Conflict Has a Domestic Signature
Grayline Intelligence identifies, classifies, and analyzes threats to U.S. interests arising from geopolitical escalation and gray zone activity. Developed by Spectra Intel Group (SIG), the platform transforms open-source reporting into structured, analyzable threat intelligence through systematic OSINT monitoring, AI-assisted extraction, and analyst-reviewed classification.
This dataset currently emphasizes incidents linked to the second-order effects of the U.S.–Iran conflict and related foreign-directed or foreign-inspired threat activity.
Foreign escalation. U.S. exposure. Structured for analysis.
This dataset captures observed incidents, disruptions, and credible threat activity affecting U.S. interests, structured for longitudinal analysis across geography, attribution, and method.
March 12, 2026
CRITICAL
Old Dominion University ROTC Classroom Shooting
Norfolk, Virginia – Old Dominion University ROTC classroom
1 Killed
2 Injured
Firearms
Islamic State (ISIS)-inspired; prior terrorism conviction
Confirmed
Suspect
Mohamed Bailor Jalloh, 36, killed by students during attack
Source Type
Media
Threat Type
terrorism
Target Type
campus
Intent
mass_casualty
Outcome
completed
Confidence
0.92
Notes
- FBI Director Kash Patel confirmed the shooting is being investigated as an act of terrorism.
- The gunfire erupted shortly before 11 a.m. in an ROTC classroom at Old Dominion University.
- The victim, Army Lt. Col. Brandon A. Shah, was an ROTC instructor killed in the attack.
- Two other U.S. Army personnel were injured according to Army Secretary Dan Driscoll.
- The gunman Mohamed Bailor Jalloh shouted 'Allahu Akbar' and was subdued and killed by students.
- Jalloh had previously pleaded guilty to terrorism-related charges involving a plot to murder US military personnel and attempting to provide material support to ISIS.
- Jalloh was sentenced to 11 years in prison in 2017 and was released in 2024.
- In 2016, Jalloh attempted to buy an AK-47 but was refused, then purchased an AR-15 at a local gun store before his arrest.
Sources
Submitted URL
March 12, 2026
HIGH
Temple Israel Synagogue Vehicle Ramming and Shooting Attack
West Bloomfield, Michigan – Temple Israel synagogue
1 Killed
31 Injured
Vehicle Ramming, Firearms, Incendiary Device
Unknown; under investigation as targeted antisemitic violence
Confirmed
Suspect
Ayman Mohamad Ghazali (preliminary identification), naturalized U.S. citizen from Lebanon, deceased
Source Type
Government + Media
Threat Type
terrorism
Target Type
religious
Intent
mass_casualty
Outcome
failed
Confidence
0.88
Notes
- Suspect rammed a vehicle into Temple Israel synagogue and drove down the hallway with purpose before exiting with a rifle.
- Armed security personnel engaged the suspect with gunfire and shot and killed him.
- The vehicle caught fire inside the building, filling the hallway with heavy smoke and flames.
- One security guard was injured after being struck by the suspect's vehicle.
- Approximately 30 law enforcement officers were hospitalized for smoke inhalation after entering the building.
- All 140 students in the synagogue's early childhood center, along with staff and teachers, were accounted for and unharmed.
- FBI is leading the investigation as a 'targeted act of violence against the Jewish community.'
- Suspect preliminarily identified as Ayman Mohamad Ghazali, born in Lebanon in 1985, who became a U.S. citizen on February 5, 2016.
Sources
Submitted URL
March 10, 2026
HIGH
Central Islip Molotov Cocktail Arrest
Central Islip, NY – Lexington Avenue
0 Killed
0 Injured
Incendiary Device
Unknown; non-terrorism related per law enforcement
Thwarted
Suspect
Lorenzo Alvarado-Navarrete (18), Elvis Romero-Martinez (20), Albert Yanes-Moran (20) – all arrested and released without bail
Source Type
Media
Threat Type
criminal
Target Type
residential
Intent
targeted
Outcome
thwarted
Confidence
0.8
Notes
- Suffolk County police pulled over a 2008 Honda Accord allegedly driving erratically shortly before 2:30 a.m. Tuesday on Lexington Avenue in Central Islip.
- Officers discovered two Molotov cocktails—beer bottles packed with gasoline—inside the vehicle.
- Three Salvadoran nationals were arrested and charged with third-degree criminal possession of a weapon.
- Romero-Martinez, the driver, was also issued multiple traffic summonses.
- All three were arraigned Wednesday and released without bail due to New York's bail reform laws.
- Prosecutors revealed that the three were planning to torch the car of someone they had a personal dispute with.
- Police determined the incident was non-terrorism related.
