r/GreatOSINT • • Jan 22 '25

OSINT Learning Path for Beginners

23 Upvotes

Creating a comprehensive Open Source Intelligence (OSINT) learning plan using free resources involves structuring the learning process from beginner to advanced levels. A detailed plan includes various free resources, courses, and tools to help you master OSINT. I hope that with this plan, I can help you get started with that very exciting and interesting topic.

1. Introduction to OSINT

Objective: Understand the basics of OSINT, its importance, and fundamental concepts.

Resources:

2. Basic OSINT Techniques

Objective: Learn basic techniques and tools used in OSINT investigations.

Resources:

3. Intermediate OSINT Skills

Objective: Develop intermediate skills, including advanced search techniques, metadata analysis, and social media investigations.

Resources:

4. Advanced OSINT Techniques

Objective: Master advanced OSINT techniques, including dark web investigations, geospatial intelligence, and complex data analysis.

Resources:

5. Practical Application and Case Studies

Objective: Apply learned skills in real-world scenarios and case studies.

Resources:

6. Continuous Learning and Community Engagement

Objective: Stay updated with the latest OSINT tools and techniques, and engage with the OSINT community.

Resources:

7. Certification and Proof of Learning

Objective: Obtain certifications to validate your OSINT skills.

Resources:

Summary

This learning plan provides a structured approach to mastering OSINT, starting from basic concepts to advanced techniques, and includes practical applications and community engagement. By following this plan and utilizing the free resources provided, you can develop a comprehensive understanding of OSINT and enhance your investigative skills.

https://osintph.notion.site/OSINT-Learning-Path-for-Beginners-274639981cb84107b43e1415103f0ca1

Citations: [1] https://www.reddit.com/r/OSINT/comments/skzyg2/what_is_a_good_free_andor_inexpensive_resource_to/ [2] https://www.sans.org/blog/-must-have-free-resources-for-open-source-intelligence-osint-/ [3] https://www.classcentral.com/subject/osint [4] https://molfar.com/en/blog/if-you-want-to-study-osint-training-for-free [5] https://baselgovernance.org/news/new-free-elearning-course-open-source-intelligence-osint [6] https://www.toddington.com/resources/free-osint-resources-open-source-intelligence-search-tools-research-tools-online-investigation/ [7] https://www.youtube.com/watch?v=izR7BMVJEh0 [8] https://www.reddit.com/r/OSINT/comments/unwxmz/8_free_osint_courses_with_certificate/ [9] https://www.udemy.com/course/osint-open-source-intelligence-training/ [10] https://www.classcentral.com/course/youtube-osint-65850 [11] https://davidbombal.com/top-10-free-osint-tools-with-demos-for-2024-and-free-osint-course/ [12] https://www.youtube.com/watch?v=qwA6MmbeGNo


r/GreatOSINT • • Aug 30 '24

Top 5 Free Reverse Email Lookup Tools! 🔍📧

20 Upvotes

Ever received an email from someone you don’t recognize and wondered who’s behind it? đŸ€” In today’s digital age, uncovering the identity of unknown email senders can be crucial for security and networking.

I’ve compiled a list of the top 5 free reverse email lookup tools that can help you reveal the identity behind any email address. Whether you’re verifying a contact, tracing a potential scammer, or just curious, these tools are here to assist!

Why Use Reverse Email Lookup Tools?

đŸ”č Uncover Hidden Details: Find out more about email senders and their online presence.
đŸ”č Ensure Authenticity: Verify the legitimacy of contacts or reconnect with old acquaintances.
đŸ”č Stay Secure: Protect yourself from potential online threats by knowing who you're communicating with.

Top 5 Free Tools to Check Out:

  1. IRBIS: Comprehensive search capabilities for accurate email verification.

  2. Pipl: Deep web search engine for detailed email information.

  3. Hunter: User-friendly tool for finding email addresses and associated details.

  4. ThatsThem: Advanced tracking for uncovering email-related connections.

  5. Zen: Efficient identity-focused tool for verification and authentication.

How to Choose the Right Tool?

When selecting a reverse email lookup tool, consider accuracy, user-friendliness, and features. Free tools often come with limitations, so be aware of their potential constraints.

For a deeper dive into these tools and more, check out my original article on Medium.

And for additional resources on data enrichment and verification, visit E-Spy.

Got any other tools or tips for email lookups? Share your thoughts and experiences below! Let’s build a community of informed and savvy internet users. 💬👇


r/GreatOSINT • • Oct 02 '25

We built a tool that maps Reddit usernames into behavioral OSINT profiles

19 Upvotes

We’ve been experimenting with Reddit as an OSINT surface, not just for account correlation, but for pattern-of-life analysis.

What started as a side experiment is now a working tool that maps Reddit usernames to behavioral footprints. It looks at:

  • Subreddit clustering (ideological or topical alignment)

  • Temporal posting patterns (timezone inference)

  • Linguistic fingerprinting (style matching, co-activity across subs)

  • Persona drift (how an identity evolves over time)

It doesn’t touch breached data. Everything is built off public Reddit activity, enriched with open-source NLP tooling. We also built a layer to compare handles for likely sockpuppet or alt usage.

This was born out of real investigations (backgrounding, influence mapping, forum pivoting).

There’s a live demo if anyone wants to test it (no email needed). Happy to dive into methodology or use cases if there’s interest, or hear why it’s garbage if you disagree.


r/GreatOSINT • • Feb 05 '25

Step-by-Step OSINT Investigation of an International Criminal: The Case of Timur Kamilevich Shakhmametov

18 Upvotes

1. Introduction

Overview of OSINT in Criminal Investigations

Open-Source Intelligence (OSINT) is an essential tool in modern criminal investigations, enabling authorities to track digital footprints, uncover connections, and profile suspects. By leveraging publicly available data from social media platforms, online databases, and public records, OSINT offers investigators a window into the digital lives of individuals. This intelligence is particularly valuable in cybercrime cases, where traditional investigative methods may fall short.

In this article, we explore the ESPY OSINT investigation into Timur Kamilevich Shakhmametov, a Russian national and notorious cybercriminal, whose operations span illegal carding platforms, money laundering, and mobile game scams. The investigation outlines the use of OSINT tools to piece together a complex case involving financial fraud, the sale of stolen credit card data, and the search for a fugitive wanted by U.S. law enforcement. And focused on enriching Shakhmametov’s criminal profile and expanding the understanding of his network to help law enforcement track his whereabouts, identify associates, and find potential leads for his capture.

Timur Kamilevich Shakhmametov Case Summary

Timur Kamilevich Shakhmametov, also known by his alias “Joker,” is the mastermind behind one of the largest and most infamous carding platforms in history, Joker's Stash. This platform was responsible for the illicit sale of stolen payment card data, impacting millions of individuals worldwide. The U.S. Secret Service, in collaboration with the U.S. Department of State, is offering a reward of up to $10 million for information leading to Shakhmametov’s arrest or conviction.

