Official U.S. Threat Source Assimilation Matrix
Official U.S. threat coverage belongs in a matrix because no single agency source family is sufficient. ODNI provides the IC-wide frame; CIA provides foreign reference material; FBI and DHS provide domestic and homeland law-enforcement framing; CISA/NSA/FBI provide cyber advisory streams; State and Treasury provide designations, sanctions, and terrorism finance; DEA, ATF, CBP, Coast Guard, and DOJ provide transnational crime, border, maritime, firearms, narcotics, and legal-case source streams; NGA and CIA maps provide geospatial reference at strategic level only.
Classification: UNCLASSIFIED//OPEN SOURCE
Matrix ID: WI-MATRIX-US-THREAT-SOURCES-2026-0001
Prepared UTC: 2026-06-18T03:03:44Z
Information cutoff UTC: 2026-06-18T03:03:44Z
Source base: ODNI, CIA, FBI, NCTC, DHS, CISA, NSA, State, Treasury, DEA, ATF, CBP, Coast Guard, DOJ, NGA, and existing WARLOCK-INDEX official-source products, including the U.S. law-enforcement threat source capture packet, U.S. law-enforcement threat source assessment, Salt Typhoon and telecommunications defensive source note, ASEAN/claimant-state South China Sea cross-check packet, U.S.-Iran MOU source-treatment note, and U.S.-Iran MOU implementation capture.
Analytic confidence: High for organizing logic; moderate for current source completeness pending dated source packets for each agency family.
Purpose: Connect official U.S. agency source families to WARLOCK-INDEX threat categories and safety boundaries.
Boundary: This matrix does not produce an enemy list, targeting map, investigative guide, cyber playbook, enforcement guide, or domestic political threat profile.
Bottom Line
Official U.S. threat coverage belongs in a matrix because no single agency source family is sufficient. ODNI provides the IC-wide frame; CIA provides foreign reference material; FBI and DHS provide domestic and homeland law-enforcement framing; CISA/NSA/FBI provide cyber advisory streams; State and Treasury provide designations, sanctions, and terrorism finance; DEA, ATF, CBP, Coast Guard, and DOJ provide transnational crime, border, maritime, firearms, narcotics, and legal-case source streams; NGA and CIA maps provide geospatial reference at strategic level only.
Assimilation Matrix
| Threat category | Primary agencies | Supporting agencies | WARLOCK-INDEX products | Required boundary |
|---|---|---|---|---|
| PRC strategic competition | ODNI, DoD, DIA, CIA World Leaders, State, Treasury | FBI, CISA, NSA, DOJ, Commerce, FCC, Senate oversight, PRC issuer sources, Taiwan and allied/regional sources | China baseline, PRC military modernization, China/PLA source baseline, DoD/DIA China military-power extraction map, China/PLA source tracker, South China Sea coercion/legal-source packet, ASEAN/claimant-state South China Sea cross-check packet, PRC cyber packet, Salt Typhoon telecom source note, cyber, space, DIB | No classified inference, targeting, contingency planning, cyber exploitation, live tracking, telecom network diagrams, lawful-intercept detail, legal advice, route guidance, or export-control evasion |
| Russia strategic competition | ODNI, DoD, DIA, State, Treasury | FBI, CISA, NSA, DOJ, NATO sources | Russia profile, Ukraine timeline, Arctic, cyber, strategic weapons | No battlefield targeting or sanctions evasion |
| Iran and regional network | ODNI, DIA, State, Treasury, FBI | NCTC, DHS, DOJ, Coast Guard, White House source family, IAEA/UN where official records emerge | Iran profile, Red Sea baseline, Houthi profile, U.S.-Iran MOU source-treatment note, U.S.-Iran MOU implementation capture, terrorism lane | Separate support from command; no targeting; no sanctions advice, sanctions evasion, maritime routing, or nuclear technical detail |
| North Korea | ODNI, DoD, State, Treasury | FBI, CISA, NSA, DOJ | DPRK profile, strategic weapons, cyber | No proliferation methods or sanctions evasion |
| International terrorism | FBI, State, NCTC, Treasury, ODNI | DHS, DOJ, CISA, allied sources | U.S. law-enforcement threat source assessment, FTO/nonstate actor profiles, Red Sea, terrorism source packets | No methods, recruitment, financing, or target guidance |
| Domestic terrorism / DVE | FBI, DHS, DOJ, Treasury | ODNI where public, state/local public sources | U.S. law-enforcement threat source assessment, homeland baseline, and future DVE source packet | No political enemies list, protected-speech profiling, or private dossiers |
| Cyber actors and cybercrime | CISA, FBI, NSA, ODNI, Treasury | IC3, DOJ, State/RFJ, DHS, FCC, Senate oversight, allied cyber agencies | Cyber baseline, PRC cyber packet, Salt Typhoon telecom source note, U.S. law-enforcement threat source assessment, future advisory source refreshes | No exploit steps, scanning, evasion, malware guidance, IOCs for misuse, telecom network diagrams, or provider-specific vulnerability mapping |
| Transnational criminal organizations | DEA, Treasury, FBI, DHS/HSI, CBP, Coast Guard, ATF, DOJ | State, ODNI, CISA | TCO profile, U.S. law-enforcement threat source assessment, and future TCO source packet | No trafficking, concealment, route, or enforcement-evasion guidance |
