Signals intelligence, known as SIGINT, is the collection and analysis of electronic signals to produce usable intelligence. Those signals include radio transmissions, satellite communications, radar emissions, telemetry data, and internet traffic. The discipline sits at the center of modern national security operations, and virtually every major intelligence agency in the world runs a SIGINT program of some kind.
The National Security Agency (NSA) in the United States, the Government Communications Headquarters (GCHQ) in the United Kingdom, and their partners across the Five Eyes alliance, which also includes Canada, Australia, and New Zealand, collectively operate the largest signals intelligence apparatus ever built. The scale of what Edward Snowden disclosed in 2013 gave the public its clearest picture of what that apparatus looks like in practice: bulk collection of phone metadata, interception of internet traffic at the cable level, and cooperation between intelligence agencies and private telecommunications companies. Whether you view those programs as necessary or overreaching, they define the context in which any honest discussion of SIGINT has to take place.
This article covers how SIGINT works, the four recognized types, where it is applied, and the legal and ethical constraints that govern its use.
How SIGINT Works
SIGINT is not a single action. It is a pipeline, a sequence of steps that begins with capturing a raw signal and ends with a finished intelligence product that a decision-maker can act on. Each step has its own technical requirements, and failure at any point in the chain produces bad intelligence or no intelligence at all.
Signal Collection
Collection is the entry point. Analysts cannot work with signals they have not captured, so the collection infrastructure is the foundation everything else depends on.
Signals are collected through several different platforms depending on the target and the environment. Ground-based listening stations intercept radio and cellular transmissions within their range. Satellites capture signals across large geographic areas, including transmissions that never touch ground-based infrastructure. Submarine cables, the physical fiber-optic lines that carry the majority of global internet traffic, are a collection point in their own right. Tapping them at strategic locations gives access to enormous volumes of data simultaneously. Airborne platforms, including surveillance aircraft and drones, provide mobile collection capability in areas where fixed infrastructure does not exist or cannot be positioned.
The distinction between passive and active collection matters here. Passive collection means listening, capturing signals that are already being transmitted without interacting with the source. Active collection means sending a signal to provoke a response, which reveals information about the target system but also risks detection. Most large-scale SIGINT programs rely primarily on passive collection because it is harder to detect and can be sustained indefinitely.
One thing collection does not guarantee is access to content. This is where a critical distinction enters: metadata versus content. Metadata describes a communication, covering who sent it, who received it, when, from where, for how long, and through what network path. Content is what was actually said or written. These two categories are treated differently under law in most jurisdictions, and they require different collection methods. A phone company’s call records are metadata. The recording of the call itself is content. Modern SIGINT programs often collect metadata at scale and target content collection more selectively, partly for legal reasons and partly because content is harder to process in bulk.
Signal Processing
Raw collected signals are not readable. A radio transmission is a waveform. An intercepted data packet is a string of binary. Before any analyst can make sense of what has been captured, the signal has to be converted into something interpretable, and that conversion process is where most of the technical difficulty in SIGINT actually lives.
Processing involves several distinct operations running in sequence or in parallel. Filtering separates relevant signals from background noise and discards transmissions that fall outside the collection parameters. Demodulation converts the waveform into a digital signal. If the communication is in a foreign language, it requires translation. If it is encrypted, it requires decryption, which may or may not be possible depending on the strength of the encryption and whether the collecting agency has access to the relevant keys.
Encryption is the most significant technical challenge in modern SIGINT. End-to-end encrypted communications, the kind used by Signal, WhatsApp, and an increasing number of enterprise platforms, are encrypted at the sender’s device and decrypted only at the recipient’s device. An agency that intercepts the transmission in transit captures ciphertext that is computationally infeasible to break with current technology. This is not a minor inconvenience. It represents a fundamental shift in the collection landscape that intelligence agencies have been publicly vocal about, describing it as “going dark,” meaning the progressive loss of access to communications content that was previously accessible. The response has been to shift collection focus toward endpoints, meaning the devices themselves, rather than the transmission in transit, which moves the problem from SIGINT into a different discipline entirely.
The volume problem compounds the encryption problem. Modern collection infrastructure captures data at a scale that no human workforce could manually review. The NSA’s Utah Data Center, completed in 2013, was built specifically to store and process the volume of data generated by large-scale collection programs. Machine learning systems handle the initial filtering and flagging, surfacing communications that match target profiles for human review. The accuracy of those systems, and the consequences of false positives, is a persistent operational and ethical concern.
Analysis and Interpretation
Processed signals reach analysts as readable text, audio, or structured data. The analyst’s job is to extract meaning, not just from individual communications, but from patterns across many communications over time.
Pattern-of-life analysis is one of the primary analytical methods. Rather than focusing on the content of a single intercepted message, analysts map the communication behavior of a target over weeks or months: who they contact, how frequently, at what times, through what channels, and how those patterns change. A sudden shift in communication behavior, such as switching platforms, reducing frequency, or changing contact networks, can be as informative as the content of any individual message.
Link analysis maps relationships between entities. If person A communicates with person B, and person B communicates with person C, and person C communicates with person A through an intermediary, that network structure tells analysts something about the organization they are looking at regardless of what was said in any of those communications. This is why metadata collection is so operationally valuable even when content is unavailable. The structure of a communication network reveals organizational hierarchy, operational coordination, and relationships that participants may believe are hidden.
Timeline reconstruction is used when analysts are working backward from a known event. By pulling together all communications that occurred within a relevant timeframe and mapping them against each other, analysts can often reconstruct the sequence of decisions and coordination that preceded an incident.
The output of analysis is not raw data. It is a finished intelligence product, an assessment, a report, or a targeting package, written for a specific consumer and designed to support a specific decision. The gap between collected signal and finished product is where analytical judgment enters, and where the risk of error is highest. Intelligence analysis is probabilistic. Analysts work with incomplete information, make inferences, and assign confidence levels to their conclusions. When those conclusions are wrong, the consequences can be significant.
SIGINT Types
There are four recognized categories of signals intelligence: COMINT, ELINT, FISINT, and MASINT. Each targets a different class of signal and serves a different analytical purpose. In practice, intelligence operations rarely rely on one category in isolation. A complete picture of a target typically requires signals from multiple categories interpreted together.
Communications Intelligence (COMINT)
COMINT is the interception and analysis of communications between people or systems. That includes voice calls, text messages, emails, radio transmissions, and internet-based messaging. It is the category most people picture when they think about signals intelligence, and it is the one with the most direct legal and ethical implications because it involves the content of human communication.
The analytical value of COMINT extends beyond what is actually said in any given communication. Who is talking to whom, how often, through what channel, and at what times can be as revealing as the content of the conversation itself. A network of individuals who communicate frequently through encrypted channels, shift platforms regularly, and avoid direct references to operational details is exhibiting behavior that analysts recognize as deliberate tradecraft, regardless of whether the content of those communications has been accessed.
COMINT is the primary tool in counterterrorism investigations, law enforcement operations that involve organized crime or trafficking networks, and cybersecurity contexts where tracking attacker communication infrastructure is part of the response. It is also the category most directly constrained by domestic surveillance law. In the United States, the Foreign Intelligence Surveillance Act (FISA) governs the conditions under which the government can collect COMINT on communications involving US persons. The FISA Court, a specialized federal court that operates largely in secret, reviews and approves collection requests. Its existence and the scope of what it has authorized became a central point of public debate following the Snowden disclosures.
One important technical distinction within COMINT is the difference between content collection and traffic analysis. Content collection captures what was communicated. Traffic analysis examines the patterns of communication without necessarily accessing the content. Traffic analysis has a long history in signals intelligence that predates modern encryption. During the Second World War, Allied analysts were able to draw significant conclusions about German naval operations by analyzing radio traffic patterns even when they could not decrypt the messages themselves. The same principle applies today: encrypted content does not make traffic analysis impossible, and in many cases traffic analysis alone is sufficient to produce actionable intelligence.
Electronic Intelligence (ELINT)
ELINT focuses on electronic signals that are not communications. The primary targets are radar emissions, navigation signals, and electronic signatures produced by weapons systems and military platforms. A radar system, a missile guidance unit, and an air defense network all emit electronic signals as a byproduct of their operation. Those emissions carry information about the system’s technical characteristics, its location, and how it is being used.
The intelligence value of ELINT is primarily technical and military. By analyzing the radar emissions of a foreign air defense system, analysts can determine its operating frequency, its pulse repetition rate, its detection range, and its coverage gaps. That information directly informs the design of aircraft, missiles, and electronic countermeasures intended to operate in environments where that radar system is present. This is why ELINT collection has historically been one of the most sensitive and contested areas of signals intelligence. Reconnaissance aircraft flying near the borders of adversary nations to collect radar emissions have been a source of significant diplomatic incidents, including the 1960 U-2 incident in which an American reconnaissance aircraft was shot down over Soviet territory.
