Skip to content

Threat actor

Geolitica

Last fetched

Geolitica is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Geolitica, formerly known as PredPol, short for "Predictive Policing," is a software company that claims to use historical crime data to predict where crimes are likely to occur. Its surveillance capabilities rely on analyzing past crime reports, including time, location, and type of crime, to generate "hot spots" for law enforcement to monitor. This data-driven approach enabled police departments, such as the LAPD, to direct patrols and resources to specific areas flagged by the system. PredPol however specifically targeted Black and brown neighborhoods in the U.S, and its algorithms created often false and misleading data that intensified surveillance in these communities.

Techniques by tactic

No ATT&CK techniques are recorded for Geolitica in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Geolitica today — this states the absence of a published link, not that Geolitica has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Geolitica into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.