The Architecture of Russian State Security and Intelligence

Executive Overview

This comprehensive assessment examines the architecture, capabilities, and strategic deployment of the Russian Federation’s intelligence and security apparatus. The research cutoff date for this analysis is July 20, 2026\. The central question guiding this inquiry is how the Russian presidency employs its vast array of civilian foreign intelligence, domestic security, military intelligence, protective services, signals capabilities, covert action, information operations, counterintelligence, and law enforcement organs to protect the regime and advance Russian state interests. The analysis reveals a highly centralized system in which the executive branch wields ultimate authority over multiple, deliberately overlapping security agencies1. This architecture is heavily staffed by the siloviki—individuals drawn from the military and security services—who dominate strategic decision-making. The system serves a dual imperative: projecting power aggressively abroad to challenge perceived Western hegemony and maintaining strict domestic control to ensure the survival of the ruling regime2. Following the 2022 invasion of Ukraine and subsequent geopolitical isolation, these agencies have adapted to an entrenched wartime footing4. This shift has catalyzed the expansion of draconian legal frameworks, including widened definitions of treason and intensified domestic censorship5. Externally, the apparatus has pivoted toward a shadow war of kinetic sabotage across Europe, increasingly relying on expendable criminal proxies to maintain plausible deniability while disrupting Western support for Ukraine7. To mitigate the exposure of compromised legacy operations, the Russian military intelligence apparatus has reportedly established new, highly compartmentalized structures9. Despite frequent operational failures driven by systemic corruption, poor tradecraft, and intense politicization, the Russian intelligence community remains a persistent, well-resourced, and highly adaptive threat.

Mapping the System: Presidential and Agency Organization

The Russian security state is commanded by the President, who directly subordinates the primary intelligence and security agencies, bypassing traditional ministerial oversight1. The President of the Russian Federation wields ultimate executive authority, utilizing the Presidential Administration to manage the day-to-day coordination of state policy, domestic political management, and bureaucratic oversight. The Security Council, a consultative body chaired by the President, serves as the primary forum for formulating national security strategy. The directors of the foremost intelligence agencies hold permanent ex officio seats on the Security Council, embedding them directly into the highest echelons of strategic decision-making and ensuring the President receives unfiltered, albeit sometimes politicized, intelligence1. The Federal Security Service (FSB), originating from the Soviet KGB's domestic directorates, serves as Russia’s primary domestic security and counterintelligence agency. Led by Director Alexander Bortnikov, the FSB’s mandate extends far beyond domestic borders11. Through its Fifth Service (Service of Operational Information and International Relations), the FSB conducts extensive foreign intelligence operations, particularly within the former Soviet states12. The FSB commands the Border Guard Service, controls the national communications intercept infrastructure following the absorption of the Federal Agency of Government Communication and Information, and leads domestic counterterrorism efforts14. During wartime, the FSB is heavily involved in administering occupation security and counterintelligence regimes in contested territories12. The Foreign Intelligence Service (SVR), the direct successor to the KGB's First Chief Directorate, is the premier civilian foreign intelligence agency. Directed by Sergey Naryshkin, the SVR is responsible for traditional espionage, human intelligence gathering, and the deployment of "illegal" residents living under deep cover abroad17. The SVR is statutorily authorized to conduct covert political influence operations and manages sophisticated cyber espionage campaigns aimed at global technological, governmental, and diplomatic targets18. The Main Directorate of the General Staff of the Armed Forces of the Russian Federation is the country's primary military intelligence organization. While its official designation is the Main Directorate, the agency is universally referred to by its Soviet-era acronym, the GRU (Main Intelligence Directorate). This terminology remains ubiquitous in media reporting, foreign intelligence assessments, and everyday parlance due to historical inertia and the agency's formidable international reputation1. Directed by Admiral Igor Kostyukov, the Main Directorate oversees battlefield reconnaissance, destructive cyber operations, and the Spetsnaz special forces20. The GRU is the Kremlin's primary instrument for kinetic covert action, sabotage, and assassinations abroad22. The Federal Protective Service (FSO), led by Director Dmitry Kochnev, is responsible for the physical security of the President, the Prime Minister, and other designated high-ranking officials24. Beyond personal protection, the FSO manages state residences, secures key government facilities, and protects critical infrastructure against physical and technical threats. Within the FSO sits the Presidential Security Service and the Special Communications and Information Service, which secures government telecommunications and protects against signals interception25. The National Guard (Rosgvardia) was established to consolidate internal security forces into a massive praetorian guard. Commanded by Viktor Zolotov, the President's former chief bodyguard, Rosgvardia functions as an internal army tasked with riot control, counterinsurgency, and regime protection26. Since the 2023 private military mutinies, Rosgvardia's role has expanded to include intelligence functions and the integration of heavy weaponry, including tank units, to defend the state against internal armed uprisings27. The Ministry of Internal Affairs (MVD), led by Vladimir Kolokoltsev, handles traditional civilian law enforcement, public order, traffic safety, and the policing of non-political crimes28. Despite retaining a massive personnel footprint, the MVD has faced severe staffing shortages in recent years due to low pay, heavy workloads, and the pressures of wartime mobilization30. The Investigative Committee, headed by Alexander Bastrykin, acts as the premier federal investigating authority for major crimes, corruption, and politically sensitive cases31. Operating similarly to a federal bureau of investigation, it prepares high-profile cases—often targeting political dissidents, alleged extremists, and foreign actors—for prosecution, functioning as a vital legal instrument for domestic repression32. The Main Directorate of Special Programs (GUSP) is a highly secretive federal executive agency responsible for ensuring the continuity of government during wartime or national emergencies34. Led by Alexander Linets, GUSP manages mobilization preparation, constructs and maintains fortified bunkers and subterranean command networks, and operates the Special Objects Service to secure the survival of the state apparatus34. Auxiliary and proxy actors significantly augment the formal statutory agencies. Military commands and service-level intelligence operate at the tactical and operational levels, providing immediate battlefield reconnaissance37. Diplomatic missions and military attachés provide official cover for SVR, GRU, and FSB officers operating abroad4. State media and ostensibly private influence organizations execute information operations and disseminate disinformation, functioning as extensions of state policy while remaining distinct from formal intelligence services8. Furthermore, Russia heavily leverages private military companies, paramilitary groups, and cybercriminal syndicates as proxy forces. These actors offer the state plausible deniability while conducting sabotage, cyberattacks, and kinetic operations across Europe and the globe7.

