This website uses cookies

Read our Privacy policy and Terms of use for more information.

LATEST: Narrative seeding detection across languages with AI • Issue #012: Serbia's spyware denial skips one link • Investigating mobile location data and broker chains • Capstone: verifying crisis footage end-to-end
TRAINING · CURRICULUM

OSINT training built by working investigators, for working investigators.

Workshops, masterclasses, in-newsroom programmes, and custom curricula in open-source intelligence and digital forensics. Designed for journalists who need to verify, attribute, and stand up findings under pressure.

Training covers the methods used in live investigations. Image and video verification. Geolocation and chronolocation. Source attribution and chain of custody. Network and infrastructure analysis. Search engineering and dorking. Counter-disinformation. OPSEC for reporters and editors. Every module maps to a tool, a workflow, and a documented case.

The curriculum draws on Signal & Shadow's published Methods, the Eyewitness Textures framework, and a decade of newsroom practice. Materials are versioned against LST-001, the house editorial and structural standard.

Nineteen courses, three tiers

19 courses
FoundationalC01 to C05
C01
Verifying eyewitness media
Source, date, location. Core verification tradecraft for UGC.
Half to full day
C02
AI in the newsroom
How generative AI works, where it helps, and where it breaks.
Half to full day
C03
Digital hygiene for journalists
MFA, passwords, encryption, and risk-tiered tool stacks.
Half day
C04
Dorking for journalists
Search operators, filetype queries, and blended AI discovery.
Half to full day
C05
Copyright and responsible use of eyewitness media
Licensing, attribution, and clearance for eyewitness and UGC content.
Half day
PractitionerC06 to C15
C06
Mastering eyewitness media
Flagship two-day workshop: forensics, geolocation, and chain of custody.
Two days
C07
AI prompts, dorking, and OSINT workflows
RAFT chains, deep-web discovery, and AI-assisted investigation.
Full day
C08
Geolocation and chronolocation
Visual cues, sun-angle analysis, satellite cross-reference, and timelines.
Full day
C09
Combating disinformation
Coordinated behaviour, narrative tracing, and debunking methodology.
Full day
C10
Hate speech and disinformation
Coded rhetoric, dogwhistles, algospeak, and algorithmic radicalisation.
Full day
C11
Source protection and OPSEC
Threat modelling, secure comms, and jurisdiction-aware OPSEC.
Full day
C12
Maritime intelligence
Vessels, AIS gaps, sanctions screening, and ownership tracing.
Full day
C13
Corporate and financial investigation
Beneficial ownership, shell structures, and public financial records.
Full day
C14
Network and infrastructure investigation
Domains, hosting, DNS history, and digital infrastructure attribution.
Full day
C15
Satellite imagery analysis
Change detection, damage analysis, and environmental investigation.
Full day
ExpertC16 to C19
C16
The OSINT Intensive
Two-day on-site intensive across the full OSINT methodology stack.
Two days
C17
Investigative Residency
Three-day residency. Live-story simulation and written desk standard.
Three days
C18
Deepfake and synthetic media
GAN artefact analysis, audio fingerprinting, and C2PA validation.
Full day
C19
OSINT for legal and litigation
Open-source methods calibrated to evidentiary and chain-of-custody standards.
Full to two days

Full course descriptions in the Signal & Shadow Training lookbook. Request a copy at [email protected]

How we deliver it

4 formats
FORMAT · 01

Workshops

Half-day and full-day formats on a single method or toolset. Suited to teams who need a focused capability uplift.

Half day · Full day
FORMAT · 02

Masterclasses

Two to five day intensives across a coherent skill area. Open enrolment seats and private cohorts both available.

2 to 5 days
FORMAT · 03

In-newsroom training

On-site or remote programmes embedded in a working newsroom, including capability assessment and follow-up.

On-site or remote
FORMAT · 04

Custom curricula

Built for organisations with specific verticals or threat models: defence, humanitarian, regulatory, and academic clients.

Bespoke scope

Who it's for

Investigative reporters and editors. Newsroom verification desks. Standards and trust teams. Fact-checking organisations. Research institutes. Civil society monitors. Anyone whose work depends on verifying claims about the physical, digital, or human world.

Sessions are pitched at working practitioners. Prior OSINT experience helps but is not required for foundational modules.

What you get

6 deliverables
Live instruction
Delivered by Derek Bowler and, where format requires, named contributors with relevant practitioner credentials.
Method cards and reference materials
Working-format documents designed to live next to a keyboard, not in a slide deck.
Workflow templates
The same templates used in live Signal & Shadow investigations, ready to drop into your verification queue.
Case files
Drawn from real investigations, redacted where required, structured for teaching.
Tooling access
Post-training access to updated tooling through Signal & Shadow's Chrome extension suite.
Capability baseline and uplift
A clear capability baseline before the programme and a documented uplift after it.

Lead trainer

No subcontracting without disclosure
Derek Bowler
Derek Bowler
Investigative journalist and OSINT architect

Derek Bowler is an investigative journalist and OSINT architect with more than a decade of practice at the intersection of open-source intelligence, digital forensics, and editorial accountability.

He spent nine years at the European Broadcasting Union (2017 to 2026), most recently as Head of Eurovision Social Newswire and founding lead of Eurovision News Spotlight, the EBU's OSINT and fact-checking network, a 30-organisation coalition of public service broadcasters including the BBC, ZDF, France Televisions, CBC, and RTE. He founded the Eurovision Social Newswire in 2017 and served as Head of Social Newsgathering from 2018 to 2025, leading a global team of forensic journalists and OSINT specialists. During that period he created a verification residency model recognised by the Council of Europe as a benchmark for investigative resilience.

He is a former Faculty Member at the EBU Academy, where he designed and delivered masterclasses in OSINT methodology, digital forensics, and geolocation, and contributed courses to the EBU Academy School of AI, which received the European Digital Skills Award 2025 from the European Commission. He serves as an assessor for the European Fact-Checking Standards Network (EFCSN) and the European Digital Media Observatory (EDMO).

Earlier, at Storyful in Dublin (2013 to 2016), he conducted digital forensics supporting The Wall Street Journal, Reuters, Sky News, and The New York Times across Syria, Iraq, and Ukraine.

He is a chapter author in Eyewitness Textures (McGill-Queen's University Press, 2024) and the founder of Signal & Shadow. All training engagements are led personally, to a documented standard.

Years active in OSINT14+
Newsrooms trained40+
House standardLST-001
TimezoneCEST
Full LinkedIn profile →
SELECTED INVESTIGATIONS
Israeli government agency paid for Eurovision vote targeting
May 2025
UNIFIL bases under Israeli fire: targets or collateral damage
Oct 2024
Russification in occupied Ukraine: torture, deportation, cultural erasure
Nov 2023
The Missing Children of Ukraine
Feb 2023
INSTITUTIONAL AFFILIATIONS
Assessor, European Fact-Checking Standards Network (EFCSN)
2023–Present
Assessor, European Digital Media Observatory (EDMO)
2021–Present
European Digital Skills Award 2025, European Commission
Award
PUBLICATIONS
Eyewitness Textures: User-Generated Content and Journalism in the Twenty-First Century
McGill-Queen's University Press · 2024 · Chapter author

Enquire

Brief us on your team, timeframe, and goals
Scope, format, and pricing returned inside three working days.
Email [email protected] →