Signal &amp; Shadow is an investigative practice. OSINT tools, methodology, standards, and primary investigations.

Wi-Fi positioning and geo-IP: locating by network data.

Resolve BSSID and IP identifiers to physical locations using Wigle.net and geo-IP databases.

Network Analysis 29 Jun 2026

Network mapping with Maltego and Gephi tutorial thumbnail

Network mapping with Maltego and Gephi for investigators.

How to build, visualise and interrogate relationship graphs for OSINT investigations using open-source and community transforms.

Aircraft tracking ADS-B and transponder tutorial thumbnail

Aviation 22 Jun 2026

Tracking aircraft with ADS-B and transponder records.

How to trace any flight from squawk code to operator identity using open aviation data feeds and registration databases.

Synthetic Media 15 Jun 2026

Deepfake detection video and audio tutorial thumbnail

Detecting deepfakes in video and audio verification.

How to interrogate synthetic media for manipulation artefacts, spectral anomalies and provenance gaps before a clip reaches your newsroom.

AI in OSINT 01 Jul 2026 · 10 min

AI in OSINT · 04

AI in OSINT.

Integrating AI tools and language models into your OSINT workflow.

All AI in OSINT → 4 articles published · all displayed

Breach set identity analysis with AI thumbnail

The email address appears in four breach sets under different names.

A structured prompt that surfaces the consistency signals across a decade of breaches and ranks the attribution candidates by persistence score.

AI in OSINT 17 Jun 2026 · 9 min

Corporate identity analysis across jurisdictions thumbnail

Two companies, one director name, three jurisdictions.

A prompt that normalises registry extracts onto one schema and surfaces the fields doing the discriminating work across OpenCorporates, ICIJ and OCCRP Aleph.

AI in OSINT 03 Jun 2026 · 8 min

AIO-002 Source presence verification AI prompt thumbnail

The source says they were at the scene. The prompt tells you what to look for.

Build the verification checklist before the interview, not after. A structured AI prompt for testing source presence claims at scene.

AI in OSINT 20 May 2026 · 7 min

Cross-platform username attribution with AI thumbnail

Cross-platform username attribution with AI.

A structured prompt that holds six signal sets simultaneously and returns a per-account confidence verdict with explicit evidence gaps.

The Signal 04 Jun 2026 · 8 min

The Signal · 05

The Signal.

OSINT tools, community leads, and investigative method. Every issue covers what changed, what it means for working investigators, and what to do with it.

All issues → 3 issues published · all displayed

Free

The Signal, Issue #003.

Indonesia's military disinformation traced, Armenia's FIMI documented, and the citation failure detection will not catch.

Read issue →

The Signal 23 Apr 2026 · 17 min

Free

The Signal, Issue #002.

Europol's second sprint, the DSA mechanism across two elections, and SkyOSINT tested against live events.

Read issue →

The Signal 12 Apr 2026 · 13 min

Free

The Signal, Issue #001.

The open-source maritime tracking layer used by sanctions investigators and conflict reporters, and how to use it to evidentiary standard.

Read issue →

Investigative Hub · 06

The Investigative Hub.

Open-source tools built for active casework. No accounts, no paywalls, no data sent off-device.

Browse all tools → 9 web tools · 5 extensions live · 1 forthcoming

Web Tools

Archive Trail preserves and timestamps. OSINT Investigator runs structured queries. The Admiralty Grader scores source reliability. Chronolocation Calculator fixes footage in time. Hash Generator seals evidence. Nine tools. Open in a tab, cite the output.

Browser · No install required Browse →

Browser Extensions

Image Witness captures and hashes on right-click. Dork Builder constructs search operator strings. OSINT Pivot Bar surfaces pivot points from any page. Paper Trail logs every step. Every action timestamped for chain of custody.

Browser Extension · 5 live Install →

Visit the Investigative Hub →

Engage · 07

Training & Consultancy.

Every engagement is scoped to the question, the sensitivity, and the timeframe. Led personally by Derek Bowler. Lookbooks available on request. Initial scoping at no cost.

work@signalandshadow.io Response inside three working days

Consultancy Investigations, advisory, and editorial consultation for newsrooms and institutions.

View consultancy →

01 / Investigations

Bespoke investigations.

Commissioned open-source investigation to a defined scope. Findings package with confidence levels and chain of custody throughout.

Enquire →

05 / Advisory

Retained advisory.

Standing access to senior OSINT and forensics counsel. Live editorial guidance across active work. Retainer clients are not disclosed.

Discuss terms →

06 / Response

Incident response.

Rapid expert assessment following a verification failure or disinformation attack. Gap analysis, remediation plan, and written incident report.

Enquire →

08 / Threat

Disinformation threat assessment.

Forward-looking threat landscape report. Actor profiles, platform and vector analysis, and a recommended monitoring and response protocol.

Enquire →

09 / Consultation

Editorial consultation.

Expert written answer to a single defined question. Whether to publish, how to verify, how to attribute. Delivered inside three working days.

Submit a question →

10 / Embedded

Embedded senior practitioner.

Derek embeds for a defined period. Dedicated senior OSINT capacity, live investigative output, and a documented methodology that remains on departure.

Discuss scope →

Training 19 courses across three tiers. Masterclass, newsroom, intensive, and residency formats.

View training →

Foundational · Practitioner

Masterclass.

Individual-seat training on a specific OSINT, verification, or forensic method. Half-day to full-day. Up to 16 participants. 19 courses available.

Foundational · Practitioner

Newsroom Training.

Team-based training tailored to the institution's active casework, tool stack, and capability baseline. Pre-engagement consultation included.

Expert

The OSINT Intensive.

Two-day on-site intensive across the full OSINT methodology stack. Applied to live material throughout. Each participant leaves with a documented workflow.

Expert

Investigative Residency.

Three-day on-site residency. Live-story simulation, methods consolidation, and a written desk standard the institution owns on departure.

Signal & Shadow

Private content