Agency Comparison Table

Capability Assessment

The Russian intelligence apparatus deploys a comprehensive spectrum of capabilities to achieve its strategic objectives, blending traditional espionage with advanced technical and asymmetric warfare methods. Human intelligence (HUMINT) and illegal-resident networks remain a cornerstone of Russian espionage. The SVR and the Main Directorate deploy intelligence officers under official diplomatic cover, though mass expulsions by Western nations have severely degraded this capability8. To compensate, Russia relies heavily on "illegals"—intelligence officers operating under deep, non-official cover with fabricated identities—and the co-optation of foreign nationals, academics, and business figures to penetrate foreign institutions16. Military intelligence is the primary domain of the Main Directorate, which coordinates battlefield reconnaissance, operational planning, and the targeting of adversary military assets20. This is supported by technical intelligence, space, and imagery intelligence (IMINT), managed through the GRU's Space Intelligence Directorate, which utilizes satellite assets to map foreign military deployments and critical infrastructure20. Signals intelligence (SIGINT) is bifurcated between domestic and foreign operations. The FSB controls the domestic telecommunications intercept architecture, heavily utilizing the System for Operative Investigative Activities to monitor internal communications9. Externally, the Main Directorate's Sixth Directorate operates tactical and strategic radio-technical intelligence equipment, including satellite intercept stations, to monitor foreign military and diplomatic communications9. Cyber espionage and disruptive cyber operations are conducted by multiple agencies, often leading to uncoordinated overlapping efforts. The SVR focuses on stealthy, long-term cyber espionage, prioritizing the theft of state secrets, intellectual property, and supply chain compromises to establish persistent network access19. Conversely, the Main Directorate specializes in disruptive and destructive cyber operations, utilizing wiper malware and denial-of-service attacks to paralyze adversary critical infrastructure, government services, and military command-and-control nodes40. Counterintelligence is monopolized by the FSB, which aggressively monitors foreign diplomatic personnel, investigates suspected espionage, and secures state secrets14. The FSB also polices the military and other intelligence agencies through its military counterintelligence directorates, actively hunting for treason and unauthorized disclosures4. Economic and energy intelligence is pursued by both the SVR and FSB to circumvent Western sanctions, acquire restricted dual-use technologies, and secure advantageous energy contracts critical to the Russian economy22. Covert action, sabotage, and special operations are the hallmark of the Main Directorate's kinetic arm. Utilizing specialized units and Spetsnaz forces, the GRU orchestrates targeted assassinations, physical sabotage of arms depots, and attacks on undersea cables7. Increasingly, these operations are outsourced to recruited criminal proxies to maximize disruption while obscuring direct state involvement7. Protective intelligence is the exclusive purview of the FSO, which conducts continuous threat assessments, technical surveillance countermeasures, and physical security planning to insulate the regime's leadership from both foreign and domestic threats25.

Strategic Priorities

The deployment of these capabilities is guided by a distinct set of strategic priorities reflecting the Kremlin's threat perceptions and geopolitical ambitions. Ukraine remains the overriding strategic priority, absorbing the vast majority of Russia's military and intelligence resources. The objective is the subjugation of the Ukrainian state, the destruction of its military capacity, and the prevention of its integration into Western alliances12. Operations against the North Atlantic Treaty Organization (NATO) and the European Union focus on fracturing political cohesion, disrupting the logistics of military aid to Ukraine, and deterring further expansion of the alliance through hybrid warfare and nuclear signaling7. The United States is viewed as the primary adversary; intelligence efforts against the U.S. prioritize penetrating defense and government networks, influencing domestic electoral politics, and monitoring nuclear command and strategic warning systems to maintain strategic parity22. In the Former Soviet states, the FSB and SVR work to maintain Russian hegemony, prevent "color revolutions," and ensure regional governments remain aligned with Moscow12. The Arctic is increasingly prioritized for its strategic military value and resource potential, necessitating robust intelligence coverage to secure shipping routes and early warning radar installations. In the Middle East and Africa, Russian intelligence supports allied regimes (such as in Syria), facilitates arms and resource extraction deals, and coordinates with nations like Iran to build alternative diplomatic and military frameworks resistant to Western pressure50. Operations regarding China are complex, balancing a strategic partnership against Western influence with extensive counterintelligence efforts to protect Russian military technology and territorial sovereignty in the Far East18. Domestically, regime stability is paramount. The internal security apparatus is optimized to preempt popular uprisings, dismantle political opposition, and ensure the absolute survival of the current leadership3. Defense-industrial and sanctions-related intelligence has grown critical under Defense Minister Andrei Belousov; the state aggressively tasks its foreign intelligence organs to bypass Western economic restrictions, acquire microelectronics for weapons manufacturing, and modernize domestic military production, particularly concerning unmanned aerial vehicles45.

