language. FISINT is also considered a subset of MASINT (intelligence measurement and signature)

## 12. COMINT

Communications intelligence focuses information gathered from the communications between individuals or groups of individuals, including telephone conversations, text messages, email conversations, radio calls, and online interactions on the analysis of signals containing speech or text. Tapping voice, text or signal channels is aimed at finding information about voice, text and signal transmissions. That can lead to determining a number of intelligence considerations about the communications, such as signal bandwidth and protocol, modulation type and rate, and the radio frequency used

## 13. CSINT

\*\*CSINT \*\* is Cyber ​​Security Intelligence In the world of intelligence, CSINT refers to and analysis related to cyber security which is used to protect computer systems, networks and data from threat information and cyber attacks. CSINT can also involve the use of classified information sources, such as intercepted communications or data from surveillance systems, typically used by authorized investigators. Examples include specialist analytical and forensic tools, secret geolocation service, A collection of confidential data provided by law enforcement agencies, subscription and special tools

Also

\*\*CSINT \*\* stands for "Closed Source Intelligence". This is information that is not publicly available, such as law enforcement data, goverment data, education records, banking records, or medical records, this come from closed source like informan, goverment database, banking database and etc or other things

*\*Notes : The meaning depends on the context being Jieyab89 discussed. For example, “private data” in CSINT can refer to different things. CSINT may mean Cyber Security Intelligence, which relates to cyber activities or operations*

## 14. Espionage

Espionage is the illegal or unauthorized collection of confidential or sensitive information. Espionage is usually carried out to obtain data of strategic or tactical value, such as military, technical, business or political information. These activities often include infiltrating organizations, monitoring their activities, or using obfuscation techniques to access protected information

## 15. Satellite Imagery

Satellite Imagery focuses on the collection of GIS, Earth imagery, space operated by governments and companies around the world. Useful for analyzing changes on Earth, maps and images, detection of climate change and weather, disasters, fires or leaks, air and maritime use. Satellite types include Visible Imagery, Infrared Imagery. It can be utilized for monitoring especially such as national security, war, natural resources, disasters, maritime, academic research, and other things. There are many satellite providers such as Google, Bing, Maxar, Planet, Himawari, NASA, Sentinel etc

## 16. Interrogation

Interrogation focuses on the examination of a person through verbal questioning by an authorized or public person. Interrogation is the main task in the investigation process. The goal is to obtain information about information, true information, so that it can help solve the case. It contains the 5W+1H (What, When, Who, Why, Where, and How)

## 17. Forensics

Forensics focuses on the science used to assist the process of justice through the application of science. Proving the existence of a crime or offense, forensics can be done in Medical, IT (Digital), Chemistry and Biology, Psychology. Examples include Digital Forensics, Forensic Pathology, Mobile Forensics

## 18. Sockpuppet

Sockpuppet focuses on identity in the internet world. The goal is to obscure identity. Sockpuppets can also be used as research accounts to hide the identity of OSINT investigators. With this account, investigators can access information that requires an account to access

## 19. Astronomy

Astronomy focuses on the study of celestial bodies, the phenomena of the universe and the processes that occur in space. It is also known as star science or phalactic science. Why is OSINT or investigation necessary? It can be utilized to determine time, Know the distribution and movement of celestial bodies, Clues to natural phenomena, Weather prediction

## 20. Cryptography

Cryptography focuses on the study of mathematical techniques to keep information secure. Cryptography uses codes, hashes, and signature algorithms to protect information, for example like RSA, DSA

## 21. Reconstruction

Reconstruction focuses on cases that can provide a picture of how events really happened. Although not necessarily also the suspects, related, who provide explanations are telling the truth. In the reenactment there are several methods such as Interview, Interrogation, Confrontation, Reconstruction. Why is it necessary? Reconstruction is carried out by investigators to complete case files, develop investigations, and get a picture of how the incident occurred

## 22. CIA Triad

The CIA Triad is a model used as a guide in information security that consists of three aspects, namely Confidentiality, Integrity, Availability the most important concept in information security is adequately protecting those assets

## 23. Text Intelligence

Focusing on text analysis or text mining, this is useful for analyzing whether the text is generated by AI, Plagiarism, Clustering and other things, this is used for social media analysis, such as word repetition, mentions, similar text and words to be selected and processed (clsutering) along with time and other things

## 24. Propaganda

Propaganda is a type of communication that seeks to influence views and reactions, without regard to the true or false value of the message conveyed

## 25. Wiretapping

Wiretapping is an activity to listen to, record, alter, distort, or record the transmission of electronic information or electronic documents. Tapping can be done through wired communication networks or wireless networks

## 26. 5W + 1H

5W 1H is a question-and-answer and problem-solving method that consists of 6 questions, namely what, who, when, where, why, and how. 5W 1H can be used in various situations, such as: News writing 5W 1H is a standardized guide for composing news texts. The answers to the 5W 1H questions will help the writer organize the news information well. Problem solving 5W 1H can help look at ideas and issues from multiple perspectives, helping to understand the problem and find its root causes. 5W 1H process improvement can be used as a continuous process improvement technique in an organization

## 27. Sociology

Social studies is the study of humans as individuals, communities and societies, and their interactions with each other and the environment. It also studies how humans organize themselves, international relations, and wealth. Social sciences include various fields of study, such as: Anthropology, Economics, Political science, Psychology, Sociology

