Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it…
Tag: Techniques
DNS Records, QAnon, and How To Handle Uncertainty In OSINT.
Twitter would not be Twitter without a daily dose of QAnon drama. Recently there were claims that since Q-drop archive site qmap.pub now shares the same IP as 8Kun proved that 8Kun owner Jim Watkins is Q. I’m not sure…
Website OSINT: What’s The Link Between Antifa.com and Russia?
The term “OSINT” sometimes gets thrown around a little too loosely. The “open source” part of OSINT is straightfoward enough: there’s a world of information out there and with enough digging and practice you can find almost anything you could…
Chronolocation Clues – Quiztime 11th May 2020
Not all image-based OSINT work is about geolocation. It is always helpful to know where a photo was taken, but knowing when an image was taken can be just as important when trying to verify it. Is this a COVID-hit…
The Secret Life Of JPEGs
Using photographs for OSINT purposes is not new but almost all work of this kind mostly focuses on the visual content of images. Much less well known is the usefulness of image meta- and file data for research purposes. Beyond…
Using Gap Analysis For Smarter OSINT – Quiztime 4th March 2020
In OSINT we make use of the wealth of information that is now available to us, but so often it becomes the case that there is too much information for us to process effectively. It’s easy to drown in a…
Who Stole My Stuff? Finding Out Who Is Behind A Website
The last blog post I wrote about Fake Twitter profiles is by far the most widely-read post I’ve ever published since I started this blog. It’s nice when people read your work but there was a little sour note with…
Signs You’re Following A Fake Twitter Account…
The challenge of dealing with fake accounts that spread disinformation is probably one of the greatest challenges facing the large social media companies. Most methods used to detect fake Twitter accounts (like the excellent Botometer) assume that they are working…
Seeking Sector035 – Quiztime 30th January 2020
January has been a busy month both personally and professionally so I haven’t been able to take part in as many Quiztime challenges as I’d like to. Fortunately I had time to try Sector035’s Thursday Quiz. Sector035 posted not one…
Website Forensics: How To Detect Editorial Changes
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible…