Archive

All Posts

Writing style analysis across three anonymous forums

AI in OSINT

Jul 15, 2026

Writing style analysis across three anonymous forums

How a structured AI prompt surfaces authorship signals across anonymous forum handles — and where it breaks

Derek Bowler

Cross-platform username tracing to identity attribution

OSINT Cards

Jul 14, 2026

Cross-platform username tracing to identity attribution

Enumerate handles across 400+ platforms with Sherlock, cross-reference breach data and build a convergence dossier

Derek Bowler

Telegram, Discord and niche forum investigation

Methods

Jul 13, 2026

Telegram, Discord and niche forum investigation

Map channels, trace propagation paths and extract membership data from closed platforms without triggering account exposure

Derek Bowler

Telegram OSINT: investigate channels, groups and users

Guides

Jul 11, 2026

Telegram OSINT: investigate channels, groups and users

A practitioner workflow for mapping public Telegram channels, identifying account metadata, and building an evidence-grade investigation file

Derek Bowler

Email OSINT: trace an address to accounts and infrastructure

Guides

Jul 10, 2026

Email OSINT: trace an address to accounts and infrastructure

A structured workflow for tracing an email address through breach history, account enumeration, domain infrastructure, and email header analysis.

Derek Bowler

The Signal

Jul 9, 2026

The Signal — Issue #003: Iran's unclaimed tanker strikes

Iran struck three tankers off Oman's coast on a route its own broadcaster had already warned ships to avoid. A free satellite pass and a UKMTO advisory trail build the record Iran never had to claim. No formal admission survives this timeline

Derek Bowler

Secure source communications: Signal, SecureDrop, Tails

OSINT Cards

Jul 7, 2026

Secure source communications: Signal, SecureDrop, Tails

Run MVT device checks, route documents through SecureDrop and document every source contact to chain-of-custody standard

Derek Bowler

Wi-Fi positioning and geo-IP: locating by network data

Methods

Jul 6, 2026

Wi-Fi positioning and geo-IP: locating by network data

Resolve BSSID and IP identifiers to physical locations using Wigle.net and geo-IP databases

Derek Bowler

The Signal

Jul 2, 2026

The Signal — Issue #002: When the open record fractures

Twin earthquakes sealed Venezuela's worst-hit zone within hours. Copernicus EMS activated damage mapping the next day. The gap between official figures and the open record is documentable now, without physical access

Derek Bowler