## 28. BIAS

Bias is a tendency or preference that influences the way a person thinks, acts or makes decisions. Biases can arise in a variety of contexts, such as in decision-making, judgment of others, or interpretation of information. Biases can be positive or negative, and are often unconscious (a prejudiced presentation of material) It should be emphasized that everyone has BIAS, our role is to study so as not to get carried away with our own BIAS, there are factors such as environment, point of view and other things. We should not be complacent about being stupid or anything with the BIAS we have

## 29. FININT

Financial intelligence is the gathering of information about the financial affairs of entities of interest, to understand their nature and capabilities, and predict their intentions. Generally the term applies in the context of law enforcement and related activities. One of the main purposes of financial intelligence is to identify [financial transactions](https://en.wikipedia.org/wiki/Financial_transaction) that may involve [tax evasion](https://en.wikipedia.org/wiki/Tax_evasion), [money laundering](https://en.wikipedia.org/wiki/Money_laundering) or some other criminal activity

## 30. VOIP

VoIP stands for Voice over Internet Protocol, a technology that allows users to make voice and video calls over the internet e.g WhatsApp, Discord

## 32. Linguistics

Linguistics is the study of language in general, including local languages, Indonesian languages, or foreign languages. Linguistics is also called general linguistics. In linguistics, language is studied with its various aspects, such as Language sounds (phonology), Word forms (morphology), Sentences (syntax), Word meanings (semantics), Language context

## 33. Chronolocation

Chronolocation refers to a way of mapping or relating an event or occurrence to the time and place where it happened. To describe an event or phenomenon that happened in a certain place and time

## 34. Facade

Facade is the outer part of a building, usually referring to the front, but the facade can also refer to the sides and back. The facade includes elements such as walls, windows, doors, decorations, and materials used, and is often the most prominent element in forming the first impression of a building

## 35. Explosive Ordnance (EO)

EO is a term used to refer to various types of weapons or devices that contain explosives and are designed to explode or cause damage when triggered. Explosive ordnance includes a number of devices that can be found in military or war contexts

## 36. UXO (Unexploded Ordnance)

UXO is a term that refers to explosive devices that have not exploded or failed to detonate as intended, and remain dangerous even when inactive. UXO can be any type of weapon or device used in warfare or military activity, such as a bomb, grenade, artillery shell, landmine or rocket

## 37. Euphoria

Euphoria is an emotional state characterized by feelings of ecstasy, excessive happiness, or overwhelming joy

## 38. Psychological Operations (PsyOps)

Psychological Operations is a strategy used to influence the thoughts, emotions, and behaviors of individuals or specific groups, with the aim of achieving military or political advantages. PsyOps involves the use of information, propaganda, and communication techniques to influence the perceptions and attitudes of adversaries or even the general public

## 39. Buzzer

A "buzzer" is a person or group who actively promotes or spreads specific messages, opinions, or content on social media platforms to influence public opinion, support a political candidate or party, promote a brand, or sway a particular audience. In essence, a buzzer acts as an online influencer or paid promoter who may share posts, tweets, or videos in a way that amplifies a particular narrative or agenda. This practice is often seen in political campaigns, product promotions, or public relations efforts, where buzzers may be paid or hired to generate attention and engagement through social media

## 40. Sketches

Sketches refer to drawings or illustrations made to depict individuals or objects relevant to an intelligence operation or investigation. It can be a drawing of a person's face (facial sketch), a map, or a diagram depicting a location, building, or other significant object. They are used to assist intelligence agents in identifying individuals or understanding a particular situation based on the information that has been gathered

## 41. Slang

Slang is a seasonal, unofficial language variety used by teenagers or certain social groups for internal communication with the intention that non-members of the group will not understand. You can check at in the Slang dictionary or Slang language in the region

## 42. Integrity

Integrity is a trait or state that shows complete unity, honesty, and authority. Integrity can also be defined as consistency between one's words, beliefs, and actions

## 43. Unique Data

Unique Data mean in searching for data or information, specify unique data such as time, region, posture, telephone number, identity, email address or brand or other things that unique, some of these things will be useful for narrowing down information so that it is not too broad

## 44. Hunch (Feeling)

A hunch is a person's ability to sense what will happen in the future. It can also be defined as intuition or innate knowledge. Hunches can arise after seeing circumstances, indications, or signs. It can be a feeling or a gut feeling that comes before something happens

## 45. Pun

A pun is a play on words that changes the meaning of a word or phrase into a new one, resulting in a different meaning from the original. It is often used to convey humor, satire, or jokes. Even to censor or avoid information, for example from a wiretap, it can usually be translated into typos, emojis or words that only the community understands like a code or morse

## 46. Instincts

Instincts are patterns of behavior that are inborn and not learned. Instinct is also called instinct or garizah. Instincts have several functions, including: Adapting to the environment, Survival, Breeding. Strong instincts can help a person make better decisions and avoid adverse situations. We often use instinct and guesswork when searching for information

## 47. Provocation

Provocation is an act or behavior done intentionally to trigger an emotional reaction, controversy, or debate. Provocation can also be defined as the act of inciting or manipulating someone

