The Intelligence Cycle
Intelligence production follows a structured cycle. The cycle is iterative — assessments generate new questions that drive new collection requirements.
→
→
03
Processing & Exploitation
→
→
↺
INT Disciplines
Intelligence is collected through multiple "INT" disciplines, each exploiting a different part of the electromagnetic, physical, or human information environment. Most assessments fuse multiple INTs.
| Acronym | Full Name | What It Collects | Platforms |
| IMINT | Imagery Intelligence | Optical and radar imagery of the earth's surface | Recon satellites, UAVs, aircraft, commercial sat |
| SIGINT | Signals Intelligence | Electronic emissions — communications and non-communication | SIGINT aircraft (RC-135), satellites, ships, ground stations |
| HUMINT | Human Intelligence | Information from human sources — agents, POWs, diplomats, open source | Case officers, attachés, interrogators |
| MASINT | Measurement and Signature Intelligence | Physical phenomena — nuclear, chemical, radar signatures, seismic | Seismic sensors, nuclear detection satellites, exhaust sniffers |
| OSINT | Open Source Intelligence | Publicly available information — media, academic, social, commercial | Internet collection, media monitoring, social media analysis |
| GEOINT | Geospatial Intelligence | Fused imagery, mapping, and geospatial data for terrain and activity analysis | NGA (US), commercial satellites, GIS systems |
| ELINT | Electronic Intelligence (subset of SIGINT) | Non-communications electronic signals — radar emissions, guidance signals | Dedicated ELINT aircraft, satellites, edge-of-battle sensors |
| COMINT | Communications Intelligence (subset of SIGINT) | Content and metadata of adversary communications | NSA, GCHQ, partner signals agencies |
| CYBINT | Cyber Intelligence | Adversary TTPs, malware, infrastructure in cyberspace | Network sensors, honeypots, threat intelligence feeds |
Intelligence Classification
Intelligence products are classified to protect sources and methods — the collection programs themselves are often more sensitive than the intelligence they produce. Compromise can shut down collection for years.
| Level | Definition | Codeword Examples |
| UNCLASSIFIED | No damage to national security if disclosed | Open source, public records |
| CONFIDENTIAL | Disclosure could cause damage to national security | Routine administrative reporting |
| SECRET | Disclosure could cause serious damage | Operational plans, unit locations |
| TOP SECRET | Disclosure could cause exceptionally grave damage | SI/TK codewords (TALENT KEYHOLE = satellite imagery) |
| SCI | Sensitive Compartmented Information — sources and methods | GAMMA, BYEMAN, TALENT KEYHOLE, UMBRA |
Order of Battle (ORBAT / OOB)
The Order of Battle — also written OOB — is a structured catalog of an adversary's military organization: its units, equipment, personnel, dispositions, and assessed capabilities. It is among the first intelligence products produced when analyzing any potential adversary, and is continuously updated throughout a conflict. Commanders at every level depend on an accurate ORBAT to plan operations, allocate forces, and identify high-value targets.
What an ORBAT Contains
A complete ORBAT entry for a unit typically covers: unit identity and designation (e.g., 4th Armored Brigade), parent formation, location and disposition, personnel strength, equipment inventory (vehicle types, counts, condition), command relationships, assessed mission and intent, morale and training level, logistics status, and known vulnerabilities. Large-scale ORBATs are maintained in classified databases by DIA, NGA, and service intelligence centers.
SALUTE Reporting Format
SALUTE is the standard field reporting format used by any observer — soldier, pilot, or analyst — to record and transmit contact information. Every piece of ORBAT intelligence begins as a raw contact report, formatted as SALUTE before analysis.
| Letter | Element | What to Report | Example |
| S | Size | Estimated number of personnel or vehicles; unit size indicator | "Approximately 12 vehicles — company-sized element" |
| A | Activity | What the element is doing right now | "Moving northeast on Route 7 at approximately 20 kph" |
| L | Location | Grid reference, lat/lon, or relation to known point | "Grid 38SMB 4521 7832, 3 km north of checkpoint BLUE" |
| U | Unit | Identification: markings, insignia, flags, call-signs heard | "Red triangle on white square — identified as 3rd Guards Tank" |
| T | Time | Date-time group (DTG) of observation — Zulu (UTC) | "141523Z MAR 26" = 14 March 2026, 15:23 UTC |
| E | Equipment | Specific platforms, weapons, vehicles identified | "T-80BVM MBTs (×8), BTR-82A APCs (×4), ZSU-23-4 SP AAA (×1)" |
ORBAT Analysis — PMESII-PT Framework
Beyond pure military hardware, modern ORBAT analysis uses the PMESII-PT framework to understand the full operational environment. This matters because adversary military capability is inseparable from the political and economic context that sustains it.
PPolitical — legitimacy, leadership, decision-making authority, will to fight
MMilitary — forces, equipment, doctrine, readiness, logistics, ORBAT
EEconomic — GDP, sanctions exposure, industrial capacity, fuel production
SSocial — population cohesion, ethnic tensions, morale, demographic pressures
IInfrastructure — roads, power grid, ports, airfields, pipelines, comms networks
IInformation — media control, propaganda capability, cyber assets, IO posture
PPhysical Environment — terrain, weather, urban density, hydrography
TTime — time of day/year effects, decision timelines, operational tempos
◈
ORBAT vs IPB: The ORBAT answers "who and what" — it catalogs the adversary. Intelligence Preparation of the Battlefield (IPB) is the broader analytical process that uses the ORBAT alongside terrain, weather, and doctrinal templates to answer "what will the adversary do, where, and when." IPB produces the threat evaluation that drives COA development in MDMP.