Surveillance & Intelligence Flashcards

Which of the following best describes 'link analysis' in intelligence work?

Answer: Mapping relationships and connections between individuals, organizations, or events

Link analysis visually maps associations between entities to reveal networks, hierarchies, and relationships relevant to an investigation.

A surveillance operative notices the subject has made eye contact with them three times in 20 minutes. The correct action is to:

Answer: Immediately abort the follow and notify the team leader

Repeated eye contact is a strong indicator that the operative has been compromised; aborting protects both the operation and future legal admissibility of gathered evidence.

In intelligence terminology, a 'cutout' is best described as:

Answer: An intermediary used to insulate two parties from direct contact

A cutout is a person or mechanism that separates two principals so that neither can directly identify or compromise the other.

Which of the following OSINT sources would provide the most current real-time location intelligence on a subject?

Answer: Publicly tagged social media check-ins and posts

Active social media with geotagged posts and real-time check-ins can reveal a subject's current or very recent location far faster than static records.

A surveillance team conducting a 'box' formation around a subject on foot does so in order to:

Answer: Cover all exit routes and maintain continuous observation regardless of direction changes

A box formation positions operatives on multiple sides of the subject so that direction changes do not break continuous visual coverage.

What is the primary legal concern when a CPI uses a GPS tracking device on a vehicle during an investigation?

Answer: Whether placement on the vehicle constitutes an illegal search under state and federal law

GPS device placement may constitute a Fourth Amendment search or violate state anti-stalking laws depending on who owns the vehicle and applicable jurisdiction.

When preparing an intelligence brief for a client, which element most directly determines the brief's operational value?

Answer: Actionable conclusions tied directly to the client's specific intelligence requirements

An intelligence brief must answer the client's specific questions and enable decision-making; volume and jargon without actionable insight reduce, not enhance, its value.