## 48. Sentiment Analysis

Sentiment analysis is the process of analyzing digital text to determine whether the emotional tone of the message is positive, negative, or neutral. Today, companies have large volumes of text data such as emails, customer support chat transcripts, social media comments, and reviews. It used by Journalist and news portal or other things

## 49. UAV (Unmanned Aerial Vehicle)

A UAV (Unmanned Aerial Vehicle) is an unmanned aircraft used to fly in the air and collect data or images. In the context of OSINT (Open Source Intelligence), these UAVs are used to collect information from the sky, such as pictures or videos of a place, which can be analysed to find out things

## 50. Small Arms and Light Weapons (SALW)

SALW stands for “Small Arms and Light Weapons”, which refers to various types of light weapons that can be carried and used by one or two people. The term is often used in the context of global security and stability, especially in relation to the circulation of illegal weapons and their negative impacts

## 51. Anti Money Laundering (AML)

AML (Anti-Money Laundering) refers to a set of actions and procedures designed to prevent and detect money laundering activities. Money laundering is the process of hiding the origins of money obtained from illegal activities, such as corruption or drug trafficking, to make it appear legitimate. AML includes various steps taken by banks and other financial institutions, such as verifying customer identities, tracking suspicious transactions, and reporting suspicious activities to the relevant authorities. The goal is to protect the financial system from misuse

## 52. Technical Surveillance Counter-Measures (TSCM)

Technical Surveillance Counter-Measures (TSCM) is a way to protect important information from being eavesdropped or stolen. For example, if someone tries to listen in on conversations or spy using hidden devices like microphones or cameras, TSCM will find and disable those devices. The goal is to protect privacy and ensure information security

## 53. Personally Identifiable Information (PII)

PII (Personally Identifiable Information) refers to any information that can be used to identify an individual. This includes details like your name, address, phone number, email, face, fingerprint, retina, social security number, or even online identifiers like your IP address. Protecting PII is important because it helps prevent identity theft and ensures privacy

## 54. Protected Health Information (PHI)

PHI (Protected Health Information) refers to any information about an individual's health status, healthcare provision, or payment for healthcare services that is protected by privacy laws, like HIPAA (Health Insurance Portability and Accountability Act) in the U.S. PHI includes things like medical records, test results, insurance information, and other personal health details that must be kept confidential to protect a person's privacy

## 55. Cyber Incident Response (CIR)

CIR (Cyber Incident Response) is a structured process for detecting, analyzing, handling, and recovering systems from cybersecurity incidents, such as malware attacks, data leaks, or hacking. The goal is to minimize the impact of the attack, secure the system, and collect evidence for forensics or follow-up investigations

## 56. Grey Literature

Grey literature is a type of information produced outside traditional publishing and distribution channels, such as scientific journals or books. Examples include research reports, conference papers, theses, dissertations, government documents, and other similar materials. Grey literature is often not indexed in general bibliographic databases and may be difficult to find or access through normal publication channels

## 57. Direction Finding (DF)

Direction Finding (DF) is the process of determining the direction from which a radio signal or electromagnetic wave originates. It involves the use of antennas and receivers to detect and analyze signals, enabling the location of the signal source to be determined. DF has a wide range of applications, including military, aviation, maritime, and even sports such as radio orienteering

## 58. Undercover

Undercover generally means disguising oneself or working secretly without revealing one's true identity, an investigative technique used by law enforcement agencies to infiltrate a group or organization

## 59. POI (Point of Interest)

Point of Interest (POI) is a point, entity, or behavior that attracts the attention of analysts because it has informational value, connections, or potential influence on a specific goal. In short, POI is a key indicator that marks where valuable information, hidden motivations, and potential influences lie. Here are some examples of POIs: active social media accounts during political events or interest in emotional reactions such as reactions, ego, and identity (personal) regarding engagement and having the motivation do that

## 60. LLM (Large Language Model)

An LLM is an AI system trained on massive amounts of text. It learns patterns in language so it can understand questions and generate human-like responses. LLMs are used for chatbots, writing help, coding assistance, translation, and summarizing information (LLM its produce language)

## 61. LGM (Large Geometry Model)

An LGM is an AI system trained on large amounts of geographic data over time, such as satellite images, weather records, and environmental changes. It learns how places on Earth change across months or years and can help analyze or predict things like floods, droughts, deforestation, or urban growth (LGM its understand and predict changes on Earth across space and time)

## 62. LBS (Location-Based Service)

Location-Based Service (LBS) tracking determines a device's location using nearby cellular network towers rather than GPS satellites. It acts as a reliable backup when GPS signals are unavailable, such as indoors or in urban canyons, offering lower battery consumption but lower accuracy (meters) compared to GPS

## 63. Emotional Intelligence

Emotional intelligence (EI or EQ) is the ability to perceive, understand, manage, and use emotions effectively in oneself and others. It is crucial for high performance, leadership, and building healthy relationships, often serving as a better predictor of success than IQ. Key components include self-awareness, self-regulation, motivation, empathy, and social skills, all of which can be developed

## 64. Lone Wolf

Lone Wolf is a term used to describe an independent individual who tends to be solitary and feels more comfortable working or making decisions on their own rather than relying on a group. They are usually focused on personal goals, independent in their thinking, and not overly attached to social dynamics or group hierarchies