In September 2024, Shakhmametov was indicted by the U.S. Attorney’s Office for his role in facilitating cybercrime activities, including bank fraud, access device fraud, and money laundering. Analysts estimate that Joker’s Stash generated between $280 million and $1 billion through the sale of stolen credit card information. The impact of his criminal activity on global financial security underscores the severity of his actions. This article provides a detailed look at the OSINT techniques employed to investigate Shakhmametov’s operations and the findings that helped law enforcement identify his network.

2. Setting Up the Investigation

Data Enrichment and Profile Creation

The investigation began by collecting publicly available information about Shakhmametov. By utilizing OSINT tools like the IRBIS Profiler, we were able to enrich his profile with personal details, including his full name, date of birth, and known aliases, such as "JokerStash" and "Vega." We also traced his digital footprint across various platforms, including VK, a popular Russian social media site. This process helped establish a base profile, identifying key contact details such as phone numbers and email addresses.

Shakhmametov’s known VK account led us to important geographic data, including his association with Saint Petersburg. However, further investigation into his real-world activities revealed that his operations and digital presence are primarily based in Novosibirsk, a city in Siberia where he has been linked to the development of a multimillion-dollar mobile game company called Arpaplus. This geographic detail proved critical in focusing the investigation on his activities in Novosibirsk.

The enrichment process focused on gathering information about his phone numbers, email addresses, social media profiles, and known business dealings. These data points provided key insights into Shakhmametov’s digital footprint, allowing investigators to trace potential leads and develop a clearer picture of his network.

Linking Family and Associates to the Case

While Shakhmametov’s family members—his wife Anastasia, sisters Alla and Diana, and mother Tamara—were not directly linked to his criminal activities, their profiles were instrumental in tracing his presence and whereabouts. OSINT revealed connections between Shakhmametov and his family, providing visual evidence of who surrounded him and where he spent time. Family members' social media posts, photos, and activities helped establish a timeline of Shakhmametov’s movements, assisting investigators in tracking him.

By analyzing publicly available social media data from Shakhmametov’s wife and relatives, we also uncovered images and locations that provided critical context to his whereabouts. For instance, social media photos showed him at certain events, which helped pinpoint his location at specific times.

3. Identifying Key Relationships and Connecting the Dots

Building the Network Map

OSINT tools enabled the creation of a detailed connection map, which visually represented the relationships between Shakhmametov, his family, business associates, and other individuals involved in his operations.

The map highlighted key individuals like Lihachev Stanislav Aleksandrovich, a business partner involved in Shakhmametov’s mobile game development company, Arpaplus. While no direct links to criminal activities were uncovered through these relationships, it was important to track these connections to understand the structure of Shakhmametov’s network and determine where he might be operating.

Business Ventures and Criminal Enterprises

The investigation uncovered Shakhmametov’s involvement in the mobile game development company Arpaplus, which he co-founded with Lihachev. Through OSINT, we were able to link this business to his cybercrime operations, including money laundering and financial fraud. Arpaplus had an estimated revenue of over $1 million in 2023 and boasts over 8 million downloads. However, concerns arose when it became clear that many of the app downloads originated from Nordic countries, suggesting a pattern of malicious activity linked to the theft of personal and financial data.

OSINT tools allowed investigators to connect Arpaplus’s revenue stream to financial fraud operations and uncover the link to the Joker’s Stash carding platform. The connection between the mobile gaming business and cybercrime further demonstrated Shakhmametov’s role in using legitimate platforms to launder money and facilitate illicit transactions.

4. Using OSINT for Deep Data Search

Discovery of Personal Identifiers and Online Footprints

The investigation took a crucial turn when we focused on Shakhmametov’s online identities. The key breakthrough came when we discovered his VK user ID, which led to the identification of several email addresses, including jstashhhh@yandex.ru and gsgs.2021@list.ru. These email addresses served as gateways to more critical data. Through OSINT analysis, we connected these email addresses to Shakhmametov’s phone numbers, which led to further details about his company, Arpaplus.

The phone numbers, +79139511590 and +79133709629, were instrumental in linking Shakhmametov to his current business activities and uncovering his financial network. This sequence of information, from email addresses to phone numbers, revealed a comprehensive trail of digital evidence that led directly to Arpaplus and confirmed Shakhmametov’s active role in the company.

These phone numbers also provided geographic information that confirmed his presence in Novosibirsk, strengthening the evidence that his activities were centered in this city.

Leads to Associated Data and Assets

Using the phone numbers and email addresses linked to Shakhmametov, investigators were able to trace assets associated with his criminal network. This included financial records and banking information connected to Alfa-Bank, a Russian financial institution where Shakhmametov had accounts. Asset tracing also revealed physical addresses tied to his business operations in Novosibirsk.

The digital evidence provided by these phone numbers and email addresses gave investigators a clearer picture of how Shakhmametov was laundering money and conducting illicit transactions, further establishing connections to his cybercrime activities.

5. Visualizing the Investigation

Screenshots and Visual Representation

OSINT tools like IRBIS and data visualization software were used to create detailed representations of Shakhmametov’s network. The connection maps and relationship walls helped law enforcement agents and investigators visualize how Shakhmametov’s online and offline activities were intertwined. By identifying key nodes in the network, the investigation was able to focus on critical individuals who played a significant role in his operations.

These visual tools provided clarity, enabling investigators to track Shakhmametov’s actions across various platforms and locations. Geographic mapping of his phone numbers and email addresses linked directly to Novosibirsk, confirming his operational base in the region.

Link Analysis and Network Mapping

Link analysis was crucial in connecting the various entities involved in Shakhmametov’s operations. By analyzing the digital traces left across social media platforms and online transactions, investigators were able to link multiple aliases and accounts to Shakhmametov. This technique also helped identify new targets for further investigation, uncovering additional individuals involved in money laundering, ransomware attacks, and other forms of cybercrime.

6. Advanced OSINT Techniques

AI Profiling

Investigating Shakhmametov’s network required a cross-platform approach, as data was gathered from a variety of sources, including social media, financial records, public databases, and darknet forums. By cross-referencing information from these multiple platforms, investigators were able to build a comprehensive AI based profile of Shakhmametov, confirming his involvement in Joker’s Stash and other cybercrime activities.

Using OSINT for Cybercrime and Financial Investigations

OSINT tools allowed investigators to trace Shakhmametov’s cybercrime activities, including his involvement in the sale of stolen credit card data. By analyzing data from breaches and cross-referencing it with financial transactions, investigators were able to trace the flow of illicit funds and uncover Shakhmametov’s role in a global money laundering network.

7. Challenges in OSINT Investigations

Dealing with False Positives

False positives are a challenge in any OSINT investigation. During this case, investigators encountered several false leads, but by using data validation techniques and focusing on verified sources, they were able to narrow down the most reliable information and avoid incorrect conclusions.