Sources
Submitted URL
March 9, 2026
MEDIUM
HAYI Pro-Iranian Hybrid Attack Campaign in Europe
Multiple European locations – Netherlands, Belgium, France, United Kingdom
0 Killed
0 Injured
Multiple methods (Incendiary Device, IED, Explosive Device)
HAYI (Harakat Ashab al-Yamin al-Islamia) – suspected Iranian state-coordinated hybrid operation
Under Investigation
Suspect
Multiple suspects arrested across Europe; investigation ongoing into Iranian state coordination
Source Type
Media
Threat Type
hybrid
Target Type
religious
Intent
symbolic
Outcome
completed
Confidence
0.75
Notes
- A pro-Iranian group called HAYI (Harakat Ashab al-Yamin al-Islamia) claimed responsibility for attacks on Jewish communities and American interests in Europe starting March 9, 2026.
- Incidents include an arson attack on Jewish community-run ambulances in the UK, an explosive device detonated at a synagogue in Belgium, and a foiled attack on a Bank of America office in France.
- The International Centre for Counter-Terrorism found no references to HAYI prior to March 9, 2026, suggesting the group may be a facade for Iranian state operations.
- Counterterrorism experts compare the pattern to Russia's hybrid operations, where individuals are recruited online to carry out sabotage attacks for small amounts of money.
- In the Netherlands, HAYI claimed an explosion outside a Rotterdam synagogue and an attack on a Jewish school in Amsterdam.
- Dutch Justice Minister David van Weel said suspects were most likely recruited and authorities are investigating possible Iranian involvement.
- Belgium's terror threat level remains at 'serious' with heightened vigilance for Israeli, Jewish, American and Iranian interests.
- A separate attack near the Israeli consulate in Istanbul was connected to ISIS, with 198 ISIS-linked suspects detained nationwide.
Sources
Submitted URL
March 9, 2026
HIGH
Barksdale Air Force Base Unauthorized Drone Incursions
Barksdale Air Force Base, Louisiana
0 Killed
0 Injured
Unmanned Aerial Systems (Drones)
Unknown; under investigation
Under Investigation
Suspect
Unknown
Source Type
Government + Media
Threat Type
unknown
Target Type
government
Intent
unknown
Outcome
completed
Confidence
0.85
Notes
- Barksdale Air Force Base detected multiple unauthorized drones operating in airspace during the week of March 9th, 2026.
- Between March 9-15, 2026, Security Forces observed multiple waves of 12-15 drones operating over sensitive areas including the flight line.
- Drones displayed non-commercial signal characteristics, long-range control links and resistance to jamming.
- The drones appeared to be custom built and required advanced knowledge of signal operations.
- Lights on the drones suggested operators may be testing security responses at the base.
- Drone flights lasted around four hours each day with varied routes and deliberate maneuvering within restricted airspace.
- Barksdale is home to long-range B-52 bombers and serves a key role in overseeing the Air Force's nuclear command and control operations.
- Analysts stated with high confidence they expected unauthorized drones to continue to operate in and around the base in the immediate future.
Sources
Submitted URL
March 8, 2026
HIGH
US Embassy Oslo Improvised Explosive Device Attack
Oslo, Norway – US Embassy, Morgedalsvegen Street, Ullern district
0 Killed
0 Injured
IED
Unknown; under investigation – suspects are Norwegian citizens with links to Iraq; possible foreign state actor involvement being examined
Confirmed
Suspect
Three brothers, all in their 20s, Norwegian citizens with links to Iraq – arrested
Source Type
Media
Threat Type
terrorism
Target Type
government
Intent
symbolic
Outcome
completed
Confidence
0.88
Notes
- The blast was caused by an improvised device placed at the building's entrance, causing minor damage and no injuries.
- Three brothers, all in their 20s and Norwegian citizens with links to Iraq, were arrested on Wednesday in connection with the explosion.
- The suspects are charged with a 'terror bombing' and were not previously known to police.
- Authorities are investigating several theories including whether a foreign state actor was involved.
- A now-deleted video featuring Iran's former supreme leader Ayatollah Ali Khamenei was published on Google Maps around the time of the incident.
- The explosion occurred at approximately 02:00 local time on Sunday at the embassy's consular section.
- Photos showed shattered glass, cracks in a glass door, and dark marks on a tiled floor following the incident.
- Norwegian Foreign Minister Espen Barth Eide described the incident as 'unacceptable' and stressed the importance of diplomatic mission security.
Sources
Submitted URL
March 8, 2026
HIGH
Kansas City International Airport Bomb Threat Evacuation
Kansas City, Missouri – Kansas City International Airport (KCI)
0 Killed
0 Injured
Bomb Threat
Unknown; under investigation
Thwarted
Suspect
Unknown
Source Type
Media
Threat Type
unknown
Target Type
infrastructure
Intent
unknown
Outcome
thwarted
Confidence
0.8
Notes
- On the morning of Sunday, March 8, the Kansas City Aviation Department received a call about a potential device inside the Kansas City International Airport, as well as in the parking garage.
- Airport police and other law enforcement, including the FBI, worked quickly to evacuate travelers from the terminal and held inbound flights on the taxiway away from the gates during the event.
- Law enforcement determined there was no credible threat to the airport or those in the terminal.