## 65. Blueprint

Blueprint is a detailed design that forms the main basis for building, creating, or developing something, providing clear direction and structure. Blueprints not only provide an overview, but also encompass concepts, structures, systems, and the steps required to realise an idea in practice. In various fields, blueprints are used as the main guidelines to ensure that the process runs more smoothly, is better organised, and is in line with the planned objectives. For this reason, blueprints are often considered the foundation on which projects, works, or systems can be built and developed effectively

## 66. Mainstream

Mainstream is an English term that means “the dominant or widely accepted trend,” referring to ideas, lifestyles, cultures, or styles that are embraced, liked, and considered normal by the majority of society. Things that are mainstream are generally popular, conventional, and commonly found in everyday life

## 67. AI Slop

AI slop refers to low-quality, bland, or meaningless digital content that is mass-produced using generative AI, often with little to no human oversight. This type of content includes images, videos, and text that flood social media platforms (such as the “Shrimp Jesus” images on Facebook) and are typically created for clickbait purposes and quick monetization

## 68. Shell Company

A shell company is a corporate entity that is legally established but has no active business operations, no physical office, and no employees. Such companies often exist only on paper or consist solely of legal documents

## 69. Attack Surface

An attack surface is a mapping used to identify vulnerabilities across all exposed assets in order to uncover potential initial access paths, security weaknesses, and potential pivots between assets within a system or organizational environment. Examples include data leaks, document leaks, IP addresses, DNS, employees, and others

## 70. Offshore Account

An offshore account is a bank or financial account opened outside the country where the account holder resides or operates, typically used for international transactions, asset protection, financial privacy, or cross-border business structures

## 71. Enumeration

Enumeration is the process of gathering and identifying detailed information about a target or system to identify assets, services, users, configurations, and vulnerabilities. For example, it involves identifying misconfigurations on a server or discovering database backups, error messages, or other relevant information within the target system that could potentially be exploited

## 72. Combolist

A combolist is a collection of credential data that typically contains pairs of email addresses or usernames and passwords in a simple format such as email:password. This data generally originates from database breaches, phishing, information-stealing malware (infostealers), or the consolidation of various older breaches into a single large list. It is called a “combo” because it combines account identities with their passwords. In the world of cybersecurity, combolists are often associated with credential stuffing—automated login attempts across multiple services using leaked credentials, exploiting the habit of users reusing the same password across many sites. However, on the defensive side, security firms also use this type of data to detect compromised accounts and alert users to change their passwords and enable two-factor authentication

## 73. Decoy

A decoy is a lure, trap, or fake object that is used to trick, distract, or lure a target into a certain direction. The term is very popular in business strategy (the decoy effect), the military, and gaming. It can be used to trick enemy radar, waste enemy ammo, or divert attacks from real military assets or other things in intelligence

## 74. Pivoting

Pivoting is a technique for moving from one piece of information to another related piece of information in order to expand an investigation. From one small clue (information) finding another clue and then continuing to investigate e.g username to parsing social media like Instagram, Facebook then check the each results

## 75. Parsing

Parsing is the process of extracting, breaking down, and then organizing raw data into a format that is easier to read or analyze. It transforms unstructured data into structured information. For example, extracting phone numbers or reading file metadata

## 76. Data Correlation

Data correlation is the process of linking different data sets to identify relationships, patterns, or commonalities. It involves combining pieces of information to form a clearer picture. E.g. Email <darkfox77@mail.com>. Twitter username darkfox, GitHub uses the same email address

## 77. Typosquatting

Typosquatting is a cyberattack and brand-hijacking technique where threat actors register look-alike domain names—relying on common spelling or typing mistakes—to deceive users. Attackers use these sites to distribute malware, host phishing scams, or serve up ad-heavy pages to steal credentials or siphon web traffic

## 78. Encoding

Encoding is the process of converting data or information from one format to another according to specific rules, so that the data can be stored, transmitted, or processed more efficiently and securely—for example, Base64, URL-encoding, etc

## 79. Hashing

Hashing is a one-way mathematical process that converts data (text, files, or passwords) into a unique, fixed-length string of random characters, known as a hash value or digest. It is a one-way process used to verify the authenticity or integrity of data (it cannot be reversed). Examples include MD5, SHA, etc

## 80. Encryption

Encryption is the process of securing data by converting the original information (plaintext) into unreadable random code (ciphertext) using mathematical algorithms. This data can only be restored to its original form by a party that possesses the correct decryption key. Symmetric Encryption: Uses the same key for both locking (encryption) and unlocking (decryption). It is fast and efficient, but both parties must have the key beforehand. Asymmetric Encryption (Public Key): Uses two different keys. The public key is used for encryption (and can be shared with anyone), and the private key is used for decryption (known only to you). End-to-End Encryption (E2EE): A system where messages are encrypted directly on the sender’s device and decrypted only on the recipient’s device. For example, AES, DES, RSA. Encryption methods include ECB (Electronic Codebook), CBC (Cipher Block Chaining), and CFB (Cipher Feedback)

## 81. UTF

UTF stands for Unicode Transformation Format. It is a character encoding standard that computers use to translate binary numbers (0s and 1s) into human-readable text, letters, symbols, or emojis. Before UTF existed, computers used standards like ASCII, which were very limited and could not display non-Latin characters (such as Arabic, Chinese, or Japanese) or emojis. UTF was created so that every character from every language in the world would have the same unique code on every computer system. Here are the most commonly used types of UTF: UTF-8, UTF-16, UTF-32

