MARD-HAT // Hybrid Activity Telemetry by MOwlSINT

MARD-HAT is a public, lightweight OSINT telemetry layer for cyber/exploit, IOC, botnet/C2 and maritime FIMI-lite pressure. It is designed as contextual side input for maritime and hybrid-activity assessment, especially for downstream use in Magic Paws / MARD-Eu.

MARD-HAT does not attribute activity to a state actor. It does not prove sabotage, disinformation, coordination, or hybrid activity by itself.

v0.1.5 evaluation and transparency patch

Score shown as a 0–100% contextual pressure score.
Visible green/yellow/orange/red score bands.
Source health supports ok / partial / error.
GDELT FIMI-lite hits are post-filtered for maritime relevance.
Core MARD-Eu and Global Maritime Spillover are separated.
Obscuration / information-fog context is explained cautiously.
Analyst downloads are available under public/downloads/.

Score interpretation

Range	Band	Meaning
0–20	green / normal	low contextual pressure
21–40	yellow / elevated	elevated background pressure
41–60	orange / watch	watch-level pressure
61–80	deep orange / high	high contextual pressure
81–100	red / critical	critical contextual pressure

The score is a percentage-style contextual pressure score, not a probability.

Maritime FIMI-lite filter

GDELT is a narrative/media-volume sensor, not a disinformation classifier. v0.1.5 therefore applies a local post-filter:

An article counts only if it contains:
1. at least one maritime anchor
2. at least one threat/FIMI anchor
3. for Core MARD-Eu, at least one North/Baltic/Northern-Europe regional anchor

Global maritime spillover such as Hormuz, Iran, Red Sea, Suez or global oil blockade narratives is retained separately and down-weighted.

Obscuration / information-fog context

MARD-HAT does not claim that botnets or maritime disinformation are intentionally hiding maritime events. It can only mark conditions compatible with information fog or obscuration.

Technically, this matters because botnet/C2 infrastructure can support access, spam, amplification, credential theft, staging or disruption; broad narrative volume can bury or blur maritime/security signals; and partial source access can create analytical blind spots.

Analyst downloads

public/downloads/hat_analyst_bundle_latest.json
public/downloads/fimi_maritime_articles_latest.csv
public/downloads/fimi_maritime_articles_latest.json
public/downloads/source_health_latest.csv
public/downloads/README_downloads.txt

Claim limit

MARD-HAT is a contextual digital-pressure and FIMI-lite indicator only. It is not attribution-grade and is not sufficient to prove hybrid activity, sabotage, disinformation, coordination or state involvement on its own.