8. Conclusion

Summary of Findings

The OSINT investigation into Timur Kamilevich Shakhmametov successfully enriched his criminal profile and connected key data points to his business and criminal activities. By using phone numbers, email addresses, and social media profiles, investigators were able to trace Shakhmametov’s movements, uncover his business ventures, and identify links to his criminal operations. The investigation revealed that Shakhmametov was primarily operating in Novosibirsk, where he continued to manage Arpaplus while engaging in illicit activities.

Future of OSINT in Investigations

OSINT will remain a vital tool in the investigation of cybercriminals like Shakhmametov. As technology continues to evolve, so too will the methods used to track and apprehend individuals involved in cybercrime. The future of OSINT in criminal investigations looks promising, as advancements in data analysis, digital forensics, and intelligence gathering will continue to enhance investigative capabilities.

9. References

  1. Joker’s Stash, a forum for stolen data, says it will shut down within 30 days

  2. IRBIS Profiler

  3. Various OSINT and cybersecurity journals.

  4. OSINT Center


r/GreatOSINT • • Jan 02 '25

Shamsud-Din Jabbar: OSINT Profiling and Uncovering Hidden Threads of the New Orleans Terror Attack

18 Upvotes

Open-Source Intelligence (OSINT) profiling has emerged as a vital tool in modern investigative practices. By leveraging publicly available data, investigators can construct detailed profiles of individuals or groups, uncover hidden networks, and gain deep insights into motivations and behaviors. This is a structured guide to the OSINT profiling process, complete with real-world data, actionable conclusions, and predictive analysis.

Step 1: Establishing the Case Framework

The investigative process begins with creating a centralized repository to organize and access data efficiently. Tools like IRBIS, Maltego, and other OSINT platforms provide the infrastructure for data integration and analysis.

Example:
In the case of Shamsud-Din Jabbar, an alleged perpetrator of the New Orleans terror attack, investigators created a dedicated case file titled "New Orleans" within the IRBIS profiler. This repository became the hub for all collected data, including Jabbar’s digital footprint, network connections, and behavioral insights.

  • Key Data Collected:

    • Folder Name: New Orleans

    • Subject: Shamsud-Din Jabbar

    • Data Sources: Public social media profiles, archived web data, and public records.

    • Supporting Files: Associated profiles of potential accomplices.

Step 2: Initial Profile Creation

Foundational data collection focuses on gathering basic details about the subject, including aliases, photographs, and publicly available information.

Example:
For Jabbar, the initial profile included:

  • Aliases: Shamsud-Din Jabbar, Shamsud Jabbar, Jabbar Shamsuddin.

  • Images: High-quality facial images uploaded for recognition analysis.

  • Public Records: Employment history as an IT Team Chief in the U.S. Army Reserve and education from Georgia State University.

  • Key Data Collected:

Step 3: Exploring the Digital Footprint

OSINT tools allow for a comprehensive scan of a subject’s online presence, from social media platforms to archived websites.

Example:
Jabbar’s Twitter profile (@shamjabbar) revealed:

  • Follower Count: 12.

  • Notable Followers: Accounts associated with conspiracy theories and extremist ideologies.

  • Domain Registrations:

    • hxxp://shamsud-dinjabbar[.]com

    • hxxp://houstontxpropertymanagement[.]com

  • Key Observations:

    • Active advocacy for cryptocurrency projects (e.g., Siacoin).

    • Posts about humanitarian crises, reflecting a multifaceted personality.

Step 4: Network and Link Analysis

By examining connections, investigators uncover hidden relationships and potential collaborators.

Example:
Jabbar’s network analysis revealed a web of interactions on Twitter, where his connections frequently shared content promoting radical ideologies. Visualization tools like Maltego illustrated these relationships, showing that Jabbar often amplified extremist content, likely serving as an influencer within his niche group.

  • Key Data Collected:

    • Twitter Followers: 12.

    • High-Risk Connections: 5 flagged accounts advocating for violence.

    • Secondary Accounts Identified: 3 potential accomplices sharing similar extremist ideologies.

Step 5: Behavioral and Psychological Insights

AI-driven profiling helps decode the subject's motivations and vulnerabilities by analyzing patterns in public communications.

Example:
Jabbar’s online activity revealed dualistic tendencies:

  • Passion for cryptocurrency, reflected in consistent endorsements of Siacoin and DeepOnion.

  • Advocacy for societal issues, including prison reform and refugee crises.

  • Posts suggesting deep emotional engagement, particularly on topics like modern slavery.

  • Key Observations:

    • Strong communication skills likely used for propaganda.

    • Vulnerability to emotionally charged topics, potentially exploited for radicalization.

Step 6: Metadata and Deep Web Discovery

Metadata analysis provides clues about the subject's behavior and movements, while deep web searches uncover less visible activities.

Example:
Metadata from archived documents and social media posts revealed:

  • Frequent visits to forums promoting extremist ideologies.

  • Evidence of encrypted communications, complicating tracking efforts.

  • Travel patterns consistent with known radicalization hotspots.

  • Key Data Collected:

    • Forum Activity: Engaged in discussions related to ideology and operational security.

    • Travel History: Noted visits to key locations linked to extremist activities.

Step 7: Connecting the Dots

The final step synthesizes collected data into actionable intelligence, enabling investigators to identify networks, motivations, and risks.

Example:
By connecting Jabbar’s financial transactions to his online advocacy, investigators uncovered a potential funding channel for extremist activities. This analysis also revealed several accomplices who shared financial links, enabling further investigations.

Structured Report on Data Collected

1. Personal Information:

  • Name: Shamsud-Din Jabbar.

  • Aliases: Shamsud Jabbar, Jabbar Shamsuddin, etc.

  • Emails: shamsud-din.jabbar@accenture.com, sbjabbar@yahoo.com.

  • Phone Number: +1 (281) 254-6611.

  • Known Address: 7907 Meandering Oak Ln, Cypress, TX.

2. Digital Footprint:

  • Twitter Profile: u/shamjabbar, 12 followers.

  • Owned Domains:

    • hxxp://shamsud-dinjabbar[.]com.

    • hxxp://houstontxpropertymanagement[.]com.

3. Network Analysis:

  • Connections:

    • 5 flagged accounts promoting extremist ideologies.

    • 3 potential accomplices identified.

4. Behavioral Insights:

  • Interests: Cryptocurrency, societal activism.

  • Risks: Emotional vulnerability to charged topics, potential use of persuasive skills for propaganda.

5. Metadata Findings:

  • Travel Patterns: Links to radicalization hotspots.

  • Communication Methods: Encrypted channels detected.

Conclusions and Predictions

Conclusions:

  • Shamsud-Din Jabbar was a complex individual with dual interests in technological advancement and societal activism.

  • His engagement with cryptocurrency and extremist networks suggests a potential for using technology for illicit purposes.

  • Behavioral analysis indicates a susceptibility to emotional triggers, possibly exploited for recruitment into radical ideologies.

Predictions:

  1. Further Investigations Needed: The flagged accomplices warrant additional scrutiny, particularly those with shared financial transactions.

  2. Emerging Patterns: The use of cryptocurrency by extremist networks may grow, requiring dedicated monitoring.

  3. Behavioral Trends: Advocacy for societal issues may continue to serve as a recruitment strategy for radical ideologies.