ELINT collection also supports what is called order of battle analysis, meaning the mapping of an adversary’s military assets, their locations, their capabilities, and their readiness. A military commander planning an operation needs to know not just where enemy forces are positioned but what electronic systems they are operating and how those systems would respond to different scenarios. ELINT provides a significant portion of that picture.
Foreign Instrumentation Signals Intelligence (FISINT)
FISINT covers signals associated with the testing and operation of foreign weapons systems and aerospace platforms. The primary sources are telemetry data transmitted by missiles during test flights, signals from spacecraft during launches and operations, and instrumentation data from weapons systems undergoing development or evaluation.
Telemetry is the most important of these. When a country tests a ballistic missile, the missile transmits data back to ground stations throughout its flight: velocity, altitude, trajectory, stage separation events, and terminal behavior. That data stream is essential to the country conducting the test because it tells their engineers how the missile performed. It is equally valuable to foreign intelligence agencies collecting it, because it reveals the missile’s actual performance characteristics rather than the claimed or estimated ones. Collecting and analyzing foreign missile telemetry has been a core FISINT mission for decades, and it is one of the reasons that arms control treaties have historically included provisions about encryption of telemetry data during tests. The 1991 START treaty, for example, prohibited the encryption of telemetry in ways that would impede verification, precisely because both sides understood that the other was collecting it.
FISINT is the most specialized of the four SIGINT categories and the one least discussed in public. Its targets are narrow, its collection methods are highly technical, and its primary consumers are defense analysts and arms control specialists rather than law enforcement or cybersecurity teams.
Measurement and Signature Intelligence (MASINT)
MASINT is the category that most discussions of SIGINT omit, and its omission consistently produces an incomplete picture of the discipline. Where COMINT, ELINT, and FISINT focus on signals that are intentionally transmitted or are a recognized byproduct of system operation, MASINT focuses on the physical and chemical signatures that systems and activities produce. Those signatures include acoustic emissions, seismic activity, nuclear radiation, chemical traces, and the specific spectral characteristics of radar returns.
The distinction matters because MASINT can detect and characterize things that the other SIGINT categories cannot. A nuclear weapons test produces a seismic signature that MASINT systems can detect and analyze to determine the yield and type of device. A chemical weapons facility produces atmospheric signatures that MASINT collection can identify. A submarine produces an acoustic signature that is specific enough to identify the vessel class and in some cases the individual vessel.
In the United States, MASINT is formally recognized as a distinct intelligence discipline by the Director of National Intelligence, and the Defense Intelligence Agency has primary responsibility for its collection and analysis. Its inclusion in any complete account of signals intelligence is not optional.
Common Applications of Signals Intelligence
Understanding what SIGINT is and how it works is one thing. Understanding where it is actually used, and what it produces in each context, is another. The applications below are not exhaustive, but they represent the areas where signals intelligence has the most established and documented role.
National Security and Counterterrorism
This is the application most associated with SIGINT in the public imagination, and for good reason. The interception of communications between individuals planning attacks, the mapping of terrorist networks through link analysis, and the tracking of financial and logistical coordination have all been central to counterterrorism operations conducted by Western intelligence agencies since at least the 1990s.
The 9/11 Commission Report, which is publicly available, documented specific instances where intercepted communications contained information that, had it been properly processed and shared between agencies, might have indicated the scale of what was being planned. The failures identified in that report were not primarily collection failures. The signals existed. They were failures of processing, translation, and inter-agency communication, which illustrates a point worth holding onto: the value of SIGINT is not determined by collection volume alone. It is determined by the capacity to process, analyze, and act on what has been collected.
Following September 2001, the NSA’s collection authorities were significantly expanded under what became known as the President’s Surveillance Program, later partially disclosed and debated publicly. The FISA Amendments Act of 2008 formalized some of those expanded authorities, including Section 702, which authorizes the collection of communications of non-US persons located outside the United States. Section 702 remains one of the most significant and contested legal authorities in US signals intelligence today.
Military Operations
Military SIGINT serves several distinct functions that are worth separating rather than grouping under a single heading.
