1) Personal Information Exposure:
- Identity Verification: Full name, known aliases, date of birth, and facial recognition results, where the subject’s image appears elsewhere online.
- Contact and Address Mapping: Current and previous addresses, phone numbers, and email addresses in circulation.
2) Family and Home Vulnerabilities:
- Family Member Exposure: Names, relationships, schools, employers, and frequented locations linked to immediate family.
- Home Security Indicators: Anything public that could reveal a residential address or routine.
3) Social Media and Digital Content:
- Account and Content Review: Identified accounts and public posts across major platforms, including location metadata on shared images and video.
- AI-Generated Impersonation Review: Deepfake images, video, or audio depicting the individual, where present.
- Digital Asset Identification: Public-facing websites, applications, and other online resources linked to the individual.
4) Affiliations, Travel, and Routine:
- Memberships and Associations: Societies, associations, and board or committee positions that could be used as a route of approach.
- Pattern Analysis: Repeated routes, frequently visited locations, and conference or event appearances.
5) Media Coverage and Data Breaches:
- Press and Litigation Review: Press mentions and publicly accessible litigation or court records.
- Breach Exposure: Exposure across known data breach sources.
6) Threat Actor and Company Risk:
- Threat Actor Identification: Activist groups, competitors, or other parties with a plausible motive to target the individual.
- Mitigation Recommendations: Where multiple threat actors or attack vectors are identified, tailored recommendations for each.
- Company Risk Analysis: Directorships of concern, reputational links, and regulatory exposure, for corporate engagements.