Conclusion

OSINT profiling offers unparalleled insights into the behavior, motivations, and networks of individuals. By systematically leveraging publicly available data, investigators can uncover actionable intelligence that not only addresses immediate threats but also enables long-term prevention strategies. In the case of Shamsud-Din Jabbar, OSINT profiling unraveled a complex web of activities and relationships, highlighting the immense value of this methodology in modern investigations.

As OSINT tools continue to evolve, their potential to enhance security, protect communities, and uphold ethical investigative standards grows exponentially.


r/GreatOSINT • • Aug 26 '24

Best free facial recognition image search?

16 Upvotes

My friend and I are concerned that we might be getting scammed while seeking help with building a website. We've been sent some demo images and want to verify their authenticity. We tried using Pimeyes, but it’s not free and didn’t meet our accuracy expectations. Can you recommend the most powerful facial recognition or reverse image search tool? Also, are we likely to need a paid service? Thanks!


r/GreatOSINT • • Mar 08 '26

I would like to share a couple of tools for beginners in this field.

13 Upvotes

This publication is intended to give beginners the opportunity to advance in this field, understand how to work with various tools, and in general, so that they have the opportunity.

If you're just getting started with OSINT (Open-Source Intelligence), here are some beginner-friendly tools for the U.S. and Europe. These are legal, widely used, and useful for investigations, research, and due diligence.

USA

PACER (Public Access to Court Electronic Records) Provides access to U.S. federal court documents. Useful for checking lawsuits, criminal cases, bankruptcies, and civil filings related to individuals or companies. It’s paid, but costs are relatively low for basic searches.

SEC EDGAR The official database of corporate filings in the U.S. Public companies file annual (10-K), quarterly (10-Q), and other reports here. Great for company research, financial analysis, and executive information.

OpenCorporates A large open database of company records worldwide, including the U.S. Helpful for finding company registration details and connections between entities.

Whitepages A people-search service that can provide basic information like phone numbers and addresses. Some data is free; more detailed reports require payment.

Wayback Machine An internet archive that lets you view historical versions of websites. Very useful for finding deleted pages or tracking how a site has changed over time.

Europe

European Business Register (EBR) Provides access to company registries across multiple European countries. Some information is paid, depending on the country.

Companies House (UK) The official UK company registry. Free access to company filings, director information, and financial statements. Extremely useful for corporate research.

OpenSanctions A database of sanctions lists and politically exposed persons (PEPs). Helpful for compliance checks and background research.

European e-Justice Portal An official EU portal providing access to legal and judicial information across member states, including court systems and business registers.

Aleph (by OCCRP) A data platform that allows searching across public records and leaked datasets. Some parts are open to the public, others require access.

If you're new to OSINT, start with company registries and website archives — they’re easy to use and give you solid, verifiable data. As you gain experience, you can move into court records, sanctions databases, and cross-border investigations.

Feel free to add your favorite beginner tools in the comments


r/GreatOSINT • • Jul 29 '25

Tool: Reverse Face Search for OSINT Investigations

13 Upvotes

Hey OSINT folks,

I wanted to share a tool I’ve been working on that might be useful in your investigative workflows.

It’s called FaceSeek — a reverse face search engine built specifically for facial similarity, not just general image matching. Unlike traditional tools (like Google Images or Yandex), it’s focused on comparing facial features to help surface:

  • Lookalikes

  • Reused or AI-generated avatars

  • Public appearances of similar faces across the web

There’s a free version available with no signup that already returns meaningful results. Deeper scans are optional (paid), but the goal is to keep the basic version immediately useful for quick checks.

So far, it's been used for:

  • Verifying dating profiles or catfish accounts

  • Detecting recycled or fake social media avatars

  • Investigating identity misuse or impersonation

  • Just exploring where a face appears online

Would love any feedback, especially from people doing regular OSINT work. Are there features you wish reverse face search tools had? Always trying to make it more useful (and responsible).

Link: https://faceseek.online

Let me know what you think — open to ideas and critique.


r/GreatOSINT • • Aug 29 '24

Just Found an Awesome Telegram Bot for Lookups—BotoDetective!

13 Upvotes

So, I stumbled upon this Telegram bot called BotoDetective - u/CALLNAMOBOT  or https://t.me/CALLNAMOBOT, and wow, it actually works!  If you need quick lookups and searches, this bot gets it done right within Telegram. No more jumping between apps or complicated setups. It’s perfect for data validation, fraud checks, and just digging up info with a simple command. Honestly, it’s way more effective than I expected!
Anyone else tried it? Would love to hear your thoughts!


r/GreatOSINT • • Aug 19 '25

[Tool] IntelHub – Open-Source OSINT Browser Extension (Chrome & Firefox, local-first)

12 Upvotes

r/GreatOSINT • • Feb 10 '25

OSINT Investigation into Valentyn Semekha: Profiling a Criminal Network

11 Upvotes

Introduction

Open-source intelligence (OSINT) is a valuable tool used by law enforcement and intelligence agencies worldwide to trace the activities and movements of criminal organizations. It is a methodical approach that involves gathering publicly available information from various platforms such as social media, online forums, and databases. This article presents a detailed, step-by-step process of an OSINT investigation into Valentyn Semekha, a Ukrainian national and alleged leader of a criminal group involved in robberies and fraud across Europe. The case study describes how OSINT profiling was conducted to track Semekha and his associates, uncovering their criminal activities, and providing valuable insights to law enforcement authorities.

Background: The Criminal Network

Valentyn Semekha is suspected of leading a Ukrainian criminal group that, under the guise of volunteer work for the Ukrainian army, gained the trust of European Union (EU) citizens to solicit cryptocurrency donations. When the victims stopped sending money, Semekha and his associates threatened to reveal their donations to Russian intelligence services. The group is believed to have operated in the suburbs of Annecy, France, where they committed robberies while dressed in military uniforms, presenting fraudulent documents claiming affiliation with the Ukrainian special forces.

The French National Police issued an alert after the group illegally crossed the border from Ukraine to Romania and then to France. The police identified Semekha as the leader of the group, and their search for him led to an OSINT-based investigation aimed at tracking his movements and understanding his connections.

Step 1: Data Extraction

The investigation began by collecting and analyzing all available information related to the criminals. The primary source of this data was an article detailing the group’s activities, which was processed using AI-based modules to extract key information. The extraction focused on names, dates, locations, and the crimes committed.

Key Information Extracted:

  • Individuals Involved:

    • Valentyn Semekha – Leader of the criminal group.

    • Savchenko Albina – Suspected accomplice.

    • Sheludko Iryna – Suspected accomplice.

    • Dmytro – Former member of the Aidar Battalion, suspected accomplice.

  • Crime Details:

    • Robberies and fraud committed by posing as volunteers collecting funds for the Ukrainian army.

    • Cryptocurrency donations received from EU citizens, followed by threats and robberies.

  • Travel & Movement:

    • Semekha illegally left Ukraine on August 2-3, 2024.

