# Tradecraft The professional skills, procedures, and operational practices of intelligence work. The word is a meta-term, naming a domain of practice rather than a single technique. It encompasses agent handling, surveillance and counter-surveillance, dead drops and brush passes, source recruitment and validation, document forgery and cover construction, communications security, operational security (OPSEC), increasingly cyber operations and digital deception, and — at the upper end — the integration of all the above into coherent campaigns. The English-language vocabulary entered general usage in the early Cold War and now functions as the standard term across services, generations, and types of clandestine operation. ## What gets called tradecraft The major categories, with characteristic techniques inside each: - **HUMINT tradecraft.** Human-intelligence operations: spotting, assessing, developing, recruiting (the SADR cycle); handling and case-officer protocols; agent communications including dead drops, brush passes, signal sites, and clandestine meetings; agent validation and counter-deception; exfiltration of compromised assets. - **SIGINT tradecraft.** Signals-intelligence operations: collection-platform deployment; cryptanalysis; traffic analysis; cover-and-deception masking of the collection footprint. - **Cyber tradecraft.** Network operations: target-development reconnaissance; initial access (spear-phishing, watering-hole, supply-chain); persistence and lateral movement; exfiltration channels; attribution-resistance (server hopping, cryptocurrency, false-flag implants). - **Cover and deception tradecraft.** Identity construction (legend-building); commercial cover (front companies); diplomatic cover (embassy-based officers); non-official cover (NOCs); operational cover stories. - **Financial tradecraft.** Funds movement that resists tracing: shell companies, layered banking, cryptocurrency mixers, art and real estate as value-transfer vehicles, hawala networks. - **Information-operations tradecraft.** The production and placement of content: persona accounts, media laundering through credentialed outlets, third-party amplification, narrative coordination. The boundaries between categories have always been porous and have become more so since the late 2000s. Modern operations are routinely *integrated*: a HUMINT recruitment may proceed via a cyber-enabled spotting operation, with cover-and-deception infrastructure built using commercial-tradecraft techniques and exfiltration of the recruited asset's product through cyber channels. ## Why the term carries a doctrinal-tradition signal A subtle but analytically important feature of *tradecraft* in contemporary usage is that it almost always travels with an implicit national modifier. *Russian tradecraft* invokes the KGB → SVR/GRU lineage with its characteristic emphasis on long-cultivation HUMINT, kompromat development, and active-measures integration. *American tradecraft* invokes the OSS → CIA lineage with its characteristic emphasis on technical collection, paramilitary capability, and (post-9/11) drone-enabled targeting. *British tradecraft* invokes the SIS / MI6 lineage with its characteristic emphasis on diplomatic-cover HUMINT and academic-network exploitation. *Israeli tradecraft* invokes the Mossad lineage with its characteristic emphasis on small-team direct-action and targeted operations. When a journalist or scholar writes that "the operation bore the hallmarks of Russian tradecraft," the load-bearing signal is doctrinal-lineage attribution: the operation displays the patterns the KGB → SVR/GRU service produces. This is a meaningful claim — services train operators who reproduce house style — but it is also fallible (sophisticated services can imitate other services' styles to confuse attribution). ## "Old" vs. "new" tradecraft A working internal distinction: - **Old tradecraft** — dead drops, brush passes, microdots, one-time pads, signal sites in physical urban geography; the John le Carré era set - **New tradecraft** — zero-day exploits, cryptocurrency laundering, social-media impersonation, covertly-funded creator pipelines, deepfake content production The two are not mutually exclusive — modern operations routinely use both — but the analytical apparatus, training, and operator profile of services has shifted toward the new tradecraft over the past two decades. The 2016 GRU operation against the DNC and the IRA social-media operation are the canonical "new tradecraft" exemplars in the Russia record; the 1980s-era cultivation of [[Donald Trump]] documented by former KGB officer [[Yuri Shvets]] is the canonical "old tradecraft" exemplar. ## The literary popularization Much of what English-speaking publics "know" about tradecraft is filtered through John le Carré's George Smiley novels (*Tinker Tailor Soldier Spy*, *Smiley's People*, *The Honourable Schoolboy*). The le Carré vocabulary — "lamplighters" (surveillance teams), "babysitters" (bodyguards), "scalphunters" (kidnap-and-interrogate teams), "the Circus" (SIS HQ), "moles" (deep-penetration agents), "honey traps," "cousins" (CIA) — is partly accurate British SIS in-service slang, partly invented by le Carré, and partly the way operators on both sides of the Atlantic have *come to talk* because the novels supplied the vocabulary. The methodological caveat for KB users: literary tradecraft vocabulary should be checked against operational-history sources (Andrew, Mitrokhin, Aldrich, Weiner) before being treated as documented practice. ## Why this entry is in the right-wing knowledge base The KB tracks Russian influence operations against the US right-wing ecosystem at the operational level. Reading those operations requires the *tradecraft* vocabulary as connective tissue. Specific Terminology entries (provokatsiya, plausible deniability, maskirovka, dezinformatsiya, reflexive control) cover individual techniques; *tradecraft* as a meta-term names the surrounding professional domain inside which those techniques compose into coherent operations. ## Distinct from related terms - *[[Active Measures]]* — Russian doctrinal-operational category for influence operations; tradecraft is the broader skill domain inside which active-measures techniques live - *[[Plausible Deniability]]* — an organizing principle that shapes tradecraft choices, not a tradecraft technique itself - *[[Maskirovka]]* — Russian military-operational deception; one tradecraft sub-domain - *[[Reflexive Control]]* — doctrinal-theoretical layer that informs tradecraft design - *Spycraft* — informal synonym, more colloquial register; some practitioners distinguish *spycraft* (the popular-imagination version) from *tradecraft* (the in-service term) ## See Also - [[Plausible Deniability]] — organizing principle - [[Maskirovka]] — military-deception sub-domain - [[Dezinformatsiya]] — false-claim sub-domain - [[Reflexive Control]] — doctrinal-theoretical layer - [[Provokatsiya]] — target-inducement sub-domain - [[Active Measures]] — Russian operational umbrella - [[Information Warfare]] — Subject hub - [[Russia]] — country-level dossier