Maintained by the Council on Foreign Relations’ (CFR) Digital and Cyberspace Policy program, the Cyber Operations Tracker functions as a “database of the publicly known state-sponsored incidents that have occurred since 2005.” The site offers a search function, timeline, glossary, and condensed “takeaways,” and allows individuals to submit an incident not listed in the database already. The tracker focuses on state-sponsored incidents in order to identify when actors affiliated with a nation-state “conduct cyber operations in pursuit of their foreign policy interests,” as these incidents typically have the most “accurate and comprehensive” data and reporting. The data is open source, collected from other repositories of cyber incidents, like Kaspersky Lab’s Targeted Cyberattacks Logbook, and then supported by information disclosed by the media and private sector sources. The Cyber Operations Tracker is updated quarterly and changes are made public through the Net Politics blog.
