How the Pentagon Fights Terrorism

Last updated 5 months ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

More than two decades after 9/11, America’s counter-terrorism operations have evolved from the massive invasions of Afghanistan and Iraq into a sophisticated global enterprise. The Department of Defense now conducts a shadow war spanning dozens of countries, using everything from elite special forces raids to cyber attacks against terrorist websites.

This isn’t the counter-terrorism you see in movies. It’s a complex machinery of legal authorities, intelligence networks, international partnerships, and cutting-edge technology designed to protect Americans from threats that often exist more in digital space than physical territory.

The Pentagon’s counter-terrorism mission extends far beyond battlefield combat. It encompasses training foreign armies, intercepting terrorist communications, disrupting cryptocurrency fundraising, and conducting precision strikes in remote corners of the world—all governed by a web of laws and policies that have stretched far beyond their original intent.

The Legal Foundation

Presidential Strategies and Shifting Priorities

Every counter-terrorism operation begins with presidential strategy. The National Security Strategy sets America’s security priorities and defines how the military should respond to terrorist threats.

The 2002 National Security Strategy, released after 9/11, represented a dramatic reshaping of American defense policy. It identified the gravest danger as the “crossroads of radicalism and technology,” arguing that America was “threatened less by conquering states than by failing ones.”

This strategy established a doctrine of preemption, asserting that to prevent catastrophic attacks by terrorists seeking weapons of mass destruction, “America will act against such emerging threats before they are fully formed.” This proactive posture provided the foundational justification for a global “War on Terror,” prioritizing the elimination of terrorist safe havens through direct and large-scale U.S. military force.

Two decades of sustained conflict in Afghanistan and Iraq exacted immense human and financial costs, leading to broad re-evaluation of this approach. The 2022 National Security Strategy reflects significant strategic evolution, driven by lessons from past interventions and a changed geopolitical landscape.

The document declares that the era of “major military operations to remake other societies” has ended. The focus has shifted to a more sustainable, partner-centric model. The current strategy emphasizes a “partner-led, U.S.-enabled” approach, seeking to build the capacity of allies and partners to manage terrorist threats within their own borders.

This allows the United States to maintain pressure on terrorist groups while reducing the footprint of American forces. Concurrently, the U.S. maintains robust “over-the-horizon” capabilities to conduct strikes against threats to the homeland as they emerge, as demonstrated by the strike that killed al-Qaeda leader Ayman al-Zawahiri.

This strategic recalibration allows the DoD to manage the persistent but now less-dominant threat of terrorism while prioritizing resources for strategic competition with China and Russia.

Constitutional Powers and War Authority

The legal authority for U.S. military action creates deliberate tension between executive and legislative branches. Article I grants Congress the sole power “to declare War,” while Article II designates the President as “Commander in Chief.”

Historically, Congress has issued formal declarations of war only eleven times, with the last being during World War II. In the modern era, particularly in counter-terrorism against non-state actors, military force is almost always employed based on statutory authorizations or the President’s interpretation of inherent constitutional authority.

This dynamic led to the War Powers Resolution of 1973. Passed over President Nixon’s veto after Vietnam, the resolution was intended to reassert congressional authority. It requires the President to notify Congress within 48 hours of committing armed forces and prohibits those forces from remaining more than 60 days without congressional authorization.

In practice, the War Powers Resolution has largely failed to constrain presidential action. The speed and nature of modern threats, especially from transnational terrorist groups, have led presidents of both parties to favor rapid, decisive action based on their Article II powers.

While often protesting executive overreach, Congress members have frequently been politically reluctant to take the definitive step of cutting off funding or directing troop withdrawals, preferring instead to pass broad, open-ended authorizations that grant the executive branch wide latitude.

This has created a persistent cycle where presidents act, cite broad legal justifications, and Congress debates legality after the fact—a dynamic that defines the legal landscape of modern counter-terrorism.

The Legal Bedrock: Post-9/11 Authorizations

In lieu of formal war declarations, the primary legal pillars supporting global counter-terrorism campaigns are two Authorizations for Use of Military Force passed by Congress in 2001 and 2002.

The 2001 Authorization for Use of Military Force

The 2001 AUMF (Public Law 107-40) was passed September 14, 2001, just three days after 9/11. This 60-word resolution is the legal cornerstone for the vast majority of U.S. counter-terrorism operations conducted over the past two decades.

