New tool combines multi agency databases for complete target snapshot

(S//REL) New Tool Combines Multi-INT, Multi-Agency Databases for Complete Target Snapshot FROM: Menwith Hill Station (MHS - F77) Run Date: 06/18/2008 (U//FOUO) Here's a new tool that geospatial-metadata analysts will find useful... (S//REL) A new tool suite was recently developed that takes information sharing to the next level. The Consolidated Operations Research Explorer (CORE) combines databases from seven intelligence agencies1 to quickly give analysts a more complete picture of their target. This tool cross-references known communications networks with multiple layers of existing intelligence feeds to provide an efficient analytical environment. Developed by analysts from Menwith Hill Station and the National GeospatialIntelligence Agency, CORE accesses SIGINT, HUMINT and IMINT to give analysts across the enterprise "one-stop shopping" for their intelligence needs. Currently, this powerful and user-friendly tool is available at MHS, NSAW, NSA Georgia and the Aerospace Data Facility in Denver, but could expand to the Extended Enterprise. (S//REL) Two MHS analysts developed CORE to solve the problems of duplication of effort, loss of legacy knowledge and an incomplete picture of the analytical "battle space." Prior to the implementation of CORE, many of the geospatial metadata analysis functions were done in a text-only format in spreadsheets. CORE, however, takes text-based information and presents it at its pertinent location within the easy-to-operate Google Earth environment. Google Earth is a critical component of the tool suite as it allows access to geospatial-based intelligence from seven intelligence agencies within seconds. Used along with the SIGINT Emitter DiscoveryBase2, CORE offers analysts an unparalleled combination of target and signals in a given area. (S//REL) CORE also includes services from the SEDB Google Earth Knowledge Base (GEKB) and offers indispensable context for evaluation of collection from the SEDB Control Panel and interpretation of analytic results from models built using the SEDB GeoProcessing Toolbox. Furthermore, CORE's portability, use of existing equipment, seamless integration with current systems and lack of cost add to its appeal. (U) Operational Success (S//SI//REL) CORE has already facilitated some significant mission successes. In less than one minute, MHS analysts used CORE to easily find a VSAT uplink used by . Furthermore, due to the depth of information, analysts were able to quickly track down the appropriate FORNSAT manager for rapid tasking. (S//SI//REL) Another mission success was the association of in one day by one analyst. This was a great achievement, and saved manpower and other resources since normally this would have been a week-long effort by a group of linguists, combined with an HPCP expert. (U) How it works (S//REL) CORE is extremely user friendly. A PC with PKI-enabled Internet Explorer, Google Earth and an Intelink connection are all that is required. CORE loads from a network link and -- due to the fact that CORE is only a series of links -- it is just 125 kilobytes in size. CORE is currently maintained by one of its creators, , who also serves as the Primary Management Officer. (S//REL) The heart of CORE is the tree structure at the left of the screen shot shown above. Analysts

click on the links they want to appear within the view window. Available links include: Analysis, Technologies, Reporting, Countries, Terrorism, Maps, Raw Imagery and Mobile Switching Centers. These links quickly display the Intelligence Community's latest and best information regarding SIGINT, GEOINT, HUMINT, infrastructure information and finished intelligence products. Data from these sources combines to form layers over the target area. When the layers come together, they show not only what the Intelligence Community knows about the emitters in a given area (signal related information data), but also what the Intelligence Community knows about the installations, organizations, and personnel that use those emitters. The entire picture of a target location unfolds within a matter of seconds. (U) Operational use (S//SI//REL) CORE is currently used by many geospatial-metadata analysts (GMA) throughout NSA. The entire Iran TOPI3 has incorporated it as their standard GMA tool suite. CORE is logically organized on the left side of the screen, a key element to its success. The organization complements the way the bulk of successful GMA analysts carry out their work. (S//SI//REL) A large measure of redundancy is built into CORE's searches. For example, an analyst could search for Pakistani GHOSTHUNTER4 VSAT ellipses two different ways using the following trees: Technologies > Satcom > GHOSTHUNTER; or Countries > Pakistan > Satcom. Additionally, there is a "text" window and search function that quickly highlights the link of interest. Once the ellipses are on the map, infrastructure, personnel, user, and other SIGINT information from seven different agencies are simply a click away. (U) Future (S//SI//REL) It is envisioned that the CORE user group will expand and encompass all GMAs across the NSA enterprise. CORE has been briefed to LTG Keith Alexander and Mr. Bill Crumm on recent trips to MHS. The CORE team also briefed this new capability at the NSA SIGDEV conference. A video of this presentation can be viewed on the web. (U//FOUO) (U) Notes: 1. (S//REL) National Reconnaissance Office, National Security Agency, National Geospatial Intelligence Agency, National Air and Space Intelligence Center, National Ground Intelligence Center, Defense Intelligence Agency, Central Intelligence Agency 2. (S//SI//REL) SEDB -- Client-server fusion analysis system providing sophisticated tools and techniques that enhance context through consolidation and evaluation of diverse technological, behavioral and environmental target characteristics from SIGINT and multi-INT perspectives. 3. (U) Target office of primary interest. 4. (TS//SI//REL) GHOSTHUNTER -- System designed to obtain locations of very small aperture terminals (VSAT) on Internet cafes, primarily in Afghanistan, Iraq and Iran. (U//FOUO) Note: This article is reprinted from MHS's Horizon newsletter, May edition.