## 82. Cookie

A cookie (or HTTP cookie) is a small text file sent by a website and stored on your computer or mobile device by your web browser as you browse the internet. Main Functions of CookiesSession Management: Keeps you logged in to your social media or email account, so you don’t have to enter your username and password every time you navigate to a new page. Personalization: Remembering the settings you’ve chosen, such as language (e.g., selecting Indonesian), display theme (dark/light), or items you’ve added to your online shopping cart and tracking on the site

## 83. API

API stands for Application Programming Interface. An API is a set of rules and protocols that allows one application or software to communicate and exchange data with other applications automatically. Simply put, an API acts like a “waiter” in a restaurant. You (the user) order food (request) through the server, the server relays it to the kitchen (server), and then the server brings the food (response) back to your table. Popular API Protocols/ArchitecturesRESTful API (REST): The most popular architecture today, using standard HTTP protocols (GET, POST, PUT, DELETE). It is very lightweight and flexible.SOAP: An older, more rigid protocol that uses XML format. It is typically used by the banking sector due to its very strict security standards.GraphQL: A modern alternative to REST developed by Facebook. It allows clients to request only the specific data they need, thereby conserving data usage

## 84. HTTP Request

An HTTP request is an electronic message sent by a client (such as a web browser, mobile app, or client API) to a server to request data or perform a specific action. Every time you type a website address, click a button, or submit a form, your device is sending an HTTP request. Example POST, GET, HEAD and have a HTTP request header, HTTP response header, HTTP Body

## 85. Browser Fingerprints

Browser fingerprinting is an advanced tracking technique used by websites to identify and uniquely identify your device based on a combination of unique settings in your browser and operating system. Unlike cookies, which are artificial files stored on your device, browser fingerprinting uses native information that your device voluntarily transmits when sending an HTTP request, example user agent, timezone, pixel layout and etc

## 86. Red District

A red-light district is an urban area where businesses related to the commercial sex industry—such as prostitution, adult stores (sex shops), and strip clubs—are concentrated (a district where brothels are concentrated)

## 87. Macro Documents

A macro document is a document (such as a Word, Excel, or PowerPoint file) that contains a macro—a series of commands or automated code scripts designed to instantly perform repetitive tasks. In the Microsoft Office environment, macros are written using a programming language called VBA (Visual Basic for Applications)

## 88. PDF (Pedo)

"Pedofile" or "PDF" is slang commonly found on forums and is used to refer to a pedophile

## 89. Lolita

On adult forums or websites, “Lolita” is often misused as a sexual term referring to children or teenagers. This stems from a perversion

## 90. Minor

"Minor" is a legal and social term for a person who has not yet reached the age of majority as recognized by the state. So “adulthood” isn't just about physical maturity or behavior, but legal status. In short, a minor

## 91. Gooner

"Gooner" often refers to someone who spends too much time on or is obsessed with pornographic content or excessive masturbation. It is almost always used in an NSFW (adult) context

## 92. Wardriving

Wardriving is the activity of searching for and mapping public or private Wi-Fi networks and telecommunications signals while traveling in a vehicle. This activity is typically performed using a laptop or smartphone equipped with a wireless device, antenna, and GPS to detect and record the location of the signals found

## 93. GNSS

GNSS (Global Navigation Satellite System) is a satellite-based navigation system used to determine location, speed, direction, and time globally. GNSS encompasses various navigation satellite systems such as GPS, GLONASS, Galileo, and BeiDou. This technology is widely used in smartphones, vehicles, aviation, shipping, mapping, and modern tracking and navigation systems

## 94. Dataset

A dataset is a structured collection of data for analysis, AI/machine learning training, research, or information processing. Datasets can contain text, numbers, images, audio, video, or metadata collected from various sources

## 95. Data Harvesting

Data harvesting is the process of collecting large amounts of data from various digital sources, such as websites, social media, applications, IoT devices, and online networks. The collected data can include user information, metadata, activities, locations, and even behavioral patterns for analysis, marketing, research, or system development purposes. For example, a password storage system using a database is considered password harvesting

## 96. APT

An Advanced Persistent Threat (APT) is a type of organized cyberattack carried out covertly, continuously, and targeted against specific targets such as companies, governments, or critical infrastructure. APT perpetrators typically possess advanced technical capabilities, substantial resources, and long-term goals such as espionage, data theft, sabotage, or permanent access to the victim's system. Unlike traditional attacks, APTs focus on infiltrating the target network slowly to avoid detection, then maintaining access to the target network for as long as possible while gathering information or conducting specific operations

## 97. Prohibited Commercial

Prohibited Commercial is a term that refers to business activities, trade, or commercial transactions prohibited by law, regulation, company policy, or specific platform terms. This prohibition typically applies to activities that are illegal, high-risk, unethical, or contrary to compliance rules. Examples include the trade in illegal goods, fraudulent transactions, money laundering, the sale of stolen data, or services that violate government regulations or digital platform policies

## 98. Power Parity Purchasing

Purchasing Power Parity (PPP) is an economic concept used to compare currency values ​​and the cost of living between countries based on the purchasing power of similar goods and services. PPP is often used to measure living standards, economic strength, and income comparisons more realistically than simply using exchange rates. For example, the price of food or daily necessities in one country may be cheaper even if its currency is lower