It authorizes the President “to use all necessary and appropriate force against those nations, organizations, or persons he determines planned, authorized, committed, or aided the terrorist attacks that occurred on September 11, 2001, or harbored such organizations or persons, in order to prevent any future acts of international terrorism against the United States.”

The 2002 Iraq Authorization

The 2002 AUMF Against Iraq (Public Law 107-243) was passed to authorize military action to “defend the national security of the United States against the continuing threat posed by Iraq” under Saddam Hussein’s regime. While its original focus was the Ba’athist regime, successive administrations have interpreted it as authorizing continued force against successor threats emanating from Iraq, most notably ISIS.

The “Associated Forces” Doctrine

The language of the 2001 AUMF, originally intended for specific perpetrators (al-Qaeda and the Taliban), was progressively reinterpreted by successive administrations to meet an evolving threat.

As the original al-Qaeda core was degraded, new threats emerged that shared its ideology but had no direct connection to September 11th attacks. Rather than seeking new, specific authorizations from a war-weary Congress, the executive branch developed the “associated forces” doctrine.

This legal theory allowed the government to link new groups like ISIS in Iraq and Syria, al-Shabaab in Somalia, or al-Qaeda in the Arabian Peninsula (AQAP) in Yemen back to the original 2001 authorization.

This expansive interpretation effectively transformed a specific authorization into a flexible legal foundation for a global, multi-generational conflict against an ever-expanding list of terrorist groups. This “scope creep” has provided operational flexibility but has also become a source of intense legal and political controversy, effectively bypassing congressional war-making power for over two decades.

This has led to sustained, bipartisan calls in Congress to repeal the 2001 and 2002 AUMFs and replace them with a “narrow and specific framework” that would include clear targets, geographic limitations, and sunset clauses to ensure democratic accountability.

Key DoD Policies and Directives

Beneath high-level constitutional and statutory authorities lies a layer of executive branch and departmental policies that translate broad mandates into operational guidance.

A key historical document is Presidential Policy Directive 39 (PDD-39), issued in 1995. It established foundational U.S. policy to “deter, defeat and respond vigorously to all terrorist attacks on our territory and against our citizens” and formally established the “no concessions to terrorists” policy.

It also designated lead agency responsibilities for crisis management, with the Department of Justice (through the FBI) leading domestic response and the State Department leading international response, with DoD tasked to provide support to these lead agencies.

Within the Department of Defense, DoD Instruction 5240.26 establishes an integrated mission to detect, identify, assess, and neutralize efforts by Foreign Intelligence Entities and international terrorists targeting DoD personnel, facilities, and information.

More recently, the rise of domestic violent extremism has prompted new policy development. The National Strategy for Countering Domestic Terrorism, released in 2021, provides a nationwide framework for addressing this threat.

While primarily a domestic law enforcement issue, it has significant implications for DoD, which has responsibility to prevent its own personnel from engaging in prohibited extremist activities. In response, DoD has implemented its own policies and established bodies like the Countering Extremist Activity Working Group to review screening procedures and update training.

Key Legal and Policy Authorities

The Organization: Who Fights the Terror War

Civilian Oversight: The Pentagon’s Policy Chiefs

Civilian oversight of military counter-terrorism and special operations activities resides within the Office of the Secretary of Defense. The Assistant Secretary of Defense for Special Operations and Low-Intensity Conflict (ASD(SO/LIC)) serves as the principal civilian advisor to the Secretary of Defense on these matters.

Within this office, the Deputy Assistant Secretary of Defense for Irregular Warfare & Counterterrorism is responsible for developing specific policy guidance and overseeing implementation of all DoD policies, strategies, and plans related to counter-terrorism.

This office’s portfolio is extensive, including direct oversight of Special Operations Forces employment, development of CT plans and programs, management of sensitive special operations, and policy for building foreign partner capacity to counter terrorist threats.

This structure provides a direct link between high-level national strategy and detailed planning and execution of missions by military commands.

The Global Synchronizer: U.S. Special Operations Command

Created by Congress in 1987, U.S. Special Operations Command (USSOCOM), headquartered at MacDill Air Force Base in Tampa, Florida, is the unified combatant command responsible for organizing, training, and equipping all U.S. Special Operations Forces from the Army, Navy, Air Force, and Marine Corps.

