3C-INT Use Case 09

Connect actor profiles to the social sources where activity emerges

Consolidate accounts, channels, identities and monitored sources as part of the actor’s operational context.

Business value

3C-INT connects actor intelligence to the channels where operational signals appear first.

The pressure point

The problem this use case solves

Threat actors, crews and ideologically motivated groups often signal, coordinate or publicize activity across social and semi-public channels. Without structured SOCMINT enrichment, that activity remains disconnected from the profile.

Operational leverage

How 3C-INT changes the workflow

Analysts can understand not just the actor profile, but where the actor communicates, how it signals activity and which sources require ongoing attention.

Associate Telegram, X, Signal, Discord, web or other source accounts with actor profiles.
Track identity changes, communication channels and observable activity patterns.
Use monitored sources to enrich actor context without turning the profile into a raw feed dump.

Capabilities involved

What the workflow uses inside 3C-INT

This use case is built around the capabilities that turn raw context into a repeatable operating model. The value is not only having more information; it is having a structured way to consume, validate and reuse it.

  • Actor account mapping.
  • SOCMINT source enrichment.
  • Identity and channel tracking.
  • Profile-linked monitoring context.

Decision impact

What changes for the team

The output is a clearer operating picture: less ambiguity, fewer disconnected fragments and a stronger basis for briefing, prioritization, investigation or escalation. The use case helps move the organization from reading intelligence to using it.

3C-INT connects actor intelligence to the channels where operational signals appear first.

iQBlack | Threat Intelligence & Threat Research . © Copyright 2026. All Rights Reserved