## 99. BTS

A BTS (Base Transceiver Station) is a telecommunications device or tower that transmits and receives radio signals between a cellular operator's network and user devices, such as smartphones. BTSs are a key component of a telco network, providing calls, SMS, and 4G and 5G data connections. Each BTS typically has multiple antennas and a coverage sector that regulates signal coverage in a specific area

## 100. Triangulation

Triangulation is a method of determining the location of an object or device by comparing the direction, distance, or signal strength of multiple reference points. This technique is commonly used in GNSS, telecommunications networks, Wi-Fi, radar, and location tracking systems. In telecommunications, triangulation is often used to estimate a device's position based on multiple base stations or signal sources around the target

## 101. Azimuth

Azimuth is a horizontal angle used to determine an object's orientation relative to north. Its value is measured clockwise from 0° to 360°. In telecommunications and RF (RF (Radio Frequency) is an electromagnetic wave used for wireless communication over the air. RF is used in various technologies such as Wi-Fi, Bluetooth, radio, television, GPS/GNSS, RFID, and even 4G and 5G cellular networks), azimuth is often used to indicate the direction of a base station (BTS) antenna or antenna sector. For example, an antenna with an azimuth of 90° points east. This concept is also used in navigation, GNSS, mapping, military, and geospatial surveying

## 102. CellMapper

CellMapper is an application and crowdsourcing platform used to map cellular networks such as GSM, LTE, 4G, and 5G based on user-collected data. This application utilizes GPS and radio information from smartphones to display BTS/tower locations, signal strength, antenna sectors, and cellular operator coverage on a digital map. CellMapper is often used for telco network analysis, signal optimization, RF surveys, network troubleshooting, and telecommunications research

## 103. RF (Radio Frequency)

RF (Radio Frequency) refers to the radio frequency used to send and receive wireless communications over the air. RF technology is used in Wi-Fi, Bluetooth, radio communications, RFID, GPS/GNSS, and even 4G and 5G cellular networks. In telecommunications, RF is related to signal analysis, antennas, frequency spectrum, and wireless communication between devices

## 104. Sandboxing

Sandboxing is a technique for running files, applications, or code in an isolated environment to analyze their behavior without affecting the underlying system. In cybersecurity, sandboxes are used to safely detect malware, malicious payloads, and suspicious activity

## 105. C2 (Command Control)

C2 (Command and Control) is a server or infrastructure used by malware and APT operators to communicate with victim devices. Through C2, attackers can send commands, receive stolen data, update payloads, or remotely control the malware

## 106. Supply Chain Attack

A supply chain attack is an attack method that involves infiltrating trusted third-party software, libraries, vendors, or services. This technique allows malware to spread widely through updates, dependencies, or official software distribution

## 107. Zero Day

A zero-day, or 0-day, vulnerability is a security vulnerability that is unknown or unpatched by the vendor. Because no patch is available, zero-day exploits are often used by APTs to gain initial access to systems with a high success rate

## 108. Obfuscated

Obfuscating is a technique that disguises code, scripts, or payloads to make them difficult to read and analyze. Obfuscated malware is typically used to evade detection by antivirus software, security analysts, and monitoring systems

## 109. Lateral Movement

Lateral movement is a technique of transferring access from one system to another within an internal network after the attacker has successfully gained access to the initial device. The goal is to expand control, obtain sensitive data, or reach key targets within the victim's network

## 110. DOH

DNS over HTTPS (Technology / Computer)In the world of networking and cybersecurity, DoH is a protocol that encrypts website address (DNS) requests and lookups using HTTPS. Function. Hides your browsing activity from internet providers (ISPs) or hackers, so that your privacy and security online are better protected

## 111. Surveillance

Surveillance generally means close supervision or monitoring. For example, monitoring using CCTV cameras, drones, or tracking software can be used in tactical intelligence or other fields, depending on the context. This surveillance can be processed and analyzed in visual formats, such as maps, nodes, or graphs, and can be combined with face recognition for similar data enrichment in surveillance and monitoring

## 112. Dopamine

Dopamine is a natural chemical in the brain that acts as a neurotransmitter (a messenger). Often referred to as the “happiness hormone,” dopamine plays a major role in regulating motivation, learning, and feelings of pleasure, as well as prompting you to repeat satisfying activities

## 113. Breaching (SWAT)

In SWAT operations, “breaching” refers to a tactic involving forced entry to gain rapid access to a locked building or an area barricaded by the enemy. It is a crucial initial step before the team carries out a raid in high-risk situations such as hostage rescues

## 114. SWAT

SWAT (Special Weapons and Tactics) is a special police unit. Its members are trained and equipped with specialized weapons to handle high-risk situations that are beyond the capabilities of regular police officers, such as hostage rescues, dangerous arrests, and counterterrorism operations

## 115. RoE

RoE (Rules of Engagement) are legal and tactical protocols that govern when and how law enforcement officers (such as SWAT teams in the U.S.) or military personnel may use force, including lethal force

## 116. Proxy

A proxy is an intermediary server that acts as a defensive barrier between an internal network (user devices) and an external network (the internet). In the world of cybersecurity, a proxy is not merely a tool for hiding identity, but a means of controlling data traffic to prevent cyberattacks. For example: Forward Proxy: Ensures security from the inside out. Connects a group of internal users to the public internet while filtering out harmful websites. Reverse Proxy: Ensures security from the outside in. Placed in front of a company’s web server to filter, inspect, and secure requests from the internet before they reach sensitive data