Following 9/11, USSOCOM received a unique and powerful role in the war on terror. The 2004 Unified Command Plan designated USSOCOM as the lead combatant command for synchronizing DoD’s global planning against terrorist networks.

This means SOCOM is responsible for receiving, reviewing, coordinating, and prioritizing all DoD plans that support the global campaign against terror. It acts as the central hub for the military’s worldwide CT efforts, making recommendations to the Joint Staff on allocation of forces and resources to meet global requirements.

SOCOM’s core activities are intrinsically linked to the CT mission. These include Counterterrorism (CT), Direct Action (DA) raids and strikes, Special Reconnaissance (SR) covert intelligence gathering, Foreign Internal Defense (FID) training partner nations, and Unconventional Warfare (UW) enabling resistance movements.

Under its umbrella, SOCOM oversees several component commands, including the highly secretive Joint Special Operations Command (JSOC). JSOC is a sub-unified command responsible for studying special operations requirements and techniques, ensuring interoperability, and conducting special operations missions worldwide.

It directs the nation’s premier “special mission units,” such as the U.S. Army’s 1st Special Forces Operational Detachment-Delta (Delta Force) and the Naval Special Warfare Development Group (DEVGRU), popularly known as SEAL Team Six. These elite forces typically execute the most sensitive and high-stakes direct action, counter-terrorism, and hostage rescue missions.

Regional Execution: The Geographic Commands

While USSOCOM synchronizes global CT planning, the seven Geographic Combatant Commands are responsible for day-to-day execution of military operations within their designated Areas of Responsibility. Two commands have been particularly prominent since 2001.

U.S. Central Command (CENTCOM)

CENTCOM has an Area of Responsibility covering the Middle East, Central Asia, and parts of South Asia, including Iraq, Syria, Afghanistan, and Yemen. This region has been the undisputed epicenter of U.S. counter-terrorism operations for over two decades.

A core command priority for CENTCOM is to “Counter Violent Extremist Organizations.” The command has been responsible for leading the largest U.S. military campaigns of the post-9/11 era, including Operation Enduring Freedom in Afghanistan and Operation Inherent Resolve against ISIS in Iraq and Syria.

A key element of CENTCOM’s strategy is working “by, with, and through” local partner forces, such as the Iraqi Security Forces and the Syrian Democratic Forces, to degrade and defeat terrorist groups on the ground. It also maintains critical security partnerships with nations in the region.

U.S. Africa Command (AFRICOM)

AFRICOM, established in 2007, has an Area of Responsibility covering the entire African continent except Egypt. Its mission is to counter transnational threats and malign actors by strengthening the security forces of African partners.

AFRICOM’s approach explicitly embodies the “partner-led, U.S.-enabled” model outlined in the current National Security Strategy. Rather than deploying large numbers of U.S. combat troops, AFRICOM focuses on building partner capacity through training, intelligence sharing, joint exercises, and security assistance programs.

This enables African nations to take the lead in addressing their own security threats, such as al-Shabaab in Somalia and the growing nexus of ISIS and al-Qaeda affiliates in the Sahel region of West Africa.

The command faces profound challenges, including vast geography, political instability, and what its commander has called the “world’s epicenter of terrorism” in the Sahel, all while contending with growing strategic competition from China and Russia on the continent.

The Intelligence Engine

DoD counter-terrorism operations are fundamentally intelligence-driven. The ability to find, fix, and finish a terrorist threat depends entirely on the quality and timeliness of intelligence provided by a powerful network of defense intelligence agencies.

Defense Intelligence Agency (DIA)

The Defense Intelligence Agency (DIA) is DoD’s primary producer of all-source military intelligence. Its mission is to provide foundational intelligence on foreign militaries and operating environments to warfighters, defense policymakers, and force planners.

In the CT context, DIA provides comprehensive analysis of terrorist organizations—their leadership, structure, capabilities, finances, and intentions. DIA’s Counterintelligence specialists work to detect and neutralize threats posed by these groups to DoD personnel and assets.

DIA personnel deploy globally alongside military forces to provide direct analytic support, assist with exploitation of captured documents and media, and support prisoner interrogations.