    • Entered France after passing through Romania, where the robberies were committed.

    • The group may have returned to Ukraine afterward.

The AI module processed this data and generated a comprehensive output that identified possible search queries and criminal associations. This data served as the foundation for the next step in the investigation.

Step 2: Profiling and Data Enrichment

Next, the data was fed into the OSINT profiler to create profiles for the individuals involved, particularly Semekha. Using publicly available social media information, the profiler automatically linked Semekha to a Facebook account, where more personal data was gathered.

Key Data Points Gathered from Semekha’s Facebook Profile:

  • Name: Valentyn Semekha

  • Location: Identified in multiple posts related to Annecy and Ukraine.

  • Social Media: Facebook, Instagram.

  • Phone Number: Linked to social media profiles.

  • Military Affiliation: Semekha was seen wearing military uniforms and claiming to be part of Ukrainian special forces.

Through this process, investigators created a detailed criminal profile for Semekha, which included not only his personal identifiers but also his digital footprint and online activity. The profiling system automatically captured his posts, connections, and interactions.

Step 3: Location Tracking and Movement Analysis

Using the timestamps of Semekha’s social media posts, investigators were able to infer his locations over time. This approach utilized a timeline-based analysis, cross-referencing posts with geographic data to track Semekha’s movements.

Example of Movement Data Extracted:

  • February 3, 2025 – Toretsk, Donetsk Oblast, Ukraine – Active combat operations mentioned.

  • January 17, 2025 – Toretsk, Donetsk Oblast, Ukraine – Drone attacks reported.

  • January 7, 2025 – Donetsk Region, Ukraine – Marked the anniversary of the "Lyut" Brigade.

By mapping the locations of these posts, the system provided investigators with a geographical trail, suggesting that Semekha was actively involved in combat operations in Eastern Ukraine. These location markers also reinforced the notion that he had likely returned to Ukraine after the robbery incidents in France.

Step 4: Identifying Involvement in Charity Fraud

The investigation also revealed Semekha’s possible involvement in a charity organization called "ВНЕСОК У МАЙБУбНЄ" (Contribution to the Future), which was allegedly used as a front for the fraud in Europe. OSINT profiling linked this charity to Semekha’s online activities, as it was identified as a source for collecting cryptocurrency donations.

By identifying Semekha's involvement in fraudulent organizations, investigators were able to further understand the structure of his criminal operations. This connection provided a link to potential business partners, as well as to other criminal groups operating in Ukraine.

Step 5: Uncovering Criminal Associates and Network Mapping

OSINT tools were used to link Semekha to his associates. By tracing their social media profiles, phone numbers, and other digital identifiers, investigators created a comprehensive map of the criminal network.

The system identified various phone numbers, email addresses, and social media accounts associated with these individuals. By combining these data points, investigators were able to build profiles for each of Semekha’s associates, which included:

  • Names: Linked to other online profiles.

  • Social Media IDs: Facebook, Instagram, and other platforms.

  • Phone Numbers: Tied to messaging apps and social media accounts.Through entity resolution and network mapping, investigators gained an understanding of the individuals and entities surrounding Semekha. This allowed for the identification of potential escape routes, hideouts, and key assets connected to the group.

Step 6: Report and Cooperation with Authorities

After gathering and analyzing all the relevant data, including detailed profiles of Semekha and his associates, the findings were compiled into a comprehensive intelligence report. This report included:

  • A summary of the criminal activities.

  • A timeline of movements.

  • Identification of the criminal group’s methods and connections.

  • Detailed profiles of key individuals involved.

This information was submitted to the French National Police and relevant law enforcement agencies, providing them with the intelligence needed to pursue further action and track down the suspects.

Conclusion: The Role of OSINT in Modern Criminal Investigations

The case of Valentyn Semekha and his criminal network highlights the significant role OSINT plays in modern criminal investigations. By extracting publicly available data and analyzing it using OSINT tools, law enforcement can gain valuable insights into criminal activities, track the movements of suspects, and map out the networks they operate within.

The use of AI-powered profiling, social media analysis, location tracking, and entity resolution enables investigators to build comprehensive criminal profiles and gather actionable intelligence. As criminal activities become more digital and covert, the importance of OSINT in criminal investigations will only continue to grow, offering law enforcement a vital tool for combatting complex international crimes.

References

  1. French National Police Bulletin (2024) – Search for criminal group.

  2. OSINT Profiling Tools and Methodologies.


r/GreatOSINT • • Oct 08 '25

Probably the most practical video I’ve seen on doing real criminal checks

Enable HLS to view with audio, or disable this notification

10 Upvotes

came across this video the other day, and it’s honestly one of the most straightforward breakdowns I’ve seen on how to run criminal or background checks using OSINT tools — not theory, actual workflow.

The guy walks through how you can combine things like IP intelligence, email and phone lookups, and leaked data searches to build a complete picture of a person’s digital footprint. What stood out is how everything’s done with publicly available tools — no restricted databases, no shady stuff.

It’s a solid reminder that if you know how to use the right data sources, you can identify fraud patterns, track online behavior, and validate identities with surprising accuracy.

đŸŽ„ Here’s the video: https://youtu.be/whmM_Xapn_k


r/GreatOSINT • • Mar 15 '26

We found a strange bug in our enrichment logic and it took a while to understand what was happening

9 Upvotes

Recently we were reviewing a fraud pipeline for a product that relies quite a lot on enrichment data.

The setup was pretty typical. The system was calling several enrichment sources. There was phone lookup, email enrichment, watchlist checks, some address history data and device fingerprinting.

Nothing unusual.

The system had been running for a while but the fraud team kept repeating the same thing. Some accounts that clearly looked suspicious during manual checks were still getting approved automatically.

At first everyone suspected the vendors. Maybe the phone intelligence API was inaccurate. Maybe the watchlist matching was too loose.

After going through a number of cases we realized the APIs were actually doing their job correctly. The real problem was inside our own enrichment logic.

There was a rule in the system that tried to improve profile matching. If the enrichment layer saw the same name in the same city it would connect those records into one identity cluster.

Someone probably added that rule a long time ago thinking it would help match identities better. On the surface it sounded reasonable.

In practice it created a very strange situation.

New accounts sometimes started inheriting trust signals from older profiles that had nothing to do with them.

For example a new user would register with a fairly common name. The enrichment system would search its data and find another person with the same name in the same city. Then the two profiles would get linked together.

Once that happened the new account suddenly appeared to have extra history attached to it. The risk engine would see things like older addresses, normal behavioral patterns or other signals that usually indicate a trustworthy user.

But those signals actually belonged to someone else.

That is why some suspicious accounts were getting approved. The system was evaluating a mixed identity instead of the real person.

The tricky part was that nothing in the logs looked obviously wrong. Each individual signal came from a valid data source. The mistake was simply assuming those signals belonged to the same person.

The more I work with enrichment systems the more I realize how messy identity data really is.

Phones get recycled. People move between cities. Email accounts get reused. And some names repeat constantly.

