Analysis matrix
How SentinelScan scores posts. Every scan runs a keyword pass and an AI pass, then takes the higher severity per category. Overall severity = max across categories.
Severity scale
Keyword score → severity: 0 = none · 1–2 = low · 3–4 = medium · 5–7 = high · 8+ = critical.
National Security
Terrorism, violent extremism, incitement to political violence, state-actor threats, planned attacks on public infrastructure.
Keyword indicators
Recommended actions by severity
- critical
Immediate escalation. Treat as potential imminent attack: notify emergency services and counter-terrorism.
- Emergency services (911/112/999)
- National counter-terrorism agency
- high
Escalate to a national security or counter-terrorism unit.
- National counter-terrorism tip line
- Local law enforcement
- medium
Route to a trained analyst for review; retain content and metadata.
- Internal trust & safety review
- Regional fusion center awareness
- low
Log and monitor. Do not escalate unless a pattern emerges.
- Internal monitoring log
- none
No action required.
Cybersecurity
Hacking intent, credential dumps, phishing kits, malware distribution, ransomware boasts, network intrusion offers.
Keyword indicators
Recommended actions by severity
- critical
Immediate escalation: national CERT, law enforcement cybercrime unit, and affected critical-infrastructure operator.
- National CERT / CSIRT
- Law enforcement cybercrime unit
- Critical infrastructure operator
- high
Escalate to national CERT and affected organization's incident response.
- National CERT / CSIRT
- Affected organization security contact
- medium
Forward to SOC / incident response team for triage.
- Internal SOC
- Sector ISAC
- low
Note for threat-intel enrichment.
- Internal SOC log
- none
No action required.
Law Enforcement
Threats of violence, self-harm, trafficking, illicit weapon/drug sales, explicit criminal planning against individuals.
Keyword indicators
Recommended actions by severity
- critical
Contact emergency services immediately. Treat as potential imminent harm to a person.
- Emergency services (911/112/999)
- Local law enforcement
- high
Report to local law enforcement; preserve evidence with timestamps.
- Local law enforcement
- Platform legal / preservation request
- medium
Route to trust & safety; consider notifying platform moderators.
- Platform trust & safety
- Local non-emergency police line
- low
Preserve content; no immediate action.
- Internal review log
- none
No action required.