## 117. EDR (Endpoint Detection and Response)

The SOC (Security Operations Center) and EDR (Endpoint Detection and Response) serve as the "eyes, ears, and ground forces" for cybersecurity analysts. EDR is the primary tool for monitoring, detecting, and responding to threats directly at the endpoint level—such as laptops, employee computers, servers, and IoT devices

## 118. SOC (Security Operations Center)

The SOC (Security Operations Center) is the main command center for the Blue Team. If the Blue Team is the overarching umbrella for all the tactics, people, and technologies tasked with defending the organization, then the SOC is the physical or virtual location where that team works every day to monitor attacks in real time. The SOC is the frontline that never sleeps. Analysts within the SOC constantly monitor security dashboards for signs of intrusion. The SOC collects all logs and data from other Blue Team tools (such as firewalls, proxies, EDR, and antivirus) into a single centralized system called SIEM (Security Information and Event Management)

## 119. Proverb

A proverb is a short saying passed down through generations that conveys a meaning, advice, or life lesson. Proverbs are typically used to describe human experiences, offer warnings, or convey wisdom in a concise and memorable way

## 120. Fake Environment

A fake environment is an artificial or simulated environment designed to mimic a real system for testing, development, training, or security purposes without affecting the actual system. This environment is used so that developers or systems can safely conduct experiments before deploying to the actual environment (production environment)

## 121. Context

Context refers to the circumstances, situation, background, or conditions that help explain the meaning of something so that it can be understood more accurately. Context is used to ensure that a word, sentence, action, or event is not misinterpreted. For example, when you search for information, you must at least understand the context as a foundation; otherwise, the results will be BIASED and include a lot of irrelevant information, because keywords, slang, and paragraphs can have multiple meanings and differ in meaning if you don’t know the context. Our role is to understand the information we’re going to use and to identify and deduce the context

## 122. TTP (Tactics, Techniques, and Procedures)

Tactics, Techniques, and Procedures TTP. This term refers to specific behavioral patterns or methods used by hackers or cybercriminals to plan and carry out attacks on a system. TTPs are categorized into three hierarchical levels to help understand how attackers operate, such as understanding enemy patterns, proactive detection, and standard frameworks

## 123. CDR (Call Data Record)

Call Data Record (or sometimes referred to as Charging Data Record). This is an automatic data format or log generated by a telecommunications operator’s system that records detailed information about every communication event. For example, this includes phone calls, text messages, and internet data usage (data allowance), caller ID, device number, device type, duration, location, cell tower, services, and carrier name

## 124. Guerrilla

A guerrilla strategy is an unconventional, low-resource, high-impact approach that relies on creativity, speed, flexibility, and surprise to compete against larger or stronger opponents. Instead of direct confrontation, it focuses on quick, targeted actions that maximize attention or results with minimal cost

## 125. Whistleblower

A whistleblower is a person who reveals illegal, unethical, fraudulent, or harmful activities happening inside an organization, company, or government institution. They usually expose misconduct to authorities, the media, or the public in order to protect public interest, accountability, or safety, even though doing so may involve personal or professional risk

## 126. OCR (Optical Character Recognition)

OCR (Optical Character Recognition) is a technology that scans and recognizes text in images, photos, or physical documents (such as scanned paper), then converts it into editable and searchable digital text

## 127. BLOB

BLOB stands for Binary Large Object. In software development (dev) and the IT world, it is a special data type used to store large binary data (such as images, videos, audio, or document files) as a single, complete unit within a database or cloud storage. It is generally used to manage unstructured files that cannot be stored as plain text (such as strings or integers). In practice, storing files directly in a database using the BLOB data type often makes the database slow and heavy. Therefore, developers usually prefer to store the physical files on a dedicated storage service (such as AWS S3 or Google Cloud Storage) and only store the link (URL) within the database

## 128. Poll

Poll. In the context of software development and IT professionals, polling (or polled I/O) is a technique in which a system or application continuously and periodically checks the status (data request) of a server, system, or device. This term has a different meaning from the general concept of polling (as in a survey). In web or backend application development, polling is the process where a client (such as a website or mobile app) sends repeated requests at specific time intervals to check for data updates or task status

## 129. Webhook

A webhook is an automated method of communication between applications that sends data in real time as soon as an event occurs. In software development and IT operations, webhooks act as “instant messengers” that trigger specific actions without requiring the receiving system to constantly check for updates (polling)

## 130. IoC

Indicators of Compromise (IoCs) are forensic artifacts or evidence left behind on a network or endpoint that suggest a security breach or cyberattack has already occurred. Acting as digital breadcrumbs, they help cybersecurity teams identify intrusions, contain active threats, and mitigate damage. Common Types of IoCs. Network-Based: Unusual outbound traffic, connections to unknown/malicious IP addresses, anomalous DNS requests, or massive spikes in database requests. Host-Based: Suspicious file hashes, unauthorized registry or system file changes, and unexpected software installations. Account-Based: Multiple failed logins (brute-force) or geographic irregularities (e.g., successful logins from countries where the organization does not operate). Email-Based: Spoofed sender addresses, malicious attachments, or missing authentication records (SPF, DKIM, DMARC)

