OSINT methodology, forensic reference material, and practitioner briefings.
Built for investigative journalists, practitioners, and verification desks. Training and consultancy available on request.
Latest publication.
The most recent story from the desks.
Telegram, Discord and niche forum investigation: mapping networks without joining them.
Map channels, trace propagation paths and extract membership data from closed platforms without triggering account exposure. Public data alone maps the network from the outside.
Cross-platform username tracing to identity attribution
OSINT Cards
Correlate usernames across platforms, resolve conflicts in the record and
build a graded attribution dossier to evidentiary standard.
14 Jul
›
Writing style analysis across three anonymous forums
AI in OSINT
A structured AI prompt that extracts stylometric signals from forum posts and
returns a ranked attribution confidence score.
15 Jul
›
Satellite imagery change detection: Sentinel and Landsat
Methods
Use ESA and USGS multispectral archives to document ground-truth change over
time, with a reproducible evidence chain.
20 Jul
›
Identifying satellite operators and owners
OSINT Cards
Cross-reference ITU frequency filings, Space-Track TLE data and corporate
registries to name the licensed operator and beneficial owner behind a satellite.
21 Jul
›
Financial flows and sanctions evasion: investigator's guide
Methods
Map financial flows, identify sanctions exposure, and trace beneficial
ownership through corporate registries.
27 Jul
›
OSINT Reference Card Library.
Field-ready tradecraft. Live next to a keyboard, not in a slide deck.
HUM-002
Secure source communications: Signal, SecureDrop, Tails.
Run MVT device checks, route documents through SecureDrop and document every source contact to chain-of-custody standard.
FIN-002
Property and land registry investigation: beneficial owner tracing.
Identify beneficial owners behind corporate property titles using HM Land Registry, Companies House and the Register of Overseas Entities.
AVI-002
Aircraft registration and ownership databases.
Query civil aviation registries, trace ownership chains through corporate structures, and corroborate flight history against ADS-B data.
TEL-002
Trace a mobile number to a named subscriber identity.
Parse the MSISDN, confirm HLR status, pivot to social media and breach records, and build a graded attribution dossier.
GEP-001
Conflict zone mapping: satellite imagery and ACLED.
Sentinel-1 SAR maps conflict damage where optical imagery fails. Eight-step workflow from damage assessment to chain-of-custody archiving.
ACU-002
Environmental sound analysis for location verification.
Apply Audacity, Merlin Bird ID and xeno-canto to extract locational intelligence from ambient audio in recordings to evidentiary standard.
COR-001
Company registry research across jurisdictions.
Retrieve statutory filings, trace officer networks and map corporate structures using Companies House, OpenCorporates and Orbis.
OPS-001
OPSEC for investigators: eight-step security baseline.
Configure Signal, Mullvad and ProtonMail, separate investigative hardware, and document sessions to chain-of-custody standard.
OSINT Methodology Tutorials.
Step-by-step tutorials drawn from working casework.
Telegram, Discord and niche forum investigation: mapping networks without joining them.
Map channels, trace propagation paths and extract membership data from closed platforms without triggering account exposure.
Wi-Fi positioning and geo-IP: locating by network data.
Resolve BSSID and IP identifiers to physical locations using Wigle.net and geo-IP databases, then cross-reference both before you publish.
Network mapping with Maltego and Gephi for investigators.
How to build, visualise and interrogate relationship graphs for OSINT investigations using open-source and community transforms.
Tracking aircraft with ADS-B and transponder records.
How to trace any flight from squawk code to operator identity using open aviation data feeds and registration databases.
AI in OSINT.
Integrating AI tools and language models into your OSINT workflow.
The email address appears in four breach sets under different names.
A structured prompt that surfaces the consistency signals across a decade of breaches and ranks the attribution candidates by persistence score.
Two companies, one director name, three jurisdictions.
A prompt that normalises registry extracts onto one schema and surfaces the fields doing the discriminating work across OpenCorporates, ICIJ and OCCRP Aleph.
The source says they were at the scene. The prompt tells you what to look for.
Build the verification checklist before the interview, not after. A structured AI prompt for testing source presence claims at scene.
Cross-platform username attribution with AI.
A structured prompt that holds six signal sets simultaneously and returns a per-account confidence verdict with explicit evidence gaps.
The Signal.
A weekly practitioner briefing built around one open-source methodology. Each issue takes a live event as proof the technique matters, then builds the evidentiary file around it.
The Signal, Issue #003.
Iran struck three tankers off Oman's coast on a route its own broadcaster had already warned ships to avoid. A free satellite pass and a UKMTO advisory trail build the record Iran never had to claim.
The Signal, Issue #002.
Twin earthquakes sealed Venezuela's worst-hit zone within hours. Copernicus EMS activated damage mapping the next day. The gap between official figures and the open record is documentable, without physical access.
The Signal, Issue #001.
A drone struck the Ever Lovely on an authorised corridor and Iran denied it. The heading field in AIS data caught four coerced vessels before a weapon was fired.
The Signal · Weekly Briefing
One open-source methodology. One live investigation. Every week.
A weekly practitioner briefing built around one open-source methodology. Each issue takes a live event as proof the technique matters, then builds the evidentiary file around it. Free. Read by investigative journalists, newsroom verification leads, and OSINT practitioners.
