S05E03 — Threat Assessment and Targeted Violence

Behavioral Case Files — Season 5: Behavioral Analysis in the Modern Era

Recording draft · target delivery 118–122 words per minute

Editorial status: Source-conscious draft. Complete a human line-level fact check, pronunciation review, victim-dignity review, and full listen before publication.

Cold Open

The most dramatic explanation is rarely the whole explanation. A case is built from records, evidence, people, decisions—and the mistakes that survive in the file.

Show Open

You’re listening to Behavioral Case Files—the history, methods, limits, and legacy of criminal behavioral analysis. I’m Herb Trevathan.

Independence

Behavioral Case Files is an independent educational podcast. It is not affiliated with, endorsed by, sponsored by, or produced by the Federal Bureau of Investigation or any other law-enforcement agency.

Episode Promise

This is S05E03: Threat Assessment and Targeted Violence. Today, we’re examining why assessment focuses on behavior, context, capability, and intervention rather than a profile.

The Central Question

Threat assessment asks whether a person is moving toward violence and what can reduce risk. It is dynamic, multidisciplinary, and not a prediction of certainty.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

What the Record Establishes

Begin with the record closest to the event: court findings, case files, laboratory results, contemporaneous reports, and documented actions. Later recollection can add perspective, but it must be labeled and checked.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

What the Story Often Adds

Popular accounts compress years, combine people, reward dramatic insight, and read the outcome backward into every earlier clue. That produces a satisfying narrative while hiding uncertainty, conflict, and ordinary investigative labor.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

The Behavioral Question

A behavioral observation can organize questions or suggest a lawful next step. It cannot identify a person, prove motive, substitute for diagnosis, or establish guilt. The farther an inference travels from observable conduct, the more carefully it must be qualified.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

Alternative Explanations

The same fact can support more than one explanation. Planning may reflect familiarity, opportunity, prior experience, or circumstance. Silence may reflect strategy, incapacity, changed opportunity, fear, or coincidence. Alternatives keep a plausible idea from becoming a tunnel.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

The Human Consequence

The people harmed are not plot devices. Accuracy includes names, dignity, community context, and the consequences of investigative error. Avoid graphic detail unless it is necessary to understand evidence or institutional response.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

What Responsible Practice Requires

Write the reasoning down, preserve the original claim, state confidence, seek disconfirming evidence, separate consultation from decision authority, and revise when facts change. Expertise earns trust by showing its work.

For why assessment focuses on behavior, context, capability, and intervention rather than a profile, the useful question is not whether an interpretation sounds insightful. It is what evidence supports it, what other explanations remain, and what proportionate action could test it. A conclusion that cannot be revised is not analysis; it is a verdict delivered too early.

This is also where base rates matter. A characteristic may appear in a known offender and still be common among people who never offend. A behavior may deserve attention in context without becoming a label for everyone who shares it. Specificity, timing, capability, opportunity, and corroboration change the meaning.

A careful review therefore creates a ledger. One column holds verified facts. Another holds contested or missing information. A third holds inferences with their supporting basis. A fourth records what would weaken each inference. The ledger does not eliminate judgment. It makes judgment visible.

Success must be defined before the outcome is known. Did the advice identify a concrete lead, improve an interview, preserve evidence, connect cases, or reduce risk? A broad description that can be matched after arrest is not the same as a risky, testable prediction made beforehand.

Finally, preserve failure. If misses disappear while hits are retold, confidence grows without knowledge. The honest record includes unused recommendations, ambiguous language, opportunity cost, innocent people scrutinized, and the ordinary work that actually moved the investigation.

Season Thread

Season 5, Behavioral Analysis in the Modern Era, asks what survives when a compelling story is tested against records, research, alternative explanations, and human consequences. Behavioral analysis is one contribution inside a larger system—not a substitute for evidence or accountability.

Closing

That’s this case file. Source links and a transcript are included with the episode notes. Corrections will be documented publicly. I’m Herb Trevathan. Thank you for listening to Behavioral Case Files.

Sources

• FBI — Behavioral Analysis
• FBI — Serial Murder: Multi-Disciplinary Perspectives for Investigators
• FBI LEB — Criminal Investigative Analysis: Practitioner Perspectives
• Fox et al. — Systematic Review and Meta-analysis of Offender Profiling
• U.S. Secret Service NTAC — Behavioral Threat Assessment Units Guide
• FBI — Making Prevention a Reality
• FBI LEB — Campus Safety: Assessing and Managing Threats
• NIJ — Cohort Bias in Predictive Risk Assessments
• NIST — AI Risk Management Framework