Verify or Burn a Claim: Chaining Photo, Map, and Public Records
a claim is a hypothesis. chain exif, the map, the sun, and the public record until the story holds or falls apart. most fake claims fall apart on the date.
investigation
Read Full News
Social Media OSINT: Timezones From Timestamps, Networks From Replies
when someone posts tells you where they wake up, who they reply to tells you who they are. public data, read patiently, no fake friend requests.
Username and Email OSINT: Sherlock, Holehe, and Breach Pivots
handle reuse is the gift that keeps giving. enumerate accounts with sherlock, check email existence with holehe without alerting anyone, and correlate breaches to connect the dots.
Geolocate a Photo Like Bellingcat: EXIF, Reverse Image, Sun and Shadows
exif if you are lucky, reverse image search to catch recycled photos, and sun plus shadow plus landmark when the metadata is gone. verification, not stalking.