This website uses cookies

Read our Privacy policy and Terms of use for more information.

AI-assisted content
MAR · 006  /  OF 07
  Maritime Intelligence

Maritime incidents produce a paper trail across multiple regulatory systems. A collision, grounding, fire, or structural failure triggers mandatory reporting to the flag state, port state control, and in many jurisdictions the maritime casualty investigation authority. That documentation, when recovered and cross-referenced, provides a contemporaneous record of the event: what the vessel was doing, who was responsible, what damage occurred, and whether the subsequent account matches the initial reports. The challenge is not that the records do not exist — it is knowing where each one lives and how to retrieve it.

Use incident documentation methodology when reconstructing a collision, grounding, or casualty from open sources, when establishing the sequence of events before and after an incident, or when corroborating or challenging an operator's account of what occurred. A flag state casualty report, individually, reflects one jurisdiction's investigation. AIS replay, IMO filings, PSC records, and meteorological data, corroborated across sources, produce a documentary record that is substantially harder to contest.

MAR-006 sets out the methodology for recovering incident documentation, reconstructing event timelines, and corroborating maritime casualty records to evidentiary standard.

Six tooling sources, four OPSEC requirements, seven workflow steps, five false-positive patterns, five chain-of-custody requirements, six key queries.

In this card
01
Required Tools
Six databases covering IMO filings, EMSA, AIS replay, and meteorological archives.
02
OPSEC
Disclosure obligations and source protection in incident investigation.
03
Workflow
Seven-step sequence from incident identification to timeline construction.
04
False Positives
Five documentation gaps misread as deliberate concealment of incident facts.
05
Chain of Custody
Five requirements for preserving incident records and timeline documentation.
06
Key Queries
Six queries across IMO GISIS, EMSA EMCIP, and Fleetmon databases.
 
  Deliverable

Download the card.

A PDF version of MAR-006 is available below for Signal subscribers.

logo

This reference card is for Signal subscribers.

Signal subscribers get the full OSINT Reference Card library, plus every Methods tutorial and Forensic Dossier.

A Signal subscription gives you:

Full OSINT Reference Card library

Methods, all tradecraft tutorials in full

Shadow Analysis, all evidence-based reporting

Forensic Dossiers, full access

Discord access included

Keep Reading