One or more defined countermeasures are selected from a countermeasure library, populated with parameters, and applied against an unknown, ambiguous, or unresponsive imminent radar threat based on an analysis of a hostile RF waveform emitted by the radar threat. The analysis can include comparing static and/or dynamic features of the hostile RF waveform with features of known hostile RF waveforms. A parameter set associated with the selected defined countermeasure in the countermeasure library can be selected. Waveform features can be categorized and sub-categorized for comparison with the known hostile waveforms. A plurality of features can be detected and compared. The analysis can include correlating behavior patterns of a plurality of hostile RF waveforms emitted by the radar threat. A cognitive intelligence trained using a threat database and library of corresponding countermeasures can analyze the hostile RF waveform, select the defined countermeasure, and/or select or generate the parameters.