National Security Agency (NSA)

The National Security Agency (NSA) is the nation’s cryptologic organization, with two primary missions: Signals Intelligence (SIGINT) and Cybersecurity. Its role in counter-terrorism is paramount.

The NSA is responsible for intercepting, processing, and analyzing communications of foreign terrorist organizations. By collecting and analyzing metadata (such as email to/from information or phone call numbers and duration) and communication content, the NSA can map terrorist networks, identify previously unknown operatives, and uncover plots in planning stages.

This intelligence is often the critical first step that initiates a counter-terrorism operation. Collection conducted under authorities like Section 702 of the Foreign Intelligence Surveillance Act (FISA) has been described by the agency as its “most significant tool” for detection, identification, and disruption of terrorist threats.

National Geospatial-Intelligence Agency (NGA)

The National Geospatial-Intelligence Agency (NGA) is the nation’s primary source of Geospatial Intelligence (GEOINT), which is the exploitation and analysis of imagery and geospatial information to describe, assess, and visually depict physical features and geographically referenced activities on Earth.

NGA provides the “eyes” of the counter-terrorism mission. Using imagery from satellites and other aerial platforms, NGA analysts monitor suspected terrorist training camps, track movements of high-value individuals, identify potential threats and safehouses, and create detailed maps and models used for mission planning and targeting.

This GEOINT is indispensable for everything from planning direct action raids on specific buildings to ensuring safe navigation for aircraft and ships supporting operations.

Key DoD and Intelligence Actors

The Weapons: How America Fights Terror

Direct Action: Elite Forces and Precision Strikes

Direct Action represents the sharp end of counter-terrorism. DoD doctrine defines it as “short-duration strikes and other small-scale offensive actions employing specialized military capabilities to seize, destroy, capture, exploit, recover, or damage designated targets.”

These operations, including raids, ambushes, and hostage rescues, are typically conducted by elite Special Operations Forces in hostile, denied, or politically sensitive environments where precision and discretion are paramount.

Units such as the Army’s 75th Ranger Regiment and the special mission units under JSOC are specifically organized, trained, and equipped for these high-stakes missions. In the CT context, Direct Action is the primary tool for physically removing high-value terrorist leaders from the battlefield, rescuing hostages, and destroying critical terrorist infrastructure.

A high-profile direct action raid, while representing the tactical apex of a counter-terrorism effort, is invariably the final, visible step in a much larger, often years-long process of intelligence collection, analysis, and partnership building.

Case Study: The Baghdadi Raid

The October 2019 raid that resulted in the death of ISIS leader Abu Bakr al-Baghdadi in Syria’s Idlib province illustrates the intricate “Find, Fix, Finish” cycle that underpins such missions.

The “Find” and “Fix”: The operation was the culmination of a painstaking, multi-agency, and multinational intelligence effort. The process began with the CIA, which, working closely with Iraqi and Kurdish intelligence partners, reportedly gained initial leads on Baghdadi’s whereabouts following the arrest of one of his wives and a courier.

The critical breakthrough came from the Syrian Democratic Forces (SDF), a key U.S. partner on the ground. The SDF cultivated a high-level informant deep inside Baghdadi’s inner circle who served as a security advisor. This asset provided detailed layout of the compound, information on tunnel systems, and, crucially, stole a sample of Baghdadi’s underwear and blood for DNA analysis, which provided a positive match and confirmed his location.

This fusion of human intelligence (HUMINT) from the SDF informant, signals intelligence (SIGINT) used to monitor communications, and geospatial intelligence (GEOINT) to map the area allowed U.S. forces to “find” the target and “fix” his location with high confidence.

The “Finish”: The “finish” phase was a classic Direct Action raid executed by elements of the U.S. Army’s 1st SFOD-D (Delta Force), operating under JSOC. The assault force was inserted by helicopter near the compound, supported by attack helicopters and unmanned aircraft.

To avoid a likely booby-trapped main entrance, operators breached the compound wall with explosives. They engaged and killed five ISIS members inside who refused commands to surrender. As the force closed in, Baghdadi fled into a dead-end tunnel with two of his young children and detonated a suicide vest, killing all three.

The force secured his remains for DNA confirmation and gathered valuable intelligence, including phones and computers, before the compound was destroyed by airstrikes to prevent it from becoming a shrine.

