This Element is an interdisciplinary analysis of language evidence from a lone-actor terrorism attack in Halle, Germany, involving Stephan Balliet. It uses a multi-method approach, including genre, text linguistics, appraisal, and uptake, to elucidate data and provide a review of the assailant's background, warning behaviors, and red flags.

This Element is an interdisciplinary analysis of the language evidence produced before, during and following a lone-actor terrorism attack in Halle, Germany, on October 9, 2019, resulting in two casualties. During his final preparations, the perpetrator, twenty-seven-year-old Stephan Balliet, announced his attack online and disseminated a targeted violence manifesto shortly before live-streaming his violent act. This post-hoc investigation introduces a multi-method approach that synchronizes well-established qualitative methodologies for forensic text analysis – genre, text linguistics, appraisal and uptake – to elucidate these data types. Furthermore, a retroactive threat assessment based on language data from the trial transcripts provides a holistic review of the assailant's background, red flags, triggering events and warning behaviors that could have signaled his movements along the pathway to violence. The results are considered in an organizational context to highlight current challenges faced by security agencies when mitigating the risk of lone-actors who radicalize in online environments.