Since 2022, Halifax Group LLC has provided specialized red teaming and all-domain awareness support to the Department of War (DoW) and other U.S. Government partners, safeguarding sensitive CONUS and OCONUS facilities, advanced technology testing events, and major military exercises. Halifax personnel, drawing from decades of direct, undercover engagements with foreign counterintelligence adversaries, identify specific surveillance vulnerabilities, foreign intelligence threats, and operational risks to personnel, programs, and technologies.
Halifax is routinely engaged by DoW to conduct red teaming in advance of and during sensitive exercises and exotic technology test events. Our adversarial simulations, leveraging open-source intelligence (OSINT) and human intelligence (HUMINT), consistently uncover direct foreign intelligence threats. Investigative findings are coordinated with the appropriate federal law enforcement in intelligence agencies.
Pre-Event Threat Hunting
Prior to events, Halifax focuses on proactive countersurveillance to detect known tactics, techniques, and procedures (TTPs) and tradecraft employed by adversaries during similar high-value operations. This includes:
- Identifying and exploiting physical and cyber surveillance and counter-surveillance operations
- Identifying foreign intelligence collection patterns
- Mapping of potential threat actors and enablers in proximity to the event
Multi-Domain, All-Hazards Monitoring During Events
During exercises and tests, Halifax delivers persistent multi-domain monitoring and anomaly detection across the full spectrum of threats:
- Space, air, maritime (surface and subsurface), ground (protests/intrusions), cyberspace, insider threats, environmental hazards, and extreme hypothetical scenarios
- Particular emphasis on hybrid/gray-zone actions that remain below the threshold of overt war, as adversaries increasingly favor deniable, multi-domain operations to probe defenses and exploit vulnerabilities
Our methodology integrates:
- OSINT collected through structured techniques (keyword searches, geospatial mapping, cross-verification of credible sources)
- HUMINT and social media intelligence (SOCMINT)
- Electronic Intelligence (ELINT): Passive interception and geolocation of radar, communications, and other electromagnetic signals to profile adversary platforms (e.g., UAS, vessels, or anomalous phenomena), detect electronic attack indicators, and support multi-domain threat correlation.
- Proprietary AI platform for data synthesis, pattern recognition, and enhanced deep/dark web research
Halifax supplements OSINT with secure commercial databases (e.g., LexisNexis, Tracers) to build comprehensive individual and entity profiles. When specific persons or organizations are identified, we cross-reference residential, business, and vessel ownership records, relevant licenses (pilot, firearms, maritime), and any criminal or civil litigation history. This layered analysis uncovers potential associations, risk indicators, or threat actor connections near exercise sites, test events, or sensitive facilities – delivering actionable intelligence beyond what open sources alone can provide.
No classified U.S. Government databases are utilized. All information is cross-verified for reliability, with limitations noted where data remains classified, unconfirmed, or privacy-restricted.
Halifax’s approach ensures real-time identification of threats, enabling rapid mitigation and protecting U.S. personnel, programs, and advanced technologies in high-stakes environments.
Persistent Multi-Domain Monitoring & Anomaly Detection
One of Halifax Group’s distinctive capabilities in the space and air domains, addressing a critical gap for most risk assessment firms, is our ability to monitor and track aerial assets (including aircraft and drones) and maritime vessels (surface and semisubmersible), as well as other anomalous phenomena in airspace and on ocean surfaces. Adversaries, transnational criminal organizations, and operators of gray/shadow fleet vessels frequently disable their Automatic Identification System (AIS) for ships or Automatic Dependent Surveillance–Broadcast (ADS-B) for aircraft to evade detection. Similarly, unmanned systems pose comparable threats through stealthy or irregular operations.
Halifax and its partners leverage a combination of advanced sensor technology and specialized signaling methods to detect, track, and analyze unidentified aerial and other anomalous phenomena. Our integrated approach ensures comprehensive coverage, enabling real-time threat identification and response. Key elements include:
- Multi-Sensor Correlation & Data Collection: Employing high-fidelity electro-optical (visible light) and infrared (thermal) cameras, alongside SIGINT (signals intelligence) sources, to capture and correlate real-time data for enhanced situational awareness.
- AI-Enhanced Image Processing: Utilizing artificial intelligence to process video and data streams in real time, distinguishing between conventional objects (e.g., drones, satellites, birds) and anomalies by analyzing flight paths, behaviors, and signatures.
- Electro-Mechanical Signaling Device: Deploying a high-frequency electromagnetic signaling system, often likened to an electro-mechanical “dog whistle,” to elicit responses from various potential aerial threats, facilitating targeted observation and data gathering.
- Passive/Active Radar & RF Analysis: Integrating passive and active radar systems with radio frequency (RF) analysis to capture telemetry data, including position, velocity, acceleration, and electronic emissions, for precise threat profiling.
- Kinematic & Signature Analysis: Conducting in-depth evaluations of object motion, energy output, and behavioral patterns to identify characteristics exceeding known aerospace capabilities, such as sudden acceleration, lack of visible propulsion, or extreme maneuvering.
This capability empowers our team at Halifax to deliver proactive, actionable intelligence, bridging gaps in traditional monitoring and supporting clients in safeguarding critical assets against evolving threats.