Tactical SIGINT supports operations in the field. Units equipped with signals collection equipment intercept enemy communications in real time to understand troop positions, planned movements, and command structures. The speed requirement here is different from strategic SIGINT. A tactical commander needs processed intelligence within minutes, not days. This places significant pressure on the processing and analysis steps of the pipeline and has driven investment in automated translation and pattern recognition systems that can operate at the edge rather than requiring data to be sent back to a central facility for analysis.
Strategic SIGINT informs longer-term military planning. Order of battle analysis, the mapping of an adversary’s military assets and capabilities using ELINT and other collection, gives planners the information they need to assess threats, design force structures, and develop operational concepts. This kind of intelligence is produced over months and years rather than hours.
Electronic warfare is a related but distinct application. Once ELINT collection has characterized an adversary’s radar and communications systems, that information can be used to design jamming systems, decoys, and other countermeasures. The relationship between SIGINT collection and electronic warfare capability is direct: you cannot effectively jam a system whose technical characteristics you do not understand.
Cybersecurity
The application of SIGINT principles to cybersecurity is one of the more significant developments of the past two decades, and it has blurred some boundaries that were previously clearer.
At the network level, analyzing traffic patterns to detect anomalies is a direct application of signals intelligence methodology. The same pattern-of-life analysis used to track the communication behavior of a human target can be applied to the behavior of a network node. A server that begins communicating with external addresses it has never contacted before, at unusual hours, transmitting volumes of data inconsistent with its normal function, is exhibiting behavioral patterns that warrant investigation regardless of whether the content of those communications can be accessed.
Malware command-and-control infrastructure leaves signals. The communications between compromised systems and the servers controlling them follow patterns that can be identified, tracked, and mapped. Intelligence agencies and private cybersecurity firms both use this kind of signals analysis to identify attacker infrastructure, attribute attacks to specific groups, and in some cases disrupt operations before they reach their intended targets.
The NSA’s Tailored Access Operations unit, details of which became public through the Snowden disclosures and subsequent reporting, represented a case where signals intelligence collection and offensive cyber operations overlapped directly. Collection was used to identify targets and understand their systems, and that understanding was then used to develop and deploy implants that provided ongoing access. The line between SIGINT as a passive collection discipline and active cyber operations is not always clear in practice, and that ambiguity has significant implications for how the discipline is governed and overseen.
Law Enforcement
Domestic law enforcement use of signals intelligence is more constrained than national security use, and the legal frameworks governing it are different. In the United States, law enforcement agencies conducting electronic surveillance for criminal investigations operate under Title III of the Omnibus Crime Control and Safe Streets Act, which requires a court order and imposes strict minimization requirements on the collection and retention of communications involving individuals not named in the order.
Despite those constraints, signals intelligence methods are used in serious criminal investigations involving organized crime, drug trafficking, and terrorism cases that fall within domestic law enforcement jurisdiction. The DEA, FBI, and other agencies have used communications intercepts as evidence in prosecutions, and the legal standards for obtaining and using that evidence have been the subject of significant litigation.
One area of ongoing legal tension is the use of cell-site simulators, devices that mimic cell towers to capture the signals of mobile phones in a given area. Their use by law enforcement agencies has raised questions about whether they constitute a search under the Fourth Amendment, what authorization is required before deploying them, and what happens to the data collected from phones belonging to individuals who are not the target of the investigation. Courts in different jurisdictions have reached different conclusions, and the legal framework around their use remains unsettled.
Commercial Applications
Commercial use of signals intelligence methods is real but operates under a different label and within tighter legal constraints than government use. The underlying analytical techniques, particularly traffic analysis, pattern recognition, and anomaly detection, are applied in several commercial contexts.
Fraud detection in banking and financial services relies on analyzing transaction signals and communication patterns to identify behavior inconsistent with a customer’s established profile. This is not SIGINT in the national security sense, but it applies the same core principle: patterns of behavior carry information that content alone does not always reveal.
Brand protection and market intelligence firms use network monitoring and open-source signals analysis to track the unauthorized use of intellectual property, monitor competitor activity, and identify counterfeit goods moving through supply chains. The signals in these cases are often publicly accessible, which removes the legal complications associated with interception, but the analytical methodology is recognizably similar.
