EDP Corpus

Reading Order

Corpus document

Reading Order

The Framework Overview (Doc 00) specifies this explicitly. Here is the sequence by role:

If you are new to the framework (start here regardless of role):

Framework Overview (Doc 00) - Read first, no exceptions. This document.

Glossary (Doc 01) - Before anything else operational. Many terms are framework-specific.

Operational Lead reading path:

Ecosystem Disruption Playbook (Doc 02)

RU_GOV Protection Framework (Doc 04)

Dependency Map (Doc 03)

Phase A Playbook (Doc 05) - Nodes 01-03 (OTC brokers, exchanges, BPH)

Phase B Playbook (Doc 06) - Nodes 04/07/08

Phase C Playbook (Doc 07) - Nodes 05/06/09

KPI Framework (Doc 08) - Measurement obligations before any action

KPI Excel Workbook (Doc 09) - Tracking setup

KPI Sourcing Plan (Doc 10) - Data sources and collection methodology for KPI tracking

Group Pressure Tracking Template (Doc 11)

Historical Case Studies (Doc 12) - Calibration and training reference

Analytic Lead reading path (measurement/reporting focus):

KPI Framework (Doc 08) - Primary reference

Excel Workbook (Doc 09) - Reporting setup

KPI Sourcing Plan (Doc 10) - Sourcing reference for every KPI

Ecosystem Disruption Playbook (Doc 02)

Dependency Map (Doc 03)

Historical Case Studies (Doc 12)

Group Pressure Tracking Template (Doc 11)

Phase playbooks as needed for node context

EDP Node Intelligence Modules (Reference by Node):

The 15 EDP modules provide deep-dive intelligence on each node in the Dependency Map. Each module follows a standard 8-section structure: definition, key actors, infrastructure dependencies, disruption leverage points, resilience, KPIs, sources, and analyst assessment. Consult the relevant module before taking action on a node or preparing a node-level briefing.

Financial and Cash-Out Layer (Phase A/C nodes):

Module 11: Crypto Mixers and Tumblers (Node 08, HIGH)

Module 12: OTC Brokers (Node 01, CRITICAL)

Module 13: Money Launderers and Exchanges (Node 02, CRITICAL)

Module 14: Mule Networks (Node 09, HIGH)

Infrastructure Layer (Phase A node):

Module 09: Bulletproof Hosting (Node 03, CRITICAL)

Access, Delivery, and Capability Layer (Phase B/C nodes):

Module 01: Stealers (Node 10, MEDIUM)

Module 02: Loaders (Node 05, HIGH)

Module 03: Crypters and Packers (Node 11, MEDIUM)

Module 04: Callers and Spammers (cross-cutting, no dedicated node)

Module 05: Initial Access Brokers (Node 04, HIGH)

Module 06: Exploit and Vulnerability Brokers (Node 16, CRITICAL)

Operator and Trust Layer (Phase B/C nodes):

Module 07: Ransomware Groups and RaaS Variants (cross-cutting, all phases) [scope-reduced; file: EDP_Module07_RaaS_ScopeReduced_v1.pdf]

Module 08: Leak Site Operations (Node 06, HIGH)

Module 10: Underground Forums (Node 07, HIGH)

Supplement:

Module 15: Negotiation Services (EDP Supplement, no dedicated node)

Ecosystem Dependency Project. This page is the full text of a corpus framework document, converted from the original for reading on the web. Content is unchanged. Figures and assessments carry the confidence language of the source document.