Complexity and Controversy: The raid was an undeniable tactical success, removing the world’s most wanted terrorist. However, the official narrative was immediately complicated.

The Pentagon’s assertion of a flawless operation with no civilian casualties was challenged by investigative reporting. An NPR investigation, based on documents obtained through a Freedom of Information Act lawsuit, uncovered evidence that a civilian van was fired upon with only seconds of warning, killing or maiming its occupants.

The Pentagon’s internal assessment dismissed the allegations, claiming the men failed to heed warning shots and were therefore enemy combatants, but the investigation raised serious questions about the credibility of the military’s civilian casualty assessment process.

This discrepancy highlights a critical tension in counter-terrorism operations: the potential for unacknowledged civilian harm, which can undermine strategic goals even in the face of tactical victories.

Intelligence, Surveillance, and Reconnaissance: The All-Seeing Eye

Intelligence, Surveillance, and Reconnaissance (ISR) is the operational engine that drives modern counter-terrorism. It is the coordinated and integrated process of acquiring, processing, and providing timely, accurate, and relevant information to support commander decisions.

The ISR enterprise encompasses a vast array of platforms, from orbiting satellites and high-altitude crewed aircraft like the U-2, to a large and ever-growing fleet of Uncrewed Aerial Vehicles (UAVs)—or drones—such as the MQ-1 Predator, MQ-9 Reaper, and RQ-4 Global Hawk.

In the CT context, persistent ISR is essential for understanding the operational environment, mapping terrorist networks, identifying and tracking high-value targets, providing real-time overwatch for friendly forces, and conducting battle damage assessment after strikes.

With their ability to loiter over target areas for extended periods, UAVs in particular have become a “highly effective instrument of counterterrorism,” valued for both their pervasive intelligence-gathering and aggressive strike capabilities.

Case Study: ISR Evolution from Afghanistan to ISIS

The two-decade evolution of ISR operations from the early days in Afghanistan to the campaign against ISIS reveals a profound organizational learning curve.

Early Days (Operation Enduring Freedom, Afghanistan): In the initial phase of OEF, the use of ISR was revolutionary but still in its infancy. For the first time, unmanned MQ-1 Predators were armed with missiles and deployed in combat alongside the high-altitude RQ-4 Global Hawk surveillance drone.

These platforms provided unprecedented capabilities. During Operation ANACONDA in March 2002, a Predator pilot spotted a concentration of several hundred enemy fighters in a ravine and was able to direct strikes from A-10 Warthogs and an AC-130 gunship, a clear demonstration of the potential of pairing persistent surveillance with airpower.

Systemic Challenges (Operation Iraqi Freedom, Iraq): The prolonged counter-insurgency in Iraq exposed significant flaws in how DoD managed its growing ISR fleet. The system was largely governed by a rigid, Cold War-era collection management doctrine designed for tracking large, static military formations, not small, agile insurgent cells.

A stark example was the effort to counter Improvised Explosive Devices (IEDs). High-altitude U-2 spy planes were routinely tasked to conduct “change detection”—comparing two images of the same road taken at different times to spot disturbances indicating a newly planted bomb.

However, due to the vast area to be covered and a “peanut butter spread” of assets, the second image was often taken four to five days after the first, while insurgents were planting and detonating IEDs within hours. The process was too slow and bureaucratic to be operationally relevant, yielding little to no success.

Maturity (Operation Inherent Resolve, Iraq/Syria): The lessons learned in Iraq led to significant structural and procedural changes that resulted in a more integrated and effective ISR enterprise by the time of Operation Inherent Resolve against ISIS.

Planners moved away from simply submitting formal requirements and toward developing integrated ISR strategies focused on problem-solving. UAVs like the Predator and Reaper, armed with Hellfire missiles, became a central feature, directly coupling persistent ISR with precision strike capabilities.

The concept of “nontraditional ISR” also matured, with targeting pods on fighter jets like the F-15 and F-18 being used as a primary ISR tool, providing real-time, full-motion video directly to ground forces to enhance their situational awareness.

This mature ISR capability was critical to the campaign’s success. It enabled the precision airstrikes that halted ISIS’s initial offensive in 2014 and later supported the systematic dismantling of ISIS’s deadly vehicle-borne IED (VBIED) networks by allowing coalition aircraft to crater roads and destroy VBIED factories ahead of Iraqi ground offensives.