It is worth being direct about the boundary here. Commercial entities do not have the legal authority to intercept private communications. What they can do is analyze signals that are publicly accessible or that they have a legal right to collect, and apply analytical methods derived from the signals intelligence discipline to extract useful information from those signals. The moment a commercial actor crosses into intercepting communications without authorization, they are no longer in the realm of competitive intelligence. They are breaking the law.
Challenges and Ethical Considerations
SIGINT is one of the most powerful intelligence collection disciplines available to governments and military organizations. It is also one of the most contested, because the same capabilities that make it effective at identifying genuine threats make it capable of surveilling populations at a scale that has no historical precedent. The challenges are technical, legal, and ethical, and they are not separate problems. They interact with each other in ways that make simple answers difficult.
The Encryption Problem
The widespread adoption of strong encryption is the most significant technical challenge facing signals intelligence collection today. This is not a new observation. Intelligence agencies have been making the “going dark” argument publicly since at least the early 1990s, when the Clinton administration proposed the Clipper Chip, a hardware encryption device that would have given the government a backdoor into encrypted communications. That proposal was defeated, largely by the technology industry and civil liberties organizations, and the underlying tension it represented has never been resolved.
End-to-end encryption, now standard in consumer messaging applications used by billions of people, means that interception at the network level produces ciphertext that cannot be read without the decryption keys held on the communicating devices. The practical response from intelligence agencies has been to shift collection focus toward endpoints rather than transmissions, meaning targeting the devices themselves through implants, exploits, and other means. This approach is more targeted and more legally complex than bulk collection, and it requires a different set of technical capabilities.
The encryption debate also involves a genuine policy tension that does not have a clean resolution. Any mechanism that gives government agencies access to encrypted communications, whether through key escrow, backdoors, or compelled decryption, also creates a vulnerability that other actors can exploit. Security researchers have argued consistently that there is no way to build a backdoor that only authorized parties can use. Weakening encryption to serve intelligence collection needs weakens it for everyone, including the banks, hospitals, and infrastructure operators that depend on it.
Data Volume and Processing Capacity
Modern collection infrastructure generates data at a volume that consistently outpaces the capacity to analyze it. This is not a new problem either, but it has grown more acute as the number of internet-connected devices and communication platforms has expanded.
The consequence of this imbalance is that collection decisions have to be made before the value of what is being collected is fully understood. Agencies collect broadly and filter afterward, which means large volumes of data belonging to individuals who are not intelligence targets are collected, stored, and processed as a byproduct of targeting someone else. The minimization procedures that govern what happens to that incidentally collected data vary by jurisdiction and by the legal authority under which collection is conducted, and their adequacy has been a persistent point of criticism from oversight bodies and civil liberties organizations.
Machine learning systems have become central to managing this volume problem. Automated systems handle initial filtering, flagging, and in some cases preliminary analysis, with human analysts reviewing the output rather than the raw data. This introduces its own set of concerns. The criteria encoded in those systems determine what gets surfaced and what gets discarded, and those criteria reflect analytical assumptions that may not be visible to the people relying on the output. When an automated system flags a communication as significant, the analyst reviewing it is working with a pre-filtered picture, not the raw signal.
Legal Frameworks and Oversight
The legal frameworks governing SIGINT vary significantly between countries, and even within a single country the rules differ depending on whether the target is a domestic or foreign person, whether collection is happening inside or outside national borders, and which agency is conducting it.
In the United States, the primary legal authorities are Executive Order 12333, which governs foreign intelligence collection conducted outside the United States; the Foreign Intelligence Surveillance Act and its amendments, which govern collection targeting foreign powers and their agents; and Title III of the Omnibus Crime Control and Safe Streets Act, which governs domestic law enforcement wiretapping. These frameworks were designed at different times, for different threat environments, and they do not always interact coherently. The question of which authority applies to a given collection activity, and what oversight requirements attach to it, is frequently contested.
The oversight mechanisms that exist, including the FISA Court, the congressional intelligence committees, and the Privacy and Civil Liberties Oversight Board, have been criticized on different grounds by different observers. Some argue they are too permissive and lack the adversarial structure needed to meaningfully constrain collection. Others argue they impose constraints that impede legitimate intelligence work. What is not seriously disputed is that meaningful oversight of signals intelligence is technically demanding. Overseers need to understand what they are overseeing, and the technical complexity of modern collection programs makes that understanding difficult to develop and maintain.