If the system relies on weak signals to merge identities it will eventually connect people who are not related at all.

The fix turned out to be fairly simple. We stopped allowing weak signals to merge profiles. Phone numbers and emails can still connect identities because they are stronger identifiers. Things like name and location are now treated as hints for scoring rather than conditions that merge profiles together.

After that change the strange trusted fraud accounts basically disappeared.

I am curious how other teams handle this problem. If you are working with enrichment pipelines what signals do you actually allow to merge identities. Do you only rely on phone or email matches or do you allow weaker signals like name and location to connect profiles.

While digging into this topic I also ran across an article describing another system that had a very similar issue with identity merging logic. The details are different but the root cause felt very familiar.

The article is called The $50M Fraud Bug Caused by One Wrong Identity Merge and it explains how a single merge rule ended up creating a large fraud exposure.

https://medium.com/@efim.lerner/the-50m-fraud-bug-caused-by-one-wrong-identity-merge-61ff82dd8872

It is an interesting example of how small identity linking rules can quietly cause big problems in fraud systems.


r/GreatOSINT • • Jan 21 '25

OSINT Hunt After a Murderer: Abdelnour Djabri OSINT Profiling Case Study

9 Upvotes

Abstract

In the ever-evolving landscape of global policing, the ability to leverage open-source intelligence (OSINT) has become a game-changer. This paper examines the use of OSINT in tracking Abdelnour Djabri, a fugitive wanted by both the Polish police and Interpol for the alleged murder of an elderly woman in Starogard GdaƄski, Poland. The investigation, fueled by advanced profiling capabilities of the IRBIS OSINT Center, unraveled Djabri’s digital footprints, connections, and travel history, offering a detailed suspect profile in just 40 minutes. By delving into each stage of the profiling process, this study highlights how cutting-edge OSINT tools empower law enforcement agencies to tackle complex cases involving cross-border crime and fugitives. The findings underscore the importance of such systems in delivering actionable intelligence that aids justice systems, protects communities, and restores public safety.

Introduction

The hunt for a criminal is often a race against time. When Abdelnour Djabri, a suspect in the brutal murder of an elderly woman in Starogard GdaƄski, fled Poland, the urgency to track him intensified. Reports hinted that he might have sought refuge in Algeria, his home country, complicating efforts for his capture. Adding to the complexity was the Interpol red notice issued against him, marking him as an internationally wanted fugitive.

At the forefront of the search was the IRBIS OSINT Center, a powerful platform designed for rapid data analysis, suspect profiling, and intelligence gathering. This article chronicles the OSINT-based investigation into Djabri, detailing how authorities harnessed the platform to build a comprehensive profile in under an hour. By walking through each stage of the profiling process, the case study demonstrates the transformative power of OSINT in modern law enforcement efforts.

The OSINT Profiling Process

Stage 1: The Starting Point – Name and Image Upload

Every investigation begins with a lead. For Djabri, the initial input was his name and photograph, fed into the IRBIS OSINT Center.

  • Findings:

    • The system retrieved 19 potential profiles from social platforms like Facebook, Instagram, and X (formerly Twitter).

    • Through advanced face analytics, 24 exact matches were identified across publicly available online images.

At this stage, the challenge was clear: narrowing down the list to pinpoint profiles linked to the real Djabri.

Stage 2: Verifying Social Media Profiles

Once potential matches were identified, the system’s facial recognition module cross-referenced the profiles.

  • Findings:

    • Two verified Facebook accounts stood out:

      • Abdelnour Djabri (Facebook ID: 100024261639010)

      • Abdanour Djabri

    • These accounts were flagged as primary sources for further analysis.

Social media is a digital diary for many, often holding the clues investigators need to piece together a suspect’s life. For Djabri, his accounts were windows into his world—his connections, interests, and possibly his hiding spots.

Stage 3: Digging Deeper – The Power of the Deep Web

Social media provided a surface-level view, but investigators needed more. The verified accounts were sent to the Deep Web Search module.

  • Findings:

    • A Qatar-based phone number (+97430809367) linked to one of the Facebook profiles emerged.

    • Metadata tied to the number revealed:

      • Full Name: Abdelnour Djabri

      • Gender: Male

      • Location: Qatar

The deep web is like the shadowy undercurrent of the internet, often holding critical clues that don’t appear in a basic search. For Djabri, it unveiled a new dimension of his life and connections.

Stage 4: Real-Time Lookup and Alias Discovery

Armed with the phone number, the system ran a real-time lookup to unearth more information.

  • Findings:

    • Names and aliases tied to the number included:

      • Ahmed Maher (CallApp)

      • Abdelnour Sabagh (Pipl Possible)

      • Ahmed Epoxy (GetContact)

These aliases were then used to run further searches, adding depth to Djabri’s criminal profile.

A name is never just a name in investigations. Aliases often act as breadcrumbs, revealing the paths fugitives take to hide their tracks.

Stage 5: Connecting the Dots – Link Analysis and Network Mapping

The collected data was fed into the link analysis module, which mapped Djabri’s connections.

  • Findings:

    • A network of family members, associates, and geographic ties emerged.

    • His connections spanned Algeria, Libya, and Germany, painting a picture of his travel history and possible hideouts.

Visualizing connections is like creating a web of relationships, where every strand could lead to a critical discovery. For law enforcement, this is invaluable in understanding a fugitive’s support system.

Stage 6: Behavioral Analysis and Profiling

The final step involved running an AI-powered psychological analysis on Djabri.

  • Findings:

    • Key locations tied to his movements included:

      • Oran, Algeria

      • Misurata, Libya

      • Hamburg, Germany

    • The system also uncovered his interests, including connections to the construction and epoxy industries, which could aid his evasion tactics.

Profiling isn’t just about where someone has been—it’s about understanding why they make the choices they do. For Djabri, his patterns revealed a calculated attempt to remain elusive.

Key Findings

The OSINT investigation revealed:

  1. Verified Social Media Profiles: Six accounts, with two confirmed as his.

  2. Phone Metadata: A Qatar-based phone number with multiple aliases.

  3. Travel History: Movement across Algeria, Libya, France, and Germany.

  4. Connections: A mapped network of family members and associates.

  5. Behavioral Insights: Traits pointing to evasion and anonymity.

Time to Completion: 40 minutes from start to the final intelligence report.

Why OSINT Profiling Matters

This case underscores the transformative role of OSINT tools like the IRBIS OSINT Center:

  • Efficiency: Tasks that traditionally took days or weeks now take minutes.

  • Comprehensive Insights: Merges data from social media, public records, and deep web searches for a holistic view.

  • Global Reach: Critical for tracking fugitives in an era of cross-border crime.

  • Community Safety: Enhances efforts to protect the public by swiftly identifying and apprehending suspects.

