A Diamond is an Analysts Best Friend Introducing the Diamond Model for Influence Operations Analysis
summary
Introduces a Diamond Model that puts narrative at the center and maps four corners: capabilities (bots, trolls, deep fake videos, paid budgets), infrastructure (IPs, domains, streaming platforms, fringe apps, local events), influencer types (nation‑state, criminal DaaS, PR proxies) and audiences (global to local). Claims the model lets analysts answer what is being spread, how it’s disseminated, why it’s targeted, and who benefits. Recorded Future’s 2016 experiment hires two criminal groups and finds disinformation as a service often starts with paid ads and amplification, and notes the value of layering the EMIT tactics list.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:35Disinformation terminology
- 4:02Influence operations defined
- 5:04Limitations of frameworks
- 9:41Narrative's central role
- 11:25Diamond Model introduced
- 13:35Technical axis breakdown
- 17:29Socio-political axis analysis
- 19:56Private sector disinformation example
- 22:46Disinformation as a Service case study
- 23:50State-sponsored campaign example
- 27:03Summary
related talks
31mDiamonds are a Forensicator's Best Friend - Intelligence Support for DFIR
32mTricking the Trolls: A Look at the Digital Future
35mDisinformation or Debate? Finding Signal Amid Political Noise
29mThe Invisible War to Hijack Minds, Distort the Truth, and Impact Elections
51mHacking Ten Million Useful Idiots: Online Propaganda as a Socio-Technical Security Project
45mCyber-Counterintelligence—Deception, Distortion, Dishonesty
40mResponding to Disinformation and Influence Campaigns
24mThe Disinformation Industry