Explanation of Active Measures

"Active measures" (aktivniye meropriyatiya) constitute a core component of Russian statecraft. Historically developed by the Cheka and refined by the KGB during the Cold War, active measures are covert or deceptive political warfare operations designed to influence the policies, public opinion, and stability of foreign adversaries4. They differ fundamentally from standard public diplomacy; while diplomacy seeks to persuade through official channels, active measures rely on subversion, deniability, and the exacerbation of existing societal fractures22. In modern practice, active measures encompass a broad spectrum of activities, including sophisticated disinformation campaigns, the clandestine funding of extremist political movements, economic coercion, the weaponization of migration, and cyber-enabled psychological operations22. The contemporary objective is rarely to convince foreign populations of a specific Russian ideology. Instead, the goal is to generate cynicism, erode public trust in democratic institutions, and paralyze Western political decision-making, thereby reducing the adversary's capacity to counter Russian foreign policy47. It is vital to distinguish these operations from routine state activities. Not all Russian diplomatic engagement, overt state media broadcasting, or legitimate economic competition constitutes covert intelligence activity. Active measures specifically involve the hidden, orchestrated involvement of the security and intelligence services operating deliberately below the threshold of armed conflict22.

Legal and Oversight Assessment

The Russian intelligence and security apparatus operates under a domestic legal framework that nominally outlines civic rights but systematically grants the state unchecked power to investigate, detain, and surveil in the name of national security. Relevant Legislation: Federal Security Service legislation (Federal Law No. 40-FZ) grants the FSB sweeping authority to conduct counterintelligence, anti-terrorism, and border security operations. It legally obliges private enterprises to assist the FSB and permits the secondment of active-duty intelligence officers into corporate and civilian structures44. Foreign Intelligence legislation (Federal Law No. 5-FZ) authorizes the SVR to conduct foreign espionage, penetrate international institutions, and execute active measures, providing statutory protection for the identities of its personnel18. The Operational-Search Activity law (Law No. 144-FZ) forms the backbone of domestic surveillance, authorizing test purchases, controlled deliveries, and the infiltration of groups by law enforcement and intelligence units. While it nominally requires judicial authorization for the interception of communications, the law contains broad exceptions allowing intelligence agencies to initiate wiretaps without a warrant if a delay could ostensibly jeopardize an operation15. Communications-surveillance authorities are further enforced through SORM (System for Operative Investigative Activities). Successive iterations, up to SORM-3, legally mandate that telecommunications operators install hardware at their own expense, granting the FSB direct, unmediated access to telephone and internet traffic15. Internet and data-localization rules, notably the 2016 Yarovaya amendments and the Sovereign Internet Law, compel internet service providers to store user communications data for up to six months, retain metadata for years, and install deep packet inspection equipment to allow the state to filter and censor internet traffic autonomously15. State-secrets law (Law No. 5485-1) establishes exceptionally broad criteria for classified information. Individuals granted access to state secrets face severe, legally enforced restrictions on their personal liberties, including bans on foreign travel that can extend for years after their access is terminated67. Counterterrorism and extremism legislation (Federal Law No. 35-FZ) utilizes purposefully vague definitions of terrorism and extremism, allowing the state to label political opposition groups, independent media, and civil society organizations as terrorist entities, thereby authorizing their asset forfeiture and the lengthy imprisonment of their members69. Following the 2022 invasion of Ukraine, the state enacted severe wartime censorship and treason provisions. Amendments to the Criminal Code (such as Article 207.3) criminalized the dissemination of "knowingly false information" regarding the armed forces, effectively outlawing independent journalism and anti-war dissent6. Furthermore, Article 275 governing treason was drastically expanded to include vague offenses such as "aiding another state" or "confidential cooperation with a foreign state," lowering the evidentiary threshold required to prosecute citizens for contacting foreign entities5. Evaluation of Oversight: Meaningful, independent oversight of the Russian intelligence apparatus does not exist. While formal oversight mechanisms are outlined in the constitution—including the legislature (the Federal Assembly), the procuracy, and the courts—these bodies are practically subordinate to the executive branch and act as instruments of state power1. The courts routinely approve surveillance warrants retrospectively and hand down convictions in politically motivated prosecutions with near-perfect conviction rates. The media and civil society, which serve as crucial oversight mechanisms in democratic systems, have been systematically dismantled through "foreign agent" designations and wartime censorship laws6. Practical independence is granted only by the President. Meaningful oversight occurs almost exclusively within the Presidential Administration, which monitors the agencies to ensure loyalty. The President deliberately cultivates overlapping jurisdictions to prevent any single internal-security department from amassing enough power to threaten the Kremlin, functioning as the ultimate arbiter of inter-agency disputes3.