Outside the United States, the picture is more varied. The UK’s Investigatory Powers Act 2016, sometimes called the Snoopers’ Charter by its critics, established a legal framework for bulk collection and equipment interference that is among the most explicit in the world in terms of what it authorizes. The European Court of Human Rights has ruled against aspects of UK surveillance law on multiple occasions, finding that certain collection practices violated the right to privacy under the European Convention on Human Rights. The tension between national security collection authorities and human rights law is ongoing and unresolved across multiple jurisdictions.
Privacy and the Question of Proportionality
The core ethical question in signals intelligence is proportionality. The collection of communications and electronic signals involves, by definition, the interception of information that individuals and organizations intend to keep private. The justification for that intrusion is that it produces intelligence that protects security. The question is whether the intrusion is proportionate to the benefit, and who gets to make that determination.
Bulk collection programs, which collect communications data from large populations rather than targeting specific individuals, are where this question is sharpest. The argument for bulk collection is that you cannot always know in advance which communications are significant, and that the ability to search historical data after a threat is identified is operationally valuable. The argument against it is that collecting the communications of millions of people who are not suspected of anything, on the basis that some of them might be relevant to a future investigation, inverts the legal presumption of innocence and creates a surveillance infrastructure that is available for misuse.
The Snowden disclosures shifted this debate from theoretical to concrete. Programs that had been described in general terms in public statements were shown to operate at a scale that most observers had not understood. The public and political response varied by country, but in several jurisdictions it produced legislative changes, court rulings, and a sustained public conversation about the appropriate limits of state surveillance that continues today.
Key Takeaways
- SIGINT is the collection and analysis of electronic signals to produce usable intelligence. It covers communications, radar and electronic emissions, foreign weapons telemetry, and physical and chemical signatures.
- The SIGINT pipeline has three stages: collection, processing, and analysis. Each stage has distinct technical requirements, and a failure at any stage degrades the quality of the finished intelligence product.
- There are four recognized categories of SIGINT: COMINT (communications), ELINT (electronic emissions), FISINT (foreign instrumentation and telemetry), and MASINT (measurement and signatures). Accounts that list only three are omitting MASINT.
- The distinction between metadata and content is central to understanding how modern SIGINT programs operate and how they are governed. Metadata collection and content collection are legally and technically distinct.
- Encryption is the primary technical challenge in contemporary signals intelligence. End-to-end encryption has shifted collection focus from network interception toward endpoint access, with significant legal and policy implications.
- SIGINT is applied across national security, military operations, cybersecurity, law enforcement, and commercial contexts. The legal frameworks and ethical constraints governing its use differ significantly across these applications.
- The legal oversight of SIGINT is complex, jurisdiction-dependent, and technically demanding. In the United States, the primary governing authorities are Executive Order 12333, FISA and its amendments, and Title III. In the UK, the Investigatory Powers Act 2016 provides the primary framework.
- The proportionality of bulk collection, gathering data from large populations rather than specific targets, is the central unresolved ethical question in signals intelligence. It became a matter of public record and political debate following the Snowden disclosures in 2013.
Frequently Asked Questions
What is the difference between SIGINT and HUMINT?
HUMINT (Human Intelligence) is gathered through interpersonal contact, such as informants or debriefings. SIGINT (Signals Intelligence) is collected from electronic transmissions like radio waves or internet traffic. While HUMINT provides “the why” through intent, SIGINT provides “the what” through verifiable data and movement.
Can SIGINT read encrypted messages?
Modern SIGINT can collect encrypted ciphertext, but reading it requires a shift from network interception to endpoint collection. Because end-to-end encryption (E2EE) is computationally infeasible to break, agencies target the physical devices (phones/laptops) where the message is decrypted, rather than the signal in transit.
How does SIGINT differ from OSINT?
The primary difference is the source’s privacy status. OSINT (Open-Source Intelligence) utilizes publicly available data like social media or news. SIGINT involves the unauthorized interception of private signals. Legally, OSINT requires no special warrants, whereas SIGINT is strictly governed by frameworks like FISA or EO 12333.
What are the four types of SIGINT?
he four recognized categories are COMINT (communications), ELINT (electronic emissions like radar), FISINT (foreign instrumentation/telemetry), and MASINT (measurement and signatures). Many basic guides omit MASINT, which tracks physical signatures like seismic or nuclear data, but it is an essential pillar of modern intelligence.