| WMD and proliferation | FBI WMD, State, Treasury, ODNI, DoD/DTRA, DHS, FSAP | IAEA, UN/UNODA, allied sources, Ukrainian official sources, technical biosecurity and oversight sources where source-classed | ODNI biolab disclosure source-treatment note; Ukraine biolab claim-reconciliation source note; WMD/biosecurity source packet; WMD/nonproliferation future lane | No materials, methods, controlled lists, facility tables, device, site mapping, or vulnerability detail |
| Border and maritime vectors | DHS, CBP, Coast Guard, DEA, Treasury | FBI, DOJ, State, CISA | Homeland, maritime chokepoints, TCO lanes | No route selection, live movement, patrol, or interdiction detail |
| Reported diplomatic or sanctions frameworks | White House, State, Treasury/OFAC, Federal Register | IAEA, UN, Congress, mediator governments, foreign issuer sources | U.S.-Iran MOU source-treatment note; U.S.-Iran MOU implementation capture; Iran WMD/missile packet; maritime chokepoint matrix | Keep reported, transcript, official text, legal effect, sanctions implementation, and verification evidence separate |
| Maps and geography | CIA, NGA, State, DoD, Coast Guard, CBP | USGS, NOAA, Census where relevant | Map source register and theater orientation | No targeting maps or infrastructure vulnerability maps |
Cross-Source Discipline
| Evidence type | Examples | Strength | Caution |
|---|---|---|---|
| Intelligence assessment | ODNI ATA, DIA military power reports | Strong public strategic baseline | Public release constraints |
| Declassified disclosure | ODNI public releases and linked declassified artifacts | Strong for issuer perspective and source-event provenance | Underlying claims require corroboration; granular biological and facility details may be unsafe to reproduce |
| Legal designation | State FTO, Treasury OFAC, Federal Register, DOJ cases | Strong for official status | Legal framing is not full threat analysis |
| Law-enforcement program page | FBI, DEA, ATF, CBP, Coast Guard pages | Strong for mission and source routing | Often not an analytic report |
| Public statistics | IC3, CBP stats, ATF data, DEA reports | Useful trend support | Definitions and reporting bias matter |
| Cyber advisory | CISA, NSA, FBI advisories | Strong defensive source | Technical detail must be summarized safely |
| Map/geospatial reference | CIA maps, NGA, DoD AOR maps | Useful orientation | No targeting or vulnerability use |
Information Gaps
- The U.S. law-enforcement source capture packet and assessment now establish the FBI/DHS/DOJ/DEA/ATF/CBP/Coast Guard/Treasury/State/IC3 routing model, but dated page-level packets are still needed for CISA/NSA/FBI cyber, Treasury sanctions, DEA/ATF/CBP/Coast Guard TCO, DOJ NSD legal actions, DoD Cooperative Threat Reduction, BWC treaty and compliance, select-agent oversight, and emerging biotechnology security.
- China/PLA source collection now has a broad baseline, PRC issuer-language packet, DoD/DIA military-power extraction map, and tracker, but dedicated PRC cyber, Taiwan pressure, South China Sea, ASEAN/claimant-state regional cross-check, PLA services/arms, defense-industrial, DoD-to-PRC-issuer crosswalk, and Salt Typhoon telecom source treatment; South China Sea page-level, advisory page-level, FCC, OFAC, and allied cyber cross-check refreshes remain follow-on lanes.
- Agency product pages change frequently and require dated refreshes.
- The U.S.-Iran MOU lane now has a dedicated implementation-capture packet for official text, sanctions, Hormuz, IAEA, UN, Iranian, and mediator follow-on sources, but no directly retrieved official published text, Treasury/OFAC waiver, IAEA record, or UN record was located in this pass.
- Public sources cannot replace classified assessments, investigative records, or sensitive operational reporting.
- The Ukraine biolab claim-reconciliation note now preserves issuer layering for ODNI, DoD, State/BWC, Ukrainian, UN, and contested state-source lanes, but document-level DoD Cooperative Threat Reduction, State Department arms-control/BWC, congressional, Ukrainian, treaty-organization, and technical biosecurity sources remain needed before the corpus makes stronger judgments.
- Domestic threat lanes need recurring civil-liberties review.
Cross References
- U.S. Official Threat Source Operating Picture
- U.S. Law Enforcement Threat Source Assessment
- Official U.S. Threat Source Baseline Packet
- U.S. Law Enforcement Threat Source Capture Packet
- Official Threat Source Collection Tracker
- China/PLA Source Collection Tracker
- China/PLA Official Military And Security Source Baseline Packet
- DoD/DIA China Military Power Extraction Map
- ASEAN And Claimant-State South China Sea Cross-Check Packet
- Salt Typhoon And Telecommunications Defensive Source Note
- U.S.-Iran MOU Source-Treatment Note
- U.S.-Iran MOU Official Text, Hormuz, And Sanctions Implementation Capture
- Official U.S. Intelligence And Law Enforcement Source Register
- ODNI Global Biolab Disclosure Source-Treatment Note
- Ukraine Biolab Claim-Reconciliation Source Note
- WMD/Biosecurity Public Source Baseline Packet