Historical Timeline

The evolution of the Russian intelligence apparatus demonstrates a consistent reliance on centralized state security to maintain power.

• 1917–1954: Following the Bolshevik Revolution, the Cheka is established as the first secret police force, initiating a legacy of domestic terror and foreign espionage. The agency evolves through various iterations, including the NKVD and MGB, conducting mass purges while building formidable foreign intelligence networks. Concurrently, Soviet military intelligence operates in parallel.
• 1954–1991: The KGB is formed, centralizing domestic security, foreign espionage, and border control into a monolithic apparatus. Throughout the Cold War, the KGB heavily prioritizes active measures and ideological warfare, while the military GRU focuses on strategic warning and military espionage.
• 1991–1995: The Soviet Union collapses, prompting the breakup of the KGB. The monolithic agency is fragmented into separate entities to prevent it from threatening the new civilian government, resulting in the creation of the FSB (domestic), SVR (foreign), and FSO (protection). The military GRU remains largely untouched within the General Staff1.
• 1999–2009: Former FSB Director Vladimir Putin ascends to the presidency. He initiates a profound centralization of power, elevating the siloviki into top government and economic posts74. The brutal wars in Chechnya and the 2008 conflict in Georgia expose severe operational and military shortcomings, prompting extensive modernization and structural reforms within the armed forces and intelligence services70.
• 2014: Russia covertly annexes Crimea and foments an insurgency in the Donbas. The operation relies heavily on coordinated intelligence preparation by the FSB and GRU76.
• 2016–2018: Russian intelligence agencies execute aggressive cyber and election-interference controversies against the United States and European nations. In 2018, the GRU conducts a brazen chemical weapon assassination attempt in Salisbury, signaling a high tolerance for risk19.
• 2022: Russia launches a full-scale invasion of Ukraine. The invasion is preceded by catastrophic intelligence failures and false assumptions regarding Ukrainian resistance. The conflict precipitates a complete rupture with the West and domestic transition to a wartime economy10.
• 2023–2026: The brief 2023 Wagner PMC rebellion exposes vulnerabilities in regime security, leading to the rapid expansion of Rosgvardia's military capabilities27. Current wartime reforms focus on adapting to the expulsion of diplomats by building proxy sabotage networks in Europe, integrating unmanned systems into military doctrine under Defense Minister Andrei Belousov, and enacting increasingly draconian domestic censorship7.

Five Case Studies

1\. Intelligence Preparation for Crimea in 2014

Prior to the 2014 annexation of Crimea, Russian intelligence conducted extensive and highly successful battlefield preparation. The FSB’s Fifth Service laid the political groundwork through covert subversion, exploiting historical grievances and building clandestine networks among Russophile communities, local political figures, and Ukrainian security personnel76. Simultaneously, GRU Spetsnaz and reconnaissance elements mapped critical Ukrainian infrastructure and military vulnerabilities. When the operation commenced, the synchronized deployment of electronic warfare, cyber disruption, and deniable "little green men" (paramilitary forces without insignia) paralyzed the Ukrainian response. This operation demonstrated the seamless integration of human intelligence, technical surveillance, and irregular warfare, establishing a template for subsequent hybrid campaigns76.

2\. SVR Cyber Operation: "Midnight Blizzard" and JetBrains TeamCity

The SVR's cyber component, commonly tracked by cybersecurity firms as APT29 or Midnight Blizzard, focuses on high-level, stealthy cyber espionage. Famous for the 2020 SolarWinds supply chain breach, the group continued its sophisticated operations in 2023 and 2024 by exploiting vulnerabilities in JetBrains TeamCity server software19. By targeting software development environments, the SVR sought to manipulate source code and compromise software supply chains, allowing them to pivot undetected into the highly secure networks of Western government, defense, and biomedical entities. The United States and its international allies formally attributed these operations to the SVR, identifying their use of customized malware, abuse of cloud identities, and anonymized proxy infrastructure19. The Russian government consistently denied involvement, rejecting Western cyber attributions as baseless political fabrications.

3\. GRU Cyber Operation: "WhisperGate"

In early 2022, as part of the operational preparation for the invasion of Ukraine, cyber actors affiliated with GRU Unit 29155 (tracked as Cadet Blizzard) launched the "WhisperGate" malware campaign41. While engineered to resemble financial ransomware, WhisperGate was actually a destructive cyberweapon designed to permanently wipe data across dozens of Ukrainian government and critical infrastructure networks43. The operation aimed to sow public panic, degrade Ukrainian administrative functions, and blind government responses ahead of kinetic military strikes. In August 2024, the United States indicted five active-duty GRU officers and one civilian co-conspirator for their roles in the conspiracy43. Russia denied the accusations, framing them as part of a coordinated Western anti-Russian information campaign.

