Grayline Intelligence identifies, classifies, and analyzes threats to U.S. interests arising from geopolitical escalation and gray zone activity. Developed by Spectra Intel Group (SIG), the platform transforms open-source reporting into structured, analyzable threat intelligence through systematic OSINT monitoring, AI-assisted extraction, and analyst-reviewed classification.
This dataset currently emphasizes incidents linked to the second-order effects of the U.S.–Iran conflict and related foreign-directed or foreign-inspired threat activity.
Foreign escalation. U.S. exposure. Structured for analysis.
This dataset captures observed incidents, disruptions, and credible threat activity affecting U.S. interests, structured for longitudinal analysis across geography, attribution, and method.
Barksdale Air Force Base Unauthorized Drone Incursions
- Barksdale Air Force Base detected multiple unauthorized drones operating in airspace during the week of March 9th, 2026.
- Between March 9-15, 2026, Security Forces observed multiple waves of 12-15 drones operating over sensitive areas including the flight line.
- Drones displayed non-commercial signal characteristics, long-range control links and resistance to jamming.
- The drones appeared to be custom built and required advanced knowledge of signal operations.
- Lights on the drones suggested operators may be testing security responses at the base.
- Drone flights lasted around four hours each day with varied routes and deliberate maneuvering within restricted airspace.
- Barksdale is home to long-range B-52 bombers and serves a key role in overseeing the Air Force's nuclear command and control operations.
- Analysts stated with high confidence they expected unauthorized drones to continue to operate in and around the base in the immediate future.
US Embassy Oslo Improvised Explosive Device Attack
- The blast was caused by an improvised device placed at the building's entrance, causing minor damage and no injuries.
- Three brothers, all in their 20s and Norwegian citizens with links to Iraq, were arrested on Wednesday in connection with the explosion.
- The suspects are charged with a 'terror bombing' and were not previously known to police.
- Authorities are investigating several theories including whether a foreign state actor was involved.
- A now-deleted video featuring Iran's former supreme leader Ayatollah Ali Khamenei was published on Google Maps around the time of the incident.
- The explosion occurred at approximately 02:00 local time on Sunday at the embassy's consular section.
- Photos showed shattered glass, cracks in a glass door, and dark marks on a tiled floor following the incident.
- Norwegian Foreign Minister Espen Barth Eide described the incident as 'unacceptable' and stressed the importance of diplomatic mission security.
Kansas City International Airport Bomb Threat Evacuation
- On the morning of Sunday, March 8, the Kansas City Aviation Department received a call about a potential device inside the Kansas City International Airport, as well as in the parking garage.
- Airport police and other law enforcement, including the FBI, worked quickly to evacuate travelers from the terminal and held inbound flights on the taxiway away from the gates during the event.
- Law enforcement determined there was no credible threat to the airport or those in the terminal.
- During a sweep of the airport's garage, a vehicle on the top floor was identified by K9 units as suspicious; KCPD Bomb and Arson were called in to investigate.
- Bomb and Arson ultimately determined that there was no threat inside the garage.
- The terminals' evacuation lasted around two hours, and the garage was kept closed for an additional three hours.
- FBI Director Kash Patel stated that the threat was not credible and that threats like this are a federal crime subject to full investigation.
- In total, there were 169 flight delays and two cancellations at Kansas City International Airport on March 8.
Gracie Mansion ISIS-Inspired IED Attack Attempt
- On March 7, 2026, Emir Balat ignited and threw an explosive device toward protesters gathered outside Gracie Mansion, the official residence of the Mayor of New York City.
- Balat received a second explosive device from Ibrahim Kayumi and dropped it near NYPD officers before being tackled and arrested.
- Both defendants stated their allegiance to ISIS after arrest; Balat wrote a pledge of allegiance to the Islamic State and used the ISIS slogan 'Die in your rage.'
- When asked if he was trying to replicate the Boston Marathon bombing, Balat responded: 'No, even bigger. It was only three deaths.'
- The explosive devices were approximately mason jar-sized, contained TATP (a highly volatile explosive known as 'Mother of Satan'), and had nuts and bolts attached as shrapnel.
- Law enforcement recovered from Balat's vehicle: hobby fuse, an empty metal can matching the device components, and a notebook with notes on TATP and chemical ingredients.
- Charges include attempted material support to a foreign terrorist organization, use of a weapon of mass destruction, and transportation of explosive materials.
Southwest Flight 2094 Emergency Diversion Security Incident
- Southwest Airlines Flight 2094 diverted from Nashville to Fort Lauderdale route and made emergency landing in Atlanta after 9 p.m. on March 6, 2026.
