Official U.S. Threat Source Assimilation Matrix

Official U.S. threat coverage belongs in a matrix because no single agency source family is sufficient. ODNI provides the IC-wide frame; CIA provides foreign reference material; FBI and D...

Full Index

Classification: UNCLASSIFIED//OPEN SOURCE

Matrix ID: WI-MATRIX-US-THREAT-SOURCES-2026-0001

Prepared UTC: 2026-06-13T06:01:00Z

Information cutoff UTC: 2026-06-13T06:01:00Z

Source base: ODNI, CIA, FBI, NCTC, DHS, CISA, NSA, State, Treasury, DEA, ATF, CBP, Coast Guard, DOJ, NGA, and existing WARLOCK-INDEX official-source products.

Analytic confidence: High for organizing logic; moderate for current source completeness pending dated source packets for each agency family.

Purpose: Connect official U.S. agency source families to WARLOCK-INDEX threat categories and safety boundaries.

Boundary: This matrix does not produce an enemy list, targeting map, investigative guide, cyber playbook, enforcement guide, or domestic political threat profile.

Bottom Line

Official U.S. threat coverage belongs in a matrix because no single agency source family is sufficient. ODNI provides the IC-wide frame; CIA provides foreign reference material; FBI and DHS provide domestic and homeland law-enforcement framing; CISA/NSA/FBI provide cyber advisory streams; State and Treasury provide designations, sanctions, and terrorism finance; DEA, ATF, CBP, Coast Guard, and DOJ provide transnational crime, border, maritime, firearms, narcotics, and legal-case source streams; NGA and CIA maps provide geospatial reference at strategic level only.

Assimilation Matrix

Threat categoryPrimary agenciesSupporting agenciesWARLOCK-INDEX productsRequired boundary
PRC strategic competitionODNI, DoD, DIA, CIA World Leaders, State, TreasuryFBI, CISA, NSA, DOJ, CommerceChina baseline, PRC military modernization, cyber, space, DIBNo classified inference, targeting, or export-control evasion
Russia strategic competitionODNI, DoD, DIA, State, TreasuryFBI, CISA, NSA, DOJ, NATO sourcesRussia profile, Ukraine timeline, Arctic, cyber, strategic weaponsNo battlefield targeting or sanctions evasion
Iran and regional networkODNI, DIA, State, Treasury, FBINCTC, DHS, DOJ, Coast GuardIran profile, Red Sea baseline, Houthi profile, terrorism laneSeparate support from command; no targeting
North KoreaODNI, DoD, State, TreasuryFBI, CISA, NSA, DOJDPRK profile, strategic weapons, cyberNo proliferation methods or sanctions evasion
International terrorismFBI, State, NCTC, Treasury, ODNIDHS, DOJ, CISA, allied sourcesFTO/nonstate actor profiles, Red Sea, terrorism source packetsNo methods, recruitment, financing, or target guidance
Domestic terrorism / DVEFBI, DHS, DOJ, TreasuryODNI where public, state/local public sourcesHomeland baseline and future DVE source packetNo political enemies list, protected-speech profiling, or private dossiers
Cyber actors and cybercrimeCISA, FBI, NSA, ODNI, TreasuryDOJ, State, DHS, allied cyber agenciesCyber baseline, future advisory source packetNo exploit steps, scanning, evasion, or malware guidance
Transnational criminal organizationsDEA, Treasury, FBI, DHS/HSI, CBP, Coast Guard, ATF, DOJState, ODNI, CISATCO profile and future TCO source packetNo trafficking, concealment, route, or enforcement-evasion guidance
WMD and proliferationFBI WMD, State, Treasury, ODNI, DoD, DHSIAEA, UN, allied sourcesWMD/nonproliferation future laneNo materials, methods, device, or vulnerability detail
Border and maritime vectorsDHS, CBP, Coast Guard, DEA, TreasuryFBI, DOJ, State, CISAHomeland, maritime chokepoints, TCO lanesNo route selection, live movement, patrol, or interdiction detail
Maps and geographyCIA, NGA, State, DoD, Coast Guard, CBPUSGS, NOAA, Census where relevantMap source register and theater orientationNo targeting maps or infrastructure vulnerability maps

Cross-Source Discipline

Evidence typeExamplesStrengthCaution
Intelligence assessmentODNI ATA, DIA military power reportsStrong public strategic baselinePublic release constraints
Legal designationState FTO, Treasury OFAC, Federal Register, DOJ casesStrong for official statusLegal framing is not full threat analysis
Law-enforcement program pageFBI, DEA, ATF, CBP, Coast Guard pagesStrong for mission and source routingOften not an analytic report
Public statisticsIC3, CBP stats, ATF data, DEA reportsUseful trend supportDefinitions and reporting bias matter
Cyber advisoryCISA, NSA, FBI advisoriesStrong defensive sourceTechnical detail must be summarized safely
Map/geospatial referenceCIA maps, NGA, DoD AOR mapsUseful orientationNo targeting or vulnerability use

Information Gaps

  • Dedicated source packets are still needed for FBI/DHS, CISA/NSA/FBI cyber, CIA/State/NGA reference, Treasury sanctions, DEA/ATF/CBP/Coast Guard TCO, and DOJ NSD legal actions.
  • Agency product pages change frequently and require dated refreshes.
  • Public sources cannot replace classified assessments, investigative records, or sensitive operational reporting.
  • Domestic threat lanes need recurring civil-liberties review.

Cross References