Building Partner Forces: Training Foreign Armies

Security Force Assistance (SFA) encompasses the range of DoD activities dedicated to organizing, training, equipping, rebuilding, and advising foreign security forces. It is a central pillar of the broader mission of Foreign Internal Defense, which involves supporting a host nation’s comprehensive strategy to protect itself from subversion, lawlessness, insurgency, and terrorism.

The strategic goal of SFA is to build the capacity of partner nations to provide for their own security, thereby reducing the burden on U.S. forces and preventing the emergence of safe havens from which terrorists can operate. This is a key element of the current “partner-led, U.S.-enabled” counter-terrorism strategy.

These activities are conducted through various programs, many funded by the State Department but executed by DoD. These include Foreign Military Financing (FMF) grants, the International Military Education and Training (IMET) program, and numerous specific “train and equip” authorities granted to DoD under Title 10 of the U.S. Code.

The Defense Security Cooperation Agency (DSCA) is a key DoD organization that manages and implements many of these security cooperation programs.

Security Force Assistance is a high-risk, high-reward endeavor where selection of the right partner is the single most critical variable for success. Attempting to create a partner force from scratch in the midst of complex conflict is fraught with peril. Conversely, partnering with an existing, motivated local force can yield significant tactical victories, but may also create severe and unintended strategic and diplomatic consequences.

Case Study: The Syria Train and Equip Program

The U.S. effort to build a partner force to fight ISIS in Syria provides a stark case study in both the failures and successes of SFA.

The Initial Failure (2014-2015): The initial DoD-led Syria Train and Equip Program was authorized by Congress in 2014 with a budget of $500 million. The goal was to vet, train, and equip thousands of “moderate” Syrian rebels to serve as a ground force against ISIS.

The program was widely seen as a “total failure.” It was plagued by excessive policy restrictions and a fundamental misalignment of objectives. The U.S. wanted a force focused exclusively on fighting ISIS, but for most Syrian rebels, the primary enemy was the regime of Bashar al-Assad.

The vetting process proved exceedingly difficult, and recruitment numbers were abysmal. By September 2015, a top U.S. general admitted that only “four or five” U.S.-trained fighters were still on the battlefield.

The program suffered a series of public embarrassments: the first group of graduates was immediately attacked by the al-Nusra Front (al-Qaeda’s affiliate in Syria), and another U.S.-trained commander reportedly handed over American-supplied vehicles and ammunition to al-Nusra in exchange for safe passage. In October 2015, the Pentagon abandoned the program.

The Pivot to the Syrian Democratic Forces (SDF): The collapse of the initial program forced a major strategic pivot. Instead of trying to build a new force from whole cloth, the U.S. shifted its support to an existing, cohesive, and proven fighting force on the ground: the Kurdish-led Syrian Democratic Forces.

The U.S. began providing the SDF with arms, equipment, training, and critical support from U.S. special forces advisors and coalition airpower.

Tactical Success, Strategic Problems: From a purely tactical perspective, this new partnership was a resounding success. The SDF became the most effective ground force against ISIS in Syria. Their objectives—to clear ISIS from their territory and defend it—aligned with the U.S. objective of destroying the physical caliphate.

Backed by U.S. support, the SDF successfully liberated vast swathes of northeastern Syria from ISIS control, culminating in the capture of the ISIS capital of Raqqa in October 2017.

However, this tactical success created a severe strategic and diplomatic problem. The dominant faction within the SDF is the Kurdish People’s Protection Units (YPG), which Turkey, a key NATO ally, considers to be an extension of the Kurdistan Workers’ Party (PKK), a designated terrorist organization that has waged a decades-long insurgency inside Turkey.

U.S. support for the SDF created a deep and lasting rift with Turkey, which viewed the empowerment of a Kurdish militia on its border as a direct threat to its national security. This case study powerfully illustrates that in SFA, the “best” partner from a narrow military perspective may not be the best partner when considering broader U.S. foreign policy and alliance management goals.

Information and Cyber Operations: The Digital Battlefield

The fight against modern terrorist organizations has decisively expanded into the digital domain. Groups like al-Qaeda and especially ISIS have proven sophisticated and adaptive in their use of the internet and social media for propaganda, recruitment, fundraising, and operational planning.