4\. Assassination Attempt: The Skripal Poisoning

On March 4, 2018, former Russian military intelligence officer and British double agent Sergei Skripal, along with his daughter Yulia, were poisoned in Salisbury, United Kingdom, using a military-grade Novichok nerve agent applied to their front door handle23. Western intelligence and independent investigative organizations, notably Bellingcat, attributed the attack directly to GRU Unit 29155\. Investigators documented the true identities of the operatives as highly decorated GRU officers Anatoliy Chepiga and Alexander Mishkin, acting under the logistical coordination of Major General Andrey Averyanov78. The operation caused international outrage and mass diplomatic expulsions. Russia vehemently denied the allegations; the state presented the two operatives on national television, where they claimed to be innocent sports nutrition salesmen visiting Salisbury merely to admire its cathedral spire83.

5\. Intelligence Assumptions and Failures Preceding the 2022 Invasion

In the years leading up to the 2022 full-scale invasion of Ukraine, the FSB’s Fifth Service, directed by Sergey Beseda, was tasked with providing the Kremlin with strategic intelligence on Ukrainian political and military resilience12. The resulting intelligence assessments were fundamentally flawed, predicting that the Ukrainian government would swiftly collapse, the military would capitulate, and the population would largely welcome Russian forces12. This catastrophic analytical failure was driven by systemic corruption—funds allocated to build robust pro-Russian networks in Ukraine were reportedly embezzled—and intense politicization, wherein intelligence officers tailored their reports to validate the President's preconceived ideological beliefs rather than presenting objective reality. Consequently, the Russian military advanced into a prepared and hostile defense. Beseda was reportedly sidelined and ultimately replaced as the reality of the intelligence failure became apparent13.

Service-Rivalry Analysis

The concept of the siloviki (men of force) describes the cohort of current and former security, military, and intelligence personnel who dominate the Russian state bureaucracy and economy. While the term is analytically useful for describing the militarized, anti-Western nature of Russian governance, treating the siloviki as a monolithic, unified bloc is overly broad and inaccurate. The system is fundamentally defined by deep institutional competition, overlapping jurisdiction, and competing patronage networks3. The President deliberately fosters these rivalries to ensure no single agency can amass enough power to challenge his authority. For example, the FSB and the SVR frequently clash over foreign intelligence jurisdiction; the FSB's aggressive expansion into foreign operations via its Fifth Service directly encroached upon the SVR and GRU's traditional domains12. Similarly, the creation of Rosgvardia was an explicit move to strip the MVD of its heavily armed units, creating a praetorian guard personally loyal to the President to check the power of both the regular military and the FSB26. These rivalries lead to overlapping jurisdictions, where multiple services pursue the same targets to curry favor with the President. While this "divide and rule" strategy effectively protects the regime from internal coups by ensuring the services constantly monitor one another, it frequently results in uncoordinated foreign operations, inter-agency hostility, and the dangerous hoarding of critical intelligence54.

Strengths, Weaknesses, Politicization Risks, and Intelligence Failures

The Russian intelligence apparatus possesses formidable strengths, chief among them its adaptability and high risk tolerance. Following the mass expulsion of official-cover diplomats from Europe in 2022, the services rapidly adapted by reconstituting human intelligence networks through the recruitment of low-level criminal proxies, foreign students, and ideologically motivated actors via platforms like Telegram8. Furthermore, Moscow demonstrates a willingness to conduct aggressive operations—including lethal assassinations, kinetic sabotage, and destructive cyberattacks—in NATO countries, accepting high diplomatic and economic costs to advance its objectives22. However, the system suffers from profound weaknesses. The fundamental vulnerability is the intense politicization of intelligence. The rigid vertical power structure heavily discourages dissenting analysis, leading to intelligence failures where officers report what leadership wishes to hear, as devastatingly evidenced by the flawed planning for the 2022 Ukraine invasion12. Operational security and tradecraft within kinetic units are frequently abysmal. Units like the GRU's 29155 have been repeatedly exposed by open-source investigators due to amateurish errors, such as registering vehicles to agency headquarters, using sequentially numbered passports, and failing to compartment communication networks10. Endemic corruption further hollows out capabilities, leading to the embezzlement of operational funds. Finally, while the increasing reliance on criminal proxies provides the state with plausible deniability, it drastically reduces operational reliability, frequently resulting in bungled, easily attributable operations that fail to achieve their strategic intent7.

Russian Terminology Glossary

Final Confidence Table for Opaque or Newly Reported Structures

Since the full-scale invasion of Ukraine, Western intelligence and independent investigative journalists have reported on the emergence of newly structured covert action entities designed to streamline wartime operations and bypass the compromised tradecraft of legacy units.

This is for informational purposes only. For medical advice or diagnosis, consult a professional.

Works cited

1. Intelligence agencies of Russia \- Wikipedia, https://en.wikipedia.org/wiki/Intelligence\agencies\of\_Russia

2. Russia created secret department for sabotage and assassinations across Europe, WSJ says | Ukrainska Pravda, https://www.pravda.com.ua/eng/news/2025/02/16/7498566/

3. From War to Prison: Repression in Russia is becoming more 'planned' and harsh, but not more widespread, https://re-russia.net/en/analytics/0125/

4. Siloviki at War: The Russian Security Community Since February 2022, https://www.ssoar.info/ssoar/bitstream/handle/document/101388/ssoar-russanald-2025-323-galeotti-Siloviki\at\War\The\Russian.pdf?sequence=1\&isAllowed=y\&lnkname=ssoar-russanald-2025-323-galeotti-Siloviki\at\War\The\_Russian.pdf

