Turn card numbers into STIX 2.1 objects. Enrich the data with issuer information. Track transactions made by the card. Then link the cards and transactions to other STIX objects in your research (Actors, Incidents, etc.).

I recently conducted a project to identify the most prolific ransomware based on the ransom payments being made. Let me walk you through how I did it.