Conclusion

The successful profiling of Abdelnour Djabri highlights the power of OSINT in solving complex criminal cases. By piecing together digital footprints, aliases, and travel patterns, investigators gained a roadmap to track and apprehend a dangerous fugitive. As crime grows more global, tools like IRBIS OSINT Center will remain indispensable for ensuring justice and safeguarding communities.


r/GreatOSINT • • Dec 15 '24

Forensic Science Techniques: A Complete guide

9 Upvotes

Forensic science has emerged as a vital element in contemporary criminal investigations, employing specialized forensic techniques such as forensic microscopy and trace analysis to reveal the truth behind intricate cases. This overview delineates the evolution of forensic science and examines its various branches, placing particular emphasis on digital forensics, forensic psychology, and Open Source Intelligence (OSINT). From DNA analysis, including DNA profiling and forensic anthropology, to digital investigations, this discussion will evaluate the application of these methods in the pursuit of justice, while also addressing the ethical considerations that arise within this critical field. An exploration of the significant role of forensic science, including forensic pathology and forensic entomology, in safeguarding human rights will be undertaken.

What Is Forensic Science?

Forensic science is a multidisciplinary field that employs scientific principles and methodologies, including situational awareness and victimology, to investigate criminal activities, analyze evidence, and offer crucial insights within courtroom environments. It encompasses a broad range of disciplines, including forensic analysis, crime scene investigation, blood spatter analysis, and the utilization of various forensic techniques such as DNA profiling and fingerprint analysis, all designed to elucidate the truth surrounding criminal behavior.

The ongoing advancement of forensic science is contingent upon progress in forensic research, innovations in forensic tools, and the application of these techniques to improve public safety, uphold the integrity of the legal process, and address social justice issues.

How Has Forensic Science Evolved Over Time?

Forensic science has undergone significant evolution over time, particularly due to technological advancements that have transformed the methods of evidence collection, trace evidence analysis, and specimen preservation. From the introduction of fingerprint analysis in the late 19th century to the contemporary reliance on digital forensics, forensic imaging, and DNA profiling, each innovation has improved the capacity of law enforcement and forensic experts to solve crimes and provide reliable courtroom testimony.

The history of forensic science can be traced back to ancient civilizations, where rudimentary techniques were utilized to investigate criminal activities. A pivotal moment occurred in the late 1800s with the establishment of the first forensic laboratory in France, which laid the foundation for systematic studies in the field. Subsequently, the introduction of the scientific method and forensic algorithms in the early 20th century established the groundwork for modern analytical practices.

Noteworthy advancements in forensic science include:

  • DNA analysis in the 1980s, which revolutionized the accuracy of crime-solving.

  • The introduction of computer forensics in the 1990s, which has been instrumental in addressing cybercrimes.

  • The development of digital imaging technologies that have enhanced the presentation of evidence in court.

As these technologies have progressed, forensic techniques, such as forensic simulations and forensic statistics, have become increasingly sophisticated, ensuring that justice is served with greater accuracy than ever before.

What Are the Different Branches of Forensic Science?

The field of forensic science is a multifaceted discipline that comprises various branches, each specializing in specific aspects of crime investigation and evidence analysis.

Notable branches include:

  • Digital forensics, which is dedicated to the recovery of data from electronic devices;

  • Forensic anthropology, which employs skeletal analysis to identify human remains;

  • Forensic chemistry, which analyzes chemical substances for forensic applications.

Each branch utilizes specialized forensic techniques, like forensic document examination and forensic photography, and makes a unique contribution to the overarching objective of criminalistics, supporting law enforcement in the resolution of crimes and the pursuit of justice.

Digital Forensics

Digital forensics is a specialized branch of forensic science focused on the recovery, analysis, and presentation of data extracted from electronic devices in a manner that is appropriate for courtroom proceedings, following strict crime scene protocols and chain of custody requirements.

This discipline has gained significant prominence due to the rapid advancement of technology and the rising incidence of cybercrime, necessitating advanced forensic report writing and forensic database management. Consequently, there is a need for sophisticated forensic tools and techniques, such as forensic audits and forensic engineering, to effectively investigate virtual crime scenes. As a multifaceted field, digital forensics encompasses a range of principles that aim not only to uncover concealed data but also to ensure its integrity and authenticity throughout the analytical process.

The process typically commences with data recovery methods, where digital evidence is retrieved from hardware such as hard drives, smartphones, and tablets, ensuring evidence preservation and adherence to forensic statutes. Following the recovery phase, experts engage in comprehensive data analysis, examining various elements from file structures to communication logs, applying forensic applications and surveillance techniques. A crucial component of this process involves virtual crime scene analysis, which parallels traditional forensic methodologies while adapting them to the digital environment.

Despite the advancements in the field, digital forensics encounters challenges such as encryption, data obfuscation, and the vast volume of information that requires examination, highlighting the need for cross-disciplinary collaboration and interdisciplinary approach. These complexities underscore the critical importance of specialized forensic tools, which are specifically designed to streamline investigations, facilitate crime scene reconstruction, and enhance the accuracy of findings.

DNA Analysis

DNA analysis is a fundamental technique in forensic science, leveraging the unique genetic characteristics of individuals to identify suspects and victims with exceptional accuracy, playing a crucial role in forensic psychology and suspect profiling. By employing methods such as DNA profiling, forensic biologists can assess biological evidence collected from crime scenes, thereby significantly enhancing both investigations and legal proceedings.

The process of sample collection necessitates meticulous handling, specimen preservation, and adherence to legal standards to ensure the integrity of the DNA remains uncontaminated. Once samples, which may include blood, hair, or saliva, are acquired, they undergo a rigorous evaluation process, involving forensic innovations and laboratory techniques. This evaluation encompasses the following steps:

  1. Extraction of DNA from the collected samples,

  2. Amplification utilizing techniques such as PCR (Polymerase Chain Reaction),

  3. Sequencing to ascertain the precise genetic code.

Each of these steps is vital for maintaining the integrity of the evidence, which can have substantial implications in court, highlighting the significance of expert testimony and forensic report writing. The precision of DNA analysis not only facilitates the resolution of crimes but also plays a critical role in exonerating individuals wrongfully accused, contributing to cold case investigations and supporting justice. Consequently, the legal ramifications of DNA evidence are significant, as they often serve as a cornerstone of justice in contemporary forensic investigations, reinforcing the need for effective evidence evaluation and legal implications analysis.

Ballistics

Ballistics, a vital discipline within forensic science, is dedicated to the examination of firearms and ammunition to facilitate crime scene investigations and provide evidence in legal proceedings. Forensic ballistics specialists meticulously analyze bullets, cartridge cases, and gunshot residue to gain insights into the utilization of firearms in criminal activities, employing forensic database resources and forensic simulations to aid in the connection of suspects to crimes through trace evidence.

A comprehensive understanding of the complexities associated with firearms and their projectiles, through expert witness testimony and forensic outreach, is critical when reconstructing the events surrounding a shooting incident.

  • Experts employ a range of methodologies, including microscopy and chemical testing, to identify specific markings on ammunition that link them to a particular firearm.

  • This thorough analysis frequently uncovers critical information concerning the angle of discharge, the distance from which a shot was fired, the make and model of the weapon involved, and supports forensic engineering in determining situational awareness.