5. Russia's secret treason investigations \- openDemocracy, https://www.opendemocracy.net/en/russia-s-secret-treason-investigations/

6. CASE OF NOVAYA GAZETA AND OTHERS v. RUSSIA \- HUDOC, https://hudoc.echr.coe.int/fre?i=001-241738

7. Russian Sabotage Operations Across Europe \- Prevail Partners, https://www.prevail-partners.com/russian-sabotage-operations-across-europe/

8. Kinetic Operations Bring Authoritarian Violence to Democratic Streets | German Marshall Fund of the United States, https://www.gmfus.org/news/kinetic-operations-bring-authoritarian-violence-democratic-streets

9. Russia's Center 795: Exposed Through Poor Tradecraft \- Grey Dynamics, https://greydynamics.com/russias-center-795-exposed-through-poor-tradecraft/

10. Lost in translation: How Russia's new elite hit squad was compromised by an idiotic lapse in tradecraft \- The Insider, https://theins.press/en/inv/290235

11. Alexander Bortnikov \- Wikipedia, https://en.wikipedia.org/wiki/Alexander\_Bortnikov

12. Full article: The Ukraine war and the shift in Russian intelligence priorities \- Taylor & Francis, https://www.tandfonline.com/doi/full/10.1080/02684527.2024.2322807

13. Sergey Beseda \- Wikipedia, https://en.wikipedia.org/wiki/Sergey\_Beseda

14. Federal Security Service \- Jack Reacher Wiki \- Fandom, https://jack-reacher.fandom.com/wiki/Federal\Security\_Service

15. SORM \- Wikipedia, https://en.wikipedia.org/wiki/SORM

16. The Silent Hand: Russian Intelligence Activities in Europe \- Grey Dynamics, https://greydynamics.com/the-silent-hand-russian-intelligence-activities-in-europe/

17. Sergey Naryshkin \- Wikipedia, https://en.wikipedia.org/wiki/Sergey\_Naryshkin

18. Foreign Intelligence Service (Russia) \- Wikipedia, https://en.wikipedia.org/wiki/Foreign\Intelligence\Service\_(Russia))

19. Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally, https://media.defense.gov/2023/Dec/13/2003358237/-1/-1/0/JCSA-SVR-EXPLOIT-JETBRAINS-TEAMCITY-CVE.PDF

20. GRU (Russian Federation) \- Wikipedia, https://en.wikipedia.org/wiki/GRU\(Russian\_Federation))

21. Igor Kostyukov \- Wikipedia, https://en.wikipedia.org/wiki/Igor\_Kostyukov

22. Russia's Shadow War Against the West \- CSIS, https://www.csis.org/analysis/russias-shadow-war-against-west

23. GRU Unit 29155: Russia's Foreign Covert Action Machine \- Grey Dynamics, https://greydynamics.com/gru-unit-29155-russias-foreign-covert-action-machine/

24. Dmitry Kochnev \- Wikipedia, https://en.wikipedia.org/wiki/Dmitry\_Kochnev

25. Federal Protective Service (Russia) \- Wikipedia, https://en.wikipedia.org/wiki/Federal\Protective\Service\_(Russia))

26. Meduza: Russian security forces are persuading Putin to postpone the State Duma elections. This idea has become more popular after Ukraineʼs attacks \- Бабель, https://babel.ua/en/news/127993-meduza-russian-security-forces-are-persuading-putin-to-postpone-the-state-duma-elections-this-idea-has-become-more-popular-after-ukraine-s-attacks

27. Putin Expands Rosgvardia's Role \- The Moscow Times, https://www.themoscowtimes.com/2026/02/12/putin-expands-rosgvardias-role-a91934

28. Ministry of Internal Affairs (Russia) \- Wikipedia, https://en.wikipedia.org/wiki/Ministry\of\Internal\Affairs\_(Russia))

29. Vladimir Kolokoltsev \- Wikipedia, https://en.wikipedia.org/wiki/Vladimir\_Kolokoltsev

30. Russia Faces Major Police Shortage as Vacancies Reach Up to 40% in Key Units, https://united24media.com/latest-news/russia-faces-major-police-shortage-as-vacancies-reach-up-to-40-in-key-units-16079

31. Alexander Bastrykin \- Wikipedia, https://en.wikipedia.org/wiki/Alexander\_Bastrykin

32. Meeting with Investigative Committee Chairman Alexander Bastrykin \- President of Russia, http://en.kremlin.ru/events/president/news/79276

33. Russia's investigative chief laments that children can't be jailed from age 12 \- Meduza, https://meduza.io/en/news/2026/06/26/russia-s-investigative-chief-laments-that-children-can-t-be-jailed-from-age-12

34. Main Directorate of Special Programs of the President of the Russian Federation \- Wikipedia, https://en.wikipedia.org/wiki/Main\Directorate\of\Special\Programs\of\the\President\of\the\Russian\_Federation

35. Edict and Statute No 1025s of 31 August 1998 on GUSP \- Intelligence Resource Program, https://irp.fas.org/world/russia/fbis/Edict1025sonGUSP.htm

36. Illuminating Russia's Main Directorate of Special Programs \- Federation of American Scientists, https://fas.org/publication/illuminating\russias\main\_dire/