In response, DoD has been forced to rapidly develop and integrate capabilities to compete on this “battlefield of narratives” and to disrupt the terrorist cyber ecosystem. These activities fall under the umbrella of Operations in the Information Environment, which DoD defines as the integrated employment of information-related capabilities to influence foreign actors.

This includes Military Information Support Operations (MISO)—formerly known as Psychological Operations—and Cyberspace Operations. U.S. Cyber Command (USCYBERCOM), in coordination with service cyber components like U.S. Army Cyber Command, is the lead entity for planning and executing these missions.

Offensive Cyberspace Operations are a key component, defined as operations intended to project power by applying force in or through cyberspace to disrupt, degrade, or destroy targeted adversary computer systems or networks.

Case Study: The Digital War Against ISIS

The campaign against ISIS forced a rapid evolution in DoD’s approach to information and cyber warfare.

Countering Propaganda: ISIS produced a torrent of high-quality, technologically advanced propaganda. It used slick, Hollywood-style videos, online magazines like Dabiq, and a massive social media presence to portray a utopian vision of life in the caliphate, attracting tens of thousands of foreign fighters.

Early U.S. government counter-messaging efforts, such as the State Department’s “Think Again Turn Away” campaign, which tried to engage directly with ISIS sympathizers on Twitter, were widely criticized as ineffective and were seen as inadvertently providing jihadists with a larger platform.

The strategy evolved to focus less on direct government-to-sympathizer messaging and more on amplifying credible, authentic voices—such as disillusioned defectors and victims—to expose the brutal reality of ISIS rule and delegitimize its narrative.

Offensive Cyber Operations (Operation GLOWING SYMPHONY): This operation, conducted by USCYBERCOM’s Joint Task Force-ARES, was a landmark moment, representing the first time the U.S. government officially acknowledged conducting offensive cyber operations against a terrorist group.

The mission targeted ISIS’s online infrastructure, aiming to disrupt their ability to distribute propaganda and communicate with followers. Tactics included deleting online files, locking administrators out of accounts by changing passwords, and disrupting servers.

Declassified after-action assessments hailed the operation as a complex success that forced the maturation of USCYBERCOM’s targeting and coordination processes. However, they also revealed that the sheer volume of data collected from ISIS networks challenged the command’s capacity for exploitation and storage at the time, underscoring the scale of the digital fight and the need for continued investment in these capabilities.

Disrupting Terrorist Financing: A powerful example of integrated cyber operations occurred in 2020 when the Departments of Justice, Homeland Security, and Treasury announced the disruption of three separate, cyber-enabled financing campaigns supporting Hamas’s al-Qassam Brigades, al-Qaeda, and ISIS.

These groups were using social media and sophisticated websites to solicit donations in cryptocurrency, which they believed to be untraceable. The U.S. operation involved tracking the flow of funds, seizing over 300 cryptocurrency accounts, taking down terrorist-run websites, and, in the case of Hamas, covertly seizing control of a donation website and redirecting the incoming funds to U.S.-controlled wallets.

This action demonstrated a direct and effective application of cyber capabilities to attack the financial lifeblood that sustains these terrorist organizations.

Core DoD Counter-Terrorism Capabilities

The evolution of America’s counter-terrorism apparatus reveals a fundamental truth about modern warfare: the most sophisticated military in history struggles not with the technical aspects of finding and eliminating terrorist threats, but with the political, legal, and strategic complexities of doing so effectively and sustainably.

The shift from the massive invasions of the early 2000s to today’s “partner-led, U.S.-enabled” approach reflects hard-learned lessons about the limits of military power in addressing the root causes of terrorism. Yet the persistence of terrorist threats across multiple continents ensures that this shadow war will continue, evolving with new technologies, new partnerships, and new legal frameworks that future generations will undoubtedly re-examine and revise.

The Pentagon’s counter-terrorism mission has become less about winning decisive battles and more about managing persistent threats through a complex combination of intelligence, partnerships, precision operations, and digital warfare. Success is measured not in territory conquered but in plots disrupted, networks degraded, and partners empowered to secure their own nations.

This represents both the maturation of American counter-terrorism strategy and its fundamental challenge: how to maintain the capabilities and partnerships necessary to protect American interests while avoiding the costly commitments that have defined the past two decades of conflict.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.