Archive

All Posts

Email header analyzer: check if an email is genuine

Guides

Oct 19, 2026

Email header analyzer: check if an email is genuine

Read the Received path and SPF, DKIM and DMARC results to test where a suspect email really came from

Derek Bowler

Sanctions list search: how to check who is sanctioned

Financial Intelligence

Oct 18, 2026

Sanctions list search: how to check who is sanctioned

Run one name across the OFAC, UK, EU and UN lists, match identifiers and record a result that holds up

Derek Bowler

Meta Ad Library: how to investigate who is behind an ad

SOCMINT

Oct 17, 2026

Meta Ad Library: how to investigate who is behind an ad

Search the library, read Page transparency and pivot on disclaimers to trace who runs an ad and where

Derek Bowler

Riyadh airport strikes: the timeline Saudi alerts left out

The Signal

Oct 15, 2026

Riyadh airport strikes: the timeline Saudi alerts left out

The record held enough to flag Riyadh's deadliest strike two days early. Flight playback and NOTAMs keep the airport's own clock. Interception claims now sit beside an airport that kept closing

Derek Bowler

Armed group identification: attribution and tracking

OSINT Cards

Oct 14, 2026

Armed group identification: attribution and tracking

Geolocate armed group activity, map commander networks and trace supply chains to produce exhibit-ready attribution

Derek Bowler

OSINT in conflict zones: weapons, units and evidence

Methods

Oct 13, 2026

OSINT in conflict zones: weapons, units and evidence

Identify weapons, attribute units and geolocate conflict footage so your attribution holds up to scrutiny

Derek Bowler

Archive

Email header analyzer: check if an email is genuine

Sanctions list search: how to check who is sanctioned

Meta Ad Library: how to investigate who is behind an ad

Riyadh airport strikes: the timeline Saudi alerts left out

Armed group identification: attribution and tracking

OSINT in conflict zones: weapons, units and evidence

Signal & Shadow