- During a sweep of the airport's garage, a vehicle on the top floor was identified by K9 units as suspicious; KCPD Bomb and Arson were called in to investigate.
- Bomb and Arson ultimately determined that there was no threat inside the garage.
- The terminals' evacuation lasted around two hours, and the garage was kept closed for an additional three hours.
- FBI Director Kash Patel stated that the threat was not credible and that threats like this are a federal crime subject to full investigation.
- In total, there were 169 flight delays and two cancellations at Kansas City International Airport on March 8.
Sources
Submitted URL
March 7, 2026
CRITICAL
Gracie Mansion ISIS-Inspired IED Attack Attempt
New York, NY – Gracie Mansion, Upper East Side
0 Killed
0 Injured
IED
ISIS-inspired
Confirmed
Suspect
Emir Balat, 18, of Langhorne, Pennsylvania – arrested; Ibrahim Kayumi, 19, of Newtown, Pennsylvania – arrested
Source Type
Government
Threat Type
terrorism
Target Type
crowd
Intent
mass_casualty
Outcome
failed
Confidence
0.95
Notes
- On March 7, 2026, Emir Balat ignited and threw an explosive device toward protesters gathered outside Gracie Mansion, the official residence of the Mayor of New York City.
- Balat received a second explosive device from Ibrahim Kayumi and dropped it near NYPD officers before being tackled and arrested.
- Both defendants stated their allegiance to ISIS after arrest; Balat wrote a pledge of allegiance to the Islamic State and used the ISIS slogan 'Die in your rage.'
- When asked if he was trying to replicate the Boston Marathon bombing, Balat responded: 'No, even bigger. It was only three deaths.'
- The explosive devices were approximately mason jar-sized, contained TATP (a highly volatile explosive known as 'Mother of Satan'), and had nuts and bolts attached as shrapnel.
- Law enforcement recovered from Balat's vehicle: hobby fuse, an empty metal can matching the device components, and a notebook with notes on TATP and chemical ingredients.
- Charges include attempted material support to a foreign terrorist organization, use of a weapon of mass destruction, and transportation of explosive materials.
Sources
Submitted URL
March 6, 2026
MEDIUM
Southwest Flight 2094 Emergency Diversion Security Incident
Atlanta, Georgia – Hartsfield-Jackson Atlanta International Airport
0 Killed
0 Injured
Suspicious Behavior / Perceived Threat
Unknown; under investigation
Under Investigation
Suspect
Unknown male passenger; interviewed and released without charges
Source Type
Media
Threat Type
unknown
Target Type
commercial
Intent
unknown
Outcome
thwarted
Confidence
0.75
Notes
- Southwest Airlines Flight 2094 diverted from Nashville to Fort Lauderdale route and made emergency landing in Atlanta after 9 p.m. on March 6, 2026.
- SWAT teams and tactical units wearing 'Atlanta Police' vests boarded the aircraft and removed a passenger at gunpoint.
- Passengers were ordered to put their heads down and hands up during the law enforcement response.
- The incident was triggered by a misunderstanding of a passenger's behavior according to Southwest Airlines.
- Witnesses reported the passenger appeared agitated when flight crews stowed his large bag in overhead bins rather than under the seat.
- Fellow passengers reportedly saw the individual texting something that appeared to resemble a threat.
- The FBI's Atlanta office and Atlanta Police Department investigated and interviewed the individual but found no credible threat.
- No charges were filed against the detained passenger.
Sources
Submitted URL
March 3, 2026
MEDIUM
Iranian Drone Strike Near U.S. Consulate in Dubai
Dubai, United Arab Emirates – near U.S. Consulate
0 Killed
0 Injured
Drone Strike
Iran
Confirmed
Suspect
Iranian state forces (implied state-sponsored attack)
Source Type
Media
Threat Type
terrorism
Target Type
government
Intent
symbolic
Outcome
completed
Confidence
0.65
Notes
- A suspected Iranian drone strike near the U.S. Consulate in Dubai sparked a raging fire Tuesday night.
- Footage of the explosion shows the building light up in an orange glow before erupting in a fireball.
- The Dubai Media Office confirmed that a fire resulting from a drone-related incident near the U.S. consulate had been successfully contained.
- Emergency teams responded immediately and no injuries have been reported.
- The strike comes after an attack on the U.S. Embassy in the Saudi capital of Riyadh the previous night with no reported injuries.
- The attacks are reportedly in response to U.S. and Israel carrying out a joint strike on Iran over the weekend which reportedly left Supreme Leader Ayatollah Ali Khamenei dead.
- President Donald Trump has suggested the attacks could last for weeks or longer.
Sources
Submitted URL
This platform is being developed to improve detection of emerging threat patterns and support better decision-making across government, academic, and security stakeholders.
Disclaimer
This platform is based on open-source reporting and should be treated as OSINT. Facts, motivations, affiliations, and legal conclusions may change as investigations proceed. Unless explicitly confirmed by official authorities, all activities, attributions, and linkages should be considered under investigation.