This week’s huge protests in Israel drew huge crowds to the streets – but how many people took part? Crowd sizes are often used as evidence to show how widely supported a particular cause is, so being able to determine how many people took part in a demonstration is an important skill for those working …
If you’ve been interested in geolocation for any length of time, you’ll already be familiar with some of the most common tools that researchers make use of: Google Maps & Street View, Google Earth, reverse image search tools, Suncalc, and so on. There are many lesser-known tools that are also useful and can help to …
In this video Technisette and I joined David Bombal to demonstrate some different geolocation techniques. We covered quite a few topics including: EXIF Data Using terrain features to find locations with Google Earth Removing unwanted parts of an image to do better reverse image searches Cropping and reverse searching images with Bing and Google Lens …
One of the biggest challenges of internet investigation is preserving data once you’ve found it. We have access to more information than ever before, but so much of it can be easily lost if we don’t take steps to archive it. If you’ve ever bookmarked an important resource only to come back later and see …
There’s a huge difference between countries when it comes to using publicly available records for OSINT. If you’re researching a subject in the USA there’s a wealth of available information. In the EU it’s almost the opposite and it can be very difficult to find any public data at all. The UK is much more …
Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it was helpful for me to transfer habits and methodologies from traditional investigation to the subject …
Extract, Research, Verify: Quiztime 6th October 2020. Read More »
This article was written jointly with Matthias Wilson (@MWOSINT). It is also published on his own site here. IP addresses feature prominently in digital investigations, but how useful are they for geolocation? The truth is that while IP addresses have many investigative uses, they can be quite unreliable as a precise geolocation method. The limitations …
Hunchly is an excellent OSINT tool designed to capture and record your browser activity as you go. Once activated it sits quietly in the background as you browse and saves copies of webpages as you view them. It also records searches, captures EXIF data from images, takes screenshots, and saves lots of other useful data …
Using photographs for OSINT purposes is not new but almost all work of this kind mostly focuses on the visual content of images. Much less well known is the usefulness of image meta- and file data for research purposes. Beyond the visual appearance of an image there is often additional information hidden within an image …
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible to construct a timeline of when various elements in webpage were put together and so …
Website Forensics: How To Detect Editorial Changes Read More »