Blog
Blog
Methods for open-source investigation: what an email, a username, a photo, a domain or a company record can tell you, and how to work with it lawfully.
8 articles · 6 topics
Geolocating a photo or a point on the map
How to place a photo using clues in the scene, OpenStreetMap and Overpass, street-level imagery and shadows, and where the ethical limits lie.
Email OSINTChecking breach exposure without touching passwords
Using Have I Been Pwned, XposedOrNot and LeakCheck to measure an email's breach exposure, and why handling leaked passwords crosses a line.
Ethics and lawOSINT and the GDPR: investigating within the law
Lawful basis, purpose limitation, minimisation, special categories and audit trails: how to apply the GDPR to an OSINT investigation.
Company recordsWho runs a company: BORME, Companies House and OpenCorporates
How to find out who runs a company in Spain and the UK using BORME, Companies House and OpenCorporates, without mixing up namesakes.
Domain and IP reconDomain and IP reconnaissance with open sources
DNS, RDAP, Certificate Transparency, passive DNS, exposed services and reputation feeds: a passive method for analysing a domain or IP.
Image OSINTReverse image search and photo metadata
EXIF metadata, why social networks strip it, reverse image search and perceptual hashing to find the same photo, without facial recognition.
Username OSINTSearching a username across hundreds of sites
How WhatsMyName, Sherlock and Maigret work, why they return false positives, and how to tell whether two accounts with one handle share an owner.
Email OSINTHow to investigate an email address with OSINT
What open sources reveal about an email address: provider and MX, Gravatar, registered services, breach exposure, and how to corroborate it.
No article matches your search.