37. US Pacific Command Military Intelligence Brigade (Theater) Support to Corps and Below \- from MIPB, https://mipb.ikn.army.mil/media/winbvuue/mipb-2017-10-12-full-issue.pdf

38. Who is the spook leading Russia's negotiations with Ukraine? \- The Spectator, https://spectator.com/article/who-is-the-spook-leading-russias-negotiations-with-ukraine/

39. GRU Unit 54777: Russia's Psychological Operations Command \- Grey Dynamics, https://greydynamics.com/gru-unit-54777-russias-psychological-operations-command/

40. Profile: GRU cyber and hybrid threat operations \- GOV.UK, https://www.gov.uk/government/publications/profile-gru-cyber-and-hybrid-threat-operations/profile-gru-cyber-and-hybrid-threat-operations

41. Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure \- Department of War, https://media.defense.gov/2024/Sep/05/2003537870/-1/-1/0/CSA-Russian-Military-Cyber-Target-US-Global-CI.PDF

42. APT29 (Midnight Blizzard): Operations, IOCs, Tactics, Detection Strategies, https://www.darkrelay.com/post/apt29-midnight-blizzard-operations-iocs-detection-strategies

43. Five Russian GRU Officers and One Civilian Charged for Conspiring to Hack Ukrainian Government \- Department of Justice, https://www.justice.gov/archives/opa/pr/five-russian-gru-officers-and-one-civilian-charged-conspiring-hack-ukrainian-government

44. FEDERAL LAW ON THE FEDERAL SECURITY SERVICE OF THE RUSSIAN FEDERATION \- Police and Human Rights Resources, https://policehumanrightsresources.org/content/uploads/2016/08/Federal-Law-on-Federal-Security-Service-Russia-1995.pdf?x96812

45. Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally \- IC3, https://www.ic3.gov/CSA/2023/231213.PDF

46. Dmitry Kochnev \- Grokipedia, https://grokipedia.com/page/Dmitry\_Kochnev

47. (PDF) Russian sabotage targeting NATO \- ResearchGate, https://www.researchgate.net/publication/400078988\Russian\sabotage\targeting\_NATO

48. NSA Issues Updated Guidance on Russian SVR Cyber Operations, https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3931959/nsa-issues-updated-guidance-on-russian-svr-cyber-operations/

49. Who is Sergey Beseda, Russian spy handler leading talks with US? \- The Kyiv Independent, https://kyivindependent.com/sergey-beseda-russias-negotiator-in-saudi-arabia-and-his-role-in-ukraines-war/

50. Russia's SVR in contact with CIA on Iran, Naryshkin says \- Apa.az, https://en.apa.az/cis-countries/russias-svr-in-contact-with-cia-on-iran-naryshkin-says-499151

51. Russia–Iran Cooperation Reaches Strategic Depth \- SpecialEurasia, https://www.specialeurasia.com/2026/04/29/russia-iran-meeting-diplomacy/

52. Russia's Clandestine Chemical Weapons Programme: The Bellingcat Exposure \- RUSI, https://www.rusi.org/explore-our-research/publications/commentary/russias-clandestine-chemical-weapons-programme-bellingcat-exposure

53. Ewan Thomas-Colquhoun \- Osteuropa-Institut \- Freie Universität Berlin, https://www.oei.fu-berlin.de/politik/Arbeitspapiere/AP94.pdf

54. Fortress Kremlin: Elite Fractures, Regime Security, and Coup Risk in Russia, https://lansinginstitute.org/2026/05/04/fortress-kremlin-elite-fractures-regime-security-and-coup-risk-in-russia/

55. Russia establishes unified training system to bolster drone capabilities \- China.org.cn, http://www.china.org.cn/world/Off\the\Wire/2026-07/18/content\_118605507.shtml

56. Russia's Gray Man Makes His Move \- CEPA, https://cepa.org/article/russias-gray-man-makes-his-move/

57. Russia's Shadow War Against the West, https://csis-website-prod.s3.amazonaws.com/s3fs-public/2025-03/250318\Jones\Russia\Shadow.pdf?VersionId=LHamL2L7HJwLgZ7a\_wq6xkTIwMh3TFpk

58. Russian Spy Chief Claims NATO Countries Are Preparing for War, Accuses Europe of “Russophobia” \- UNITED24 Media, https://united24media.com/latest-news/russian-spy-chief-claims-nato-countries-are-preparing-for-war-accuses-europe-of-russophobia-12674

59. Federal Register/Vol. 89, No. 121/Monday, June 24, 2024/Notices \- GovInfo, https://www.govinfo.gov/content/pkg/FR-2024-06-24/pdf/2024-13532.pdf

60. 1 REPORT OF PETER B. MAGGS INTRODUCTION 1\. I have been retained by the Department of Homeland Security to advise on Russian law \- Internet Governance Project, https://www.internetgovernance.org/wp-content/uploads/12-7-Exhibit-AR-Part-6-Maggs-report.pdf

61. Aliases \- Animv.ro, https://www.animv.ro/wp-content/uploads/2024/10/Buletin-SLI-nr.7-4.pdf

62. LAGUTIN AND OTHERS v. RUSSIA \- HUDOC, https://hudoc.echr.coe.int/eng?i=001-142518

63. Evidential Significance of the Results of Operational Search Activities at the Stage of Criminal Case Initiation According to Ru \- Atlantis Press, https://www.atlantis-press.com/article/125936538.pdf

