Activities
The specific activities conducted by analysts within the Agencies will include the following:
•
Target discovery – identifying individuals who may be subjects of intelligence interest
from lead intelligence.
•
Target development – enriching understanding of a subject of intelligence interest,
their connections, networks and patterns of activity, in order to understand potential
threat or opportunities.
•
Anomaly detection – a technology-based process by which patterns in bulk data are
identified and analysed to assist in the detection of e.g. malware and cyber-attack
signatures. This is essential for Cyber Defence.
•
Network Analysis – this is a technology-based process by which information is
gathered from interception to develop understanding of the network environment to
provide context to the intercepted data and enable more effective operation of e.g.
the bulk interception process.
•
Triage and prioritisation – at all stages bulk data helps to inform decisions about
prioritisation of resources by the Agencies, including the allocation of scarce
technical, analytic, human or other collection resources.
143