Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it was helpful for me to transfer habits and methodologies from traditional investigation to the subject …
Extract, Research, Verify: Quiztime 6th October 2020. Read More »
Twitter would not be Twitter without a daily dose of QAnon drama. Recently there were claims that since Q-drop archive site qmap.pub now shares the same IP as 8Kun proved that 8Kun owner Jim Watkins is Q. I’m not sure that a reverse IP lookup by itself can really stretch that far, but it does …
DNS Records, QAnon, and How To Handle Uncertainty In OSINT. Read More »
The term “OSINT” sometimes gets thrown around a little too loosely. The “open source” part of OSINT is straightfoward enough: there’s a world of information out there and with enough digging and practice you can find almost anything you could ever think of – but by itself this is not OSINT. The “intelligence” part of …
Website OSINT: What’s The Link Between Antifa.com and Russia? Read More »
This article was written jointly with Matthias Wilson (@MWOSINT). It is also published on his own site here. IP addresses feature prominently in digital investigations, but how useful are they for geolocation? The truth is that while IP addresses have many investigative uses, they can be quite unreliable as a precise geolocation method. The limitations …
During lockdown I’ve spent a lot of my evenings trying to improve my coding and data science skills with Datacamp. As I’ve tried to apply my new found knowledge to real world projects I’ve come to learn that about 80% of working with data is cleaning it up and making it tidy before you can …
Over the weekend my site suffered from a spike in traffic that caused the WordPress interface and then the rest of the site to grind to a halt. This blog runs on a VPS that has about the same computing power as a first generation Raspberry Pi and so it doesn’t take much to exhaust …
Hunchly is an excellent OSINT tool designed to capture and record your browser activity as you go. Once activated it sits quietly in the background as you browse and saves copies of webpages as you view them. It also records searches, captures EXIF data from images, takes screenshots, and saves lots of other useful data …
I started writing up this Quiztime post almost two months ago but then life got very busy and I never managed to finish it. This was a really fun quiz by Lars Wienand and the solution was not as obvious as I first thought it was so a little extra digging was required. Here’s the …
Lost In The Woods & Translation Troubles – Quiztime 10th March 2020 Read More »
Not all image-based OSINT work is about geolocation. It is always helpful to know where a photo was taken, but knowing when an image was taken can be just as important when trying to verify it. Is this a COVID-hit Italian hospital, or the aftermath of an earthquake in Croatia? Are these food packages left …
Using photographs for OSINT purposes is not new but almost all work of this kind mostly focuses on the visual content of images. Much less well known is the usefulness of image meta- and file data for research purposes. Beyond the visual appearance of an image there is often additional information hidden within an image …