OSINT methods
Practical, step-by-step guides to the most common and effective OSINT techniques — from geolocating a photo to mapping a domain's infrastructure.
How to Geolocate a Photo From Visual Clues
A step-by-step method for pinning down exactly where a photo was taken — even with no metadata — by reading the image and matching it against satellite and street-level imagery.
Read the methodarrow_forwardHow to Verify a Photo With Reverse Image Search
A practical workflow for checking whether an image is genuine, when it first appeared, and whether it really shows what it claims — before you trust or share it.
Read the methodarrow_forwardHow to Find Every Account Linked to a Username
A method for taking a single handle and mapping the full set of accounts tied to it across platforms — the foundation of people-focused investigations.
Read the methodarrow_forwardHow to Investigate an Email Address
A workflow for turning an email address into intelligence: breach exposure, the services it's registered with, and the accounts and identity behind it.
Read the methodarrow_forwardHow to Map a Domain's Infrastructure
A reconnaissance method for enumerating a domain's subdomains, DNS records, certificates, and related assets to reveal an organisation's full online footprint.
Read the methodarrow_forwardHow to Set Up a Safe OSINT Research Environment
A setup method for investigating cleanly and safely — a compartmentalised browser, research accounts, and the OPSEC habits that protect both you and your findings.
Read the methodarrow_forwardHow to Investigate a Phone Number
A method for turning a phone number into intelligence — the carrier and region, the accounts it's linked to, and the identity behind it — using only public sources.
Read the methodarrow_forwardHow to Verify a Video
A frame-by-frame method for checking whether a video is authentic, when and where it was filmed, and whether it shows what it claims — before you trust or share it.
Read the methodarrow_forwardHow to Recover Deleted or Changed Web Pages
A method for retrieving pages, posts, and files that have been deleted or edited — using web archives and caches to prove what a source once published.
Read the methodarrow_forwardHow to Research a Company
A due-diligence method for uncovering a company's real owners, structure, litigation, and reputation from public records — the backbone of vetting a partner or target.
Read the methodarrow_forwardHow to Extract and Analyze File Metadata
A method for pulling the hidden data inside photos and documents — locations, authors, timestamps, and software — that reveals far more than the visible content.
Read the methodarrow_forwardHow to Trace a Cryptocurrency Transaction
A method for following money across a public blockchain — from a wallet address through transactions to exchanges and clusters — using open block explorers.
Read the methodarrow_forwardHow to Use Advanced Search Operators (Dorking)
A method for building precise search queries with operators like site:, filetype:, and intitle: to surface documents and pages that ordinary searches never reach.
Read the methodarrow_forwardHow to Monitor an Unfolding Event in Real Time
A method for turning the chaos of live social feeds and sensor data into verified situational awareness during a breaking event — without amplifying misinformation.
Read the methodarrow_forwardHow to Track a Flight, Ship, or Vehicle
A method for following aircraft, ships, and ground transport in near-real time using public tracking feeds — adding a physical dimension that social media alone can't provide.
Read the methodarrow_forwardHow to Investigate a Social Media Account
A method for deeply analysing a single social-media profile — its network, posting patterns, and leaked details — to understand who is behind it and what it reveals.
Read the methodarrow_forwardHow to Reduce Your Own Digital Footprint
A defensive method for finding and removing the public information that exposes you — data-broker listings, reused identifiers, leaked credentials, and revealing metadata.
Read the methodarrow_forwardHow to Check if a Website Is Legitimate
A method for quickly assessing whether a website is a genuine business or a scam or phishing site — using registration, infrastructure, reputation, and content signals.
Read the methodarrow_forward