Built for real-world investigations.
Intelligence Library
Get investigator-grade OSINT workflows and case studies in one place. Step-by-step methods that show how to run real investigations using real tools.
An acquisition offer creates a legitimate-sounding reason to ask for everything your analytics know. How competitive intelligence harvesting works under the pretext of due diligence, and how to tell a real buyer from a collection exercise.
Read Article →Databases do not find people. They find the last place a person intersected with a system. The working order for the first hour of a skip trace: proving the identity, reading header data like a cynic, finding the systems they still touch, and working the orbit.
Read Article →Stripping EXIF data does not anonymize a photo. Sun angles, shadow lengths, power pole standards, ridgeline profiles, and reflections all carry location data that no scrubber touches. How investigators read them, and what the technique can and cannot prove.
Read Article →Manufactured personas are ending up inside people-search databases. The tells that expose them, the fossil and provenance tests that hold up, and what you can honestly prove.
Read Article →Content theft is not rare and it is not subtle. How to prove your work was lifted, document it like an investigator, and get it taken down.
Read Article →Billions of credentials from old breaches circulate in searchable form. What breach records actually contain, what they prove and what they don't, how investigators use them as pivot points, and where the legal line sits.
Read Article →AI search can find, rank, and cite a tool without ever checking that it still works. Why AI answers keep surfacing dead and abandoned OSINT tools, why a citation is not validation, and how to operationally verify what you are handed.
Read Article →Shell networks, statutory agents, and multi-state registration loops don't stop a disciplined investigator. How to identify filing anomalies, cross-reference UCC filings and court records, and document beneficial ownership to a standard that holds under legal scrutiny.
Read Article →Public records get a lot of credit they haven't earned. Aggregators recycle outdated addresses, merged identities, and reassigned phone numbers constantly. Here's how to tell what you're actually looking at before it ends up in a report.
Read Article →A carrier lookup tells you line type and current carrier. That's it. Everything else comes from where the number has appeared in the open world. Here's what that means for how you run a phone investigation.
Read Article →The most dangerous moment in any investigation is when the data looks like it confirms what you already thought. That's exactly when discipline matters most. How confirmation bias shows up in OSINT and how to keep it from compromising the work.
Read Article →Email investigations succeed when you treat the address as a pivot rather than a conclusion. Full workflow covering passive discovery, enrichment, and documentation from a single address to defensible findings.
Read Article →Usernames alone are not identities. Step-by-step investigator workflow for username pivoting, cross-platform verification, and building a case that doesn't fall apart on false matches.
Read Article →Email tools disagree all the time. How to build a comparison workflow that accounts for why tools return different results, how to evaluate overlap, and when to trust what you're looking at.
Read Article →A simulated investigative case study using passive-only methodology. From initial profile capture to documented chain of evidence, step by step, with the full rationale for each move.
Read Article →Comprehensive OSINT handbook covering core investigative methodology, signal types, operational security, and evidence standards.
Open Guide →Email investigation workflows, pivots, and analysis tactics for investigators. Full methodology from address normalization to final report.
Open Guide →Username research, pivoting, attribution checks, and identity verification. How to build a verification matrix and avoid false attribution.
Open Guide →Phone intelligence workflows for enrichment, carrier tracing, and exposure analysis. Passive methods only. No direct contact required.
Open Guide →Image metadata analysis, reverse image pivoting, and visual verification workflows. How to turn a photo into a chain of confirmed evidence.
Open Guide →The master category page for tool discovery workflows and investigative pivots. 100 tools across email, username, phone, image, and blockchain categories.
Open Guide →A weekly publishing cadence keeps investigative guides current while rotating through key OSINT content formats.
Articles are published under /blog and cross-linked to the relevant pillar pages including the OSINT handbook and email investigation guide.