64. Russian internet will be subject to multiple controls | Expert Briefings | Emerald Publishing, https://www.emerald.com/expert-briefings/article/doi/10.1108/OXAN-DB216341/508581/Russian-internet-will-be-subject-to-multiple

65. The Architecture of Digital Repression | Carnegie Endowment for International Peace, https://carnegieendowment.org/research/2026/03/the-architecture-of-digital-repression

66. Controlling free expression "by infrastructure" in the Russian Internet: The consequences of RuNet sovereignization \- First Monday, https://firstmonday.org/ojs/index.php/fm/article/download/11698/10127

67. Federal Law No. 5485-1 of July 21, 1993, on State Secrets (as amended up to Federal Law No. 193-FZ of July 26, 2017), Russian Federation, WIPO Lex, https://www.wipo.int/wipolex/en/legislation/details/17941

68. BARTIK v. RUSSIA \- HUDOC \- The Council of Europe, https://hudoc.echr.coe.int/eng?i=001-66812

69. 1 Pécsi Tudományegyetem Állam- és Jogtudományi Doktori Iskola Kis Kelemen Bence különös tekintettel a fegyveres, pilóta, https://ajk.pte.hu/sites/ajk.pte.hu/files/file/doktori-iskola/kis-kelemen-bence/kis-kelemen-bence-muhelyvita-ertekezes.pdf

70. In the Name of Security: Counterterrorism Laws Worldwide since September 11 | HRW, https://www.hrw.org/report/2012/06/29/name-security/counterterrorism-laws-worldwide-september-11

71. From «Discrediting» the Military to High Treason and Terrorism – Riddle Russia, https://ridl.io/from-discrediting-the-military-to-high-treason-and-terrorism/

72. English \- Organization for Security and Co-operation in Europe \- OSCE.org, https://odihr.osce.org/sites/default/files/f/documents/7/5/526720\_0.pdf

73. RUSSIAN FEDERATION FEDERAL LAW1 AMENDING INDIVIDUAL LEGISLATIVE ACTS OF THE RUSSIAN FEDERATION AS REGARDS ESTABLISHING ADDITIO, https://www.venice.coe.int/webforms/documents/default.aspx?pdffile=CDL-REF(2021)050-e050-e)

74. How Will Russia Reconstitute Its Military After the Ukraine Conflict? \- RAND, https://www.rand.org/pubs/research\_briefs/RBA2713-2.html

75. Director of the Federal Security Service \- Wikipedia, https://en.wikipedia.org/wiki/Director\of\the\Federal\Security\_Service

76. Full article: Counterintelligence and escalation from hybrid to total war in the Russo-Ukrainian conflict 2014–2024 \- Taylor & Francis, https://www.tandfonline.com/doi/full/10.1080/02684527.2024.2329419

77. Counterintelligence and Escalation from Hybrid to Total War in the Russo-Ukrainian Conflict 2014- 2024, https://bura.brunel.ac.uk/bitstream/2438/29146/1/FullText.pdf

78. Poisoning of Sergei and Yulia Skripal \- Wikipedia, https://en.wikipedia.org/wiki/Poisoning\of\Sergei\and\Yulia\_Skripal

79. Russia appears to be seeking to optimize its troops for continued trench warfare in Ukraine \- ISW, https://ukranews.com/en/news/1163745-russia-appears-to-be-seeking-to-optimize-its-troops-for-continued-trench-warfare-in-ukraine-isw

80. Midnight Blizzard Unveils: A Comprehensive Analysis of Cyber Threat Strategies \- Semantic Scholar, https://pdfs.semanticscholar.org/fbd9/bd34e804e6434ee43c89fa2e4ea2b5c1ae47.pdf

81. The attribution story of WhisperGate: an academic perspective \- Virus Bulletin, https://www.virusbulletin.com/conference/vb2025/abstracts/attribution-story-whispergate-academic-perspective/

82. GRU 29155 CYBER ACTORS \- FBI, https://www.fbi.gov/wanted/cyber/gru-29155-cyber-actors

83. Bulgarian Poison Probe Focuses On Russian Spy Chief Suspected In Novichok Attack On Skripals, https://www.rferl.org/a/bulgarian-poison-probe-russian-spy-chief-snovichok-attack-skripals/30334479.html

84. Sergey Beseda steps down as head of Russia's FSB foreign intelligence, https://english.nv.ua/nation/russian-fsb-fifth-service-gets-new-chief-alexei-komkov-predecessor-resigns-50429353.html

85. The Central Brain of the Russian Armed Forces \- CNA.org., https://www.cna.org/reports/2024/10/The-Central-Brain-of-the-Russian-Armed-Forces.pdf

Memory References

• International Coverage
• Regional Intelligence Atlas
• International Fairness
• Memory operating model
• Long-term memory pointer ledger

Related Durable Documents

• Long-term memory index
• Split-memory architecture

Supersession Status

Current canonical research report. It supports design and research routing but does not override explicit repository instructions, verified implementation, tests, or active .uai current-state records. Review status and truth boundaries are recorded in the pointer ledger.