## 131. LNK File

An LNK file is a shortcut file in Windows that serves as a link to quickly open a file, folder, or application. This file stores the path information of the original object and is very small in size because it does not contain the main data. It functions like a hyperlink. When you double-click an LNK file, Windows will open the target file or program

## 132. YARA

YARA rules are specialized, open-source pattern-matching scripts used by security analysts to identify, classify, and detect malware or suspicious activity based on text strings, binary data, or byte sequences. Think of them as a highly advanced "GREP" for files and memory.They are heavily utilized in incident response, threat hunting, and malware analysis to establish unique "fingerprints" for malicious code

## 133. Shadowban

A shadowban is a measure taken by social media platforms to surreptitiously restrict the visibility of an account or its content, leaving the affected user unaware that their reach is being curtailed. Platforms such as Instagram, TikTok, or X (Twitter) typically implement this policy without issuing official notifications or violation warnings. Consequently, content posted by the account fails to appear in search results, hashtag feeds, or recommendation sections—such as the "Explore" page or "For You Page" (FYP)—for users who do not already follow the account. Shadowbans are usually triggered by violations of Community Guidelines or account activity flagged as suspicious by the platform's algorithms. Common triggers include the use of banned or broken hashtags and aggressive behaviors—such as liking, commenting on, or following numerous accounts in a short span—that cause the account to be flagged as a bot. Additionally, uploading content that borders on copyright infringement or contains sensitive material, as well as receiving a high volume of user reports, can prompt a platform to restrict the account

## 134. DOI (Digital Object Identifier)

A Digital Object Identifier (DOI) is a system of unique and permanent alphanumeric identifiers used globally to specifically identify digital documents. In the global academic and publishing sectors, the DOI serves as an official standard of identity for journal articles, conference proceedings, theses, books, and scientific datasets. The system was developed by the International DOI Foundation (IDF) and is officially managed by international registration agencies such as Crossref or DataCite. The advent of the DOI has revolutionized the way the academic world archives, tracks, and integrates digital scholarly work on a global scale

## 135. Insider

An insider is an individual or group with authorized or unauthorized access to an organization's internal information, systems, assets, or resources that have not been made public. Such access is gained through their position, relationships, job responsibilities, business partnerships, or direct involvement with the organization. By virtue of the trust placed in them and their access privileges, an insider can gain knowledge of sensitive information—such as customer data, internal documents, business strategies, trade secrets, system credentials, and operational plans—that is inaccessible to external parties

## 136. Data Broker

Data brokers are individuals, groups, or companies that collect, manage, enrich, archive, and distribute data from various sources for sale, exchange, or transfer to other parties. They obtain data through methods such as web scraping, automated crawling, open-source aggregation, commercial data providers, partnerships, and long-term data archiving. As a result, they often maintain historical databases containing information that is no longer publicly available online

## 137. Canary Trap

Canary Trap is an information security and intelligence technique in which each recipient is given a slightly different version of the same confidential information. If the information is leaked, the unique variation allows the distributor to identify the likely source of the disclosure and trace the leak back to a specific recipient

## 138. Synthetic Aperture Radar (SAR)

Synthetic Aperture Radar (SAR) is an active remote sensing technology that emits microwave pulses to image the Earth's surface, enabling all-weather, day-and-night observation regardless of cloud cover, smoke, or darkness. Unlike optical sensors, SAR measures the backscatter of its own transmitted energy, capturing data on surface texture, moisture, and structural geometry rather than reflected sunlight

## 139. Cyber Security Monitoring (CSM)

Cyber Security Monitoring (CSM) is the process of continuously monitoring systems, networks, applications, and user activity to detect threats, security breaches, or abnormal behavior as early as possible. Its primary goal is to provide visibility into an organization’s security status so that incidents can be detected and addressed quickly

## 140. Confidentiality

Confidentiality is a principle of the CIA Triad that ensures information is accessible only to individuals or parties who have the right or authorization to access it. Its primary purpose is to protect data from unauthorized access, use, or disclosure

## 141. Availability

Availability is a principle that ensures systems, services, and information are always available and accessible to authorized users when needed. Availability is critical to preventing disruptions to an organization’s operations due to system failures, disasters, or cyberattacks. To maintain availability, organizations implement various mechanisms such as data backups

## 142. MEDINT

MEDINT refers to intelligence related to health and medical information. It is used to analyze health threats, disease outbreaks, the medical conditions in a given region, or a party’s medical capabilities

## 143. BIOINT

BIOINT is intelligence that uses biometric data to identify or analyze individuals. The data used may include fingerprints, facial features, voice, iris patterns, or other biological characteristics

## 144. RADINT

RADINT is intelligence derived from the analysis of radar signals. It is typically used to monitor the activities of objects such as aircraft, ships, or defense systems

## 145. Digital Risk Intelligence

Digital Risk Intelligence is intelligence used to identify and monitor risks in the digital world that affect organizations or individuals

## 146. Metaphor

Metaphor is a figure of speech that directly compares one thing to another to express a deeper meaning, without using comparison words such as "like" or "as". It is used to explain ideas, feelings, or concepts in a more creative and powerful way by connecting them with something familiar. Metaphors help people understand complex meanings more easily and make descriptions more interesting and memorable