Skip to content

Threat actor

SoundThinking

Last fetched

SoundThinking is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

SoundThinking was formerly known as ShotSpotter, Inc until it changed its corporate name in 2023. ShotSpotter, which retained its name as a product after the rebrand, relies on a network of acoustic sensors that monitor urban environments, effectively turning public spaces into zones of constant surveillance. The accuracy of ShotSpotter has been called into question, with reports indicating that the system can misidentify sounds, leading to unnecessary and dangerous police deployments as well as over-policing in various communities. ShotSpotter is linked to more than 100 law enforcement agencies in the U.S. Another one of their products, CrimeTracer, functions as a police database and search engine, repackaging and sharing vast amounts of data across a range of law enforcement agencies. The company further consolidated its position in the surveillance industry after acquiring Geolitica, the firm behind PredPol, a predictive policing technology criticized for exacerbating racial inequalities by directing police to already heavily surveilled communities. This merger builds on SoundThinking's previous acquisition of HunchLab in 2018 to provide AI-driven analysis and “predictive policing.” In addition to police departments, SoundThinking also has contracts with the U.S. Department of Defense in the military market and also maintains a partnership with Israeli weapons manufacturer Airobotics.

Techniques by tactic

No ATT&CK techniques are recorded for SoundThinking in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to SoundThinking today — this states the absence of a published link, not that SoundThinking has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from SoundThinking into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.