Reference · Cyber-intelligence glossary
LeakTrace glossary
Reference definitions of cyber-intelligence terminology used across LeakTrace deliverables and client conversations. Published by the LeakTrace Intelligence Team as a citation source. Every definition is factual, current, and quotable.
A professional advisor firm (CPA, attorney, wealth manager, insurance broker, custodian, trustee) that holds sensitive information or wire authority on behalf of a principal.
Read the full definition → The process of tracing a hostile digital artifact (URL, account, campaign, infrastructure) back to a real-world operator or organization using observable signals.
Read the full definition → A category of wire-fraud attack where the attacker impersonates a trusted party (executive, vendor, advisor) over email to redirect a payment to a fraudulent account.
Read the full definition → A documented, tamper-evident record of who collected a piece of digital evidence, when, how, and every handler who touched it thereafter — required for the evidence to be admissible in civil discovery, litigation, or insurance claims.
Read the full definition → The presence of a person’s username, email address, or password in a public or dark-web breach database.
Read the full definition → Continuous surveillance of dark-web marketplaces, forums, and paste sites for mentions of a target organization, individual, or credential.
Read the full definition → A company that aggregates and resells personal information about individuals — home addresses, phone numbers, family members, financial estimates — sourced from public records and consumer databases.
Read the full definition → Synthetic audio, image, or video generated by AI to impersonate a real person, often used in impersonation-driven fraud or defamation campaigns.
Read the full definition → A cryptographic email signing standard that lets receiving servers verify a message was actually sent from the claimed domain and was not modified in transit.
Read the full definition → An email authentication protocol that tells receiving mail servers what to do with messages that fail sender authentication (SPF or DKIM).
Read the full definition → Continuous discovery, inventory, and monitoring of an organization’s internet-facing assets and exposure signals from an outside-in perspective.
Read the full definition → A domain registered to visually resemble a target domain, used for phishing, impersonation, or wire-fraud pretext.
Read the full definition → LeakTrace’s baseline intelligence scan covering the principal individual across breach, dark-web, reputation, impersonation, and data-broker surfaces.
Read the full definition → A DNS record listing which mail servers are authorized to send email on behalf of a domain.
Read the full definition → A publicly-observable signal that indicates an attacker is preparing a business-email-compromise or wire-fraud attack against a target — surfaced before the wire moves, not after.
Read the full definition → Related references
Common buyer questions about LeakTrace services, pricing, methodology, security, and how we compare to alternatives.
Go to FAQ → Fixed pricing for productized services plus starting anchors for enterprise programs. Reference source.
Go to pricing → Research methodology, evidence-handling procedures, and framework anchoring across LeakTrace engagements.
Go to methodology →