- SWAT teams and tactical units wearing 'Atlanta Police' vests boarded the aircraft and removed a passenger at gunpoint.
- Passengers were ordered to put their heads down and hands up during the law enforcement response.
- The incident was triggered by a misunderstanding of a passenger's behavior according to Southwest Airlines.
- Witnesses reported the passenger appeared agitated when flight crews stowed his large bag in overhead bins rather than under the seat.
- Fellow passengers reportedly saw the individual texting something that appeared to resemble a threat.
- The FBI's Atlanta office and Atlanta Police Department investigated and interviewed the individual but found no credible threat.
- No charges were filed against the detained passenger.
Iranian Drone Strike Near U.S. Consulate in Dubai
- A suspected Iranian drone strike near the U.S. Consulate in Dubai sparked a raging fire Tuesday night.
- Footage of the explosion shows the building light up in an orange glow before erupting in a fireball.
- The Dubai Media Office confirmed that a fire resulting from a drone-related incident near the U.S. consulate had been successfully contained.
- Emergency teams responded immediately and no injuries have been reported.
- The strike comes after an attack on the U.S. Embassy in the Saudi capital of Riyadh the previous night with no reported injuries.
- The attacks are reportedly in response to U.S. and Israel carrying out a joint strike on Iran over the weekend which reportedly left Supreme Leader Ayatollah Ali Khamenei dead.
- President Donald Trump has suggested the attacks could last for weeks or longer.
Austin Sixth Street Mass Shooting
- Shooting occurred early Sunday morning around 2 a.m. as bars were winding down along Austin's Sixth Street entertainment district.
- Three victims killed: Ryder Harrington (19), Savitha Shan (21), and Jorge Pederson (30).
- More than a dozen others were injured, with two remaining in critical condition.
- Suspect Ndiaga Diagne was wearing a shirt with an Iranian flag design underneath a hoodie printed with 'Property of Allah.'
- Diagne initially shot from a large SUV outside Buford's Backyard Beer Garden, then parked and continued shooting with a rifle on foot.
- Authorities reached the suspect in less than a minute and fatally shot him at an intersection.
- Diagne was originally from Senegal, entered the US in 2000 on a tourist visa, and naturalized in 2013.
- FBI investigating whether attack was inspired by recent US and Israeli strikes on Iran; motive not yet confirmed.
Protesters Storm US Consulate in Karachi, Pakistan
- 22 people were killed as protesters attempted to storm the US Consulate in Karachi, Pakistan.
- The incident appears connected to Iran-related tensions based on headline context.
- The article content was not fully accessible, limiting detailed information extraction.
- The attack targeted a US diplomatic facility, indicating anti-American sentiment.
Utah Islamic Center Imam Shooting Attack
- A suspect was arrested in connection with a shooting attack targeting the imam of Utah Islamic Center.
- The targeted imam, Shuaib Din, expressed relief that the episode occurring during Ramadan is over.
- The attack involved a gunman firing multiple shots at the prominent Utah Muslim leader.
- Security was heightened at Utah mosques following the shooting incident.
- The imam stated 'God is the ultimate protector' in response to the attack.
Huddersfield Contract Killing Plot – Norwegian Teen Arrested
- Johannes Natland, 19, was arrested on 19 March 2025 at the Briar Court Hotel in Huddersfield with two guns and 12 rounds of ammunition.
- Natland allegedly flew from Norway to Manchester Airport to carry out a contract killing for a Swedish organised crime group with links to Iran known as the Foxtrot Network.
- The offered fee for killing an unknown person was €25,000.
- Natland was initially refused entry at Manchester Airport on 17 March because he was travelling on an emergency passport with just £40 in cash, no hotel booking and no return flight, but a UK Border Force officer let him enter until the next flight back to Stavanger three days later.
- Under instructions from a Signal user with the username '1', the defendant travelled to Huddersfield and collected cash hidden near a footpath tunnel and two guns hidden in woodland.
- Natland has pleaded guilty to possession of firearms and ammunition but denies conspiracy to murder.
- The defendant claims he never intended to carry out the murder and planned to shoot himself in the foot instead.
- Firearms officers arrested Natland at 05:15 on 19 March 2025 at the hotel.
This platform is being developed to improve detection of emerging threat patterns and support better decision-making across government, academic, and security stakeholders.
This platform is based on open-source reporting and should be treated as OSINT. Facts, motivations, affiliations, and legal conclusions may change as investigations proceed. Unless explicitly confirmed by official authorities, all activities, attributions, and linkages should be considered under investigation.