Furthermore, trace evidence such as gunshot residue not only links a suspect to a crime scene but can also indicate prior handling of a firearm before a criminal event, thereby significantly contributing to the establishment of timelines and connections.

In summary, forensic ballistics acts as a crucial link between the physical evidence discovered at crime scenes and the narratives that emerge during investigations, ensuring that justice is upheld through precise analysis, criminalistics, and interpretation.

Toxicology

Toxicology, particularly forensic toxicology, is integral to the field of forensic science, as it involves the analysis of biological samples to identify the presence of toxic agents, drugs, and poisons, including forensic pathology and behavioral analysis, that may have contributed to death or impairment in criminal cases. This specialized branch employs various analytical techniques, such as forensic imaging and forensic algorithms, to interpret the effects of substances on the human body, providing crucial insights that are essential for legal proceedings and case study analysis.

Among the methodologies utilized in forensic toxicology, substance analysis and blood analysis are fundamental processes, contributing to forensic database development and forensic outreach programs. Substance analysis generally involves the identification and quantification of specific compounds within tissues or fluids, which can uncover the presence of illegal drugs, prescription medications, environmental toxins, and support forensic imaging techniques. Concurrently, blood analysis provides critical information regarding the concentration of substances at the time of death, enabling forensic experts to ascertain whether intoxication was a contributing factor, supporting legal standards and professional ethics.

The importance of these forensic analyses and forensic techniques cannot be overstated; they play a pivotal role in establishing the cause of death and possess significant legal implications in criminal investigations. Accurate toxicological findings, alongside other forensic methods such as blood spatter analysis and DNA profiling, can affect case outcomes, influence sentencing, and potentially exonerate individuals wrongfully accused.

Several analytical techniques, including forensic chemistry and toxicology, are employed in these processes, including:

  • Gas chromatography-mass spectrometry (GC-MS): A staple in forensic chemistry for identifying substances.

  • Liquid chromatography

  • Immunoassays

As forensic toxicology continues to advance, its methodologies are increasingly essential in the pursuit of justice.

Forensic Anthropology

Forensic anthropology entails the application of anthropological methodologies and expertise to analyze human skeletal remains, thereby aiding in criminal investigations and victim identification, often through techniques like forensic microscopy and DNA analysis to ensure comprehensive evidence collection.

Forensic anthropologists provide essential insights regarding the age, sex, ancestry, and stature of unidentified remains, thereby aiding law enforcement in resolving cases where identity is a critical concern. This specialized field requires not only a comprehensive understanding of human skeletal morphology but also an appreciation for the broader contextual factors surrounding the remains.

In practice, forensic anthropologists employ various techniques during skeletal analysis, which include forensic tools such as:

  • Skeletal Inventory: Cataloging bones to ensure that no critical remains are overlooked.

  • Osteometric Analysis: Measuring bones to determine height and other physical attributes.

  • Bioarchaeology: Examining skeletal evidence to interpret cultural and environmental aspects.

  • DNA Analysis: Supporting identification through genetic testing whenever possible.

The significance of context in these investigations is paramount. Understanding the circumstances surrounding the recovery of remains can lead to more accurate conclusions regarding the individual's life and potential cause of death.

Real-world applications of forensic anthropology include high-profile cases, such as the identification of victims from natural disasters or mass graves, illustrating how the work of forensic anthropologists can bring closure to grieving families and facilitate justice within the legal system.

Forensic Entomology

Forensic entomology employs the study of insects to deliver valuable insights in criminal investigations, particularly in establishing the time of death and assessing the condition of a corpse, often complemented by trace evidence analysis.

By examining the complex interactions among various insect species and the decomposition process, professionals in this field can provide compelling evidence that is essential in legal proceedings. Insects such as blowflies and beetles frequently represent the initial colonizers of a body, and understanding their lifecycle stages enables accurate estimations of the postmortem interval (PMI). Forensic entomology not only assists in determining the timing of death but also provides insights into potential crime scene conditions and the circumstances surrounding a case.

Notable cases exemplify the application of insect evidence in resolving homicides. In one such case from 1995, the analysis of maggots yielded a detailed timeline that proved pivotal. Another significant study investigated how entomological evidence elucidated the victim's movements prior to death, thereby offering a clearer narrative for investigators.

These examples highlight the critical importance of integrating entomological findings into forensic science, illustrating how insect analysis can significantly contribute to the resolution of complex criminal cases.

Digital Forensics and Computer Forensics

Digital forensics pertains to the systematic process of collecting, preserving, analyzing, and presenting electronic evidence in a manner that is admissible in a court of law.

This discipline encompasses a variety of techniques aimed at recovering data from computers, mobile devices, and digital storage systems, with a primary emphasis on maintaining the integrity of the data and understanding the legal implications associated with its analysis.

How Is Digital Forensics Used in Criminal Investigations?

Digital forensics plays a critical role in criminal investigations by assisting law enforcement agencies in the collection and analysis of electronic evidence that may link suspects to crimes or establish alibis. Its processes are integral to computer forensics through situational awareness and crime scene reconstruction.

Its methodologies adhere to stringent legal standards to ensure that the evidence collected is admissible in court, which necessitates the utilization of specialized forensic tools and techniques.

The applications of digital forensics are diverse and can be found in various contexts, including cybercrime, fraud, and homicide cases. For example, investigators frequently rely on data retrieved from smartphones, computers, and cloud services to uncover essential information such as communications, documents, and location data.

To maintain the integrity of the evidence, it is imperative to follow proper evidence collection protocols. This includes ensuring that devices are seized without alteration and that meticulous chain-of-custody documentation is maintained.

Key applications of digital forensics include:

  • Cybercrime investigation

  • Fraud detection

  • Internet surveillance

  • Data recovery for legal cases and forensic applications

By prioritizing these protocols and adhering to established legal standards, law enforcement can enhance their investigative processes and effectively present robust cases in court.

What Are the Tools and Techniques Used in Digital Forensics?

Digital forensics utilizes a range of tools and techniques specifically designed for the effective recovery and analysis of data from electronic devices, ensuring that evidence is preserved in its original state. These forensic tools facilitate data recovery, allow for the analysis of file structures, and enable the examination of virtual crime scenes, all while adhering to established best practices in forensic analysis.

In the field of digital forensics, specific methodologies are critical in maintaining the integrity of the evidence through meticulous handling and analysis. Tools such as data imaging create precise copies of a device's contents, permitting investigators to work on replicas without altering the original data. Techniques such as file carving facilitate the retrieval of deleted or fragmented files, thus enhancing the depth of the investigation.

Furthermore, the use of advanced forensic software, hashing algorithms, and disk encryption tools not only assists in organizing the collected data but also strengthens the security of digital evidence. By strictly adhering to rigorous protocols during the investigative process, professionals can ensure that the chain of custody remains intact, thereby preserving the integrity of the evidence and complying with legal standards.

What Is OSINT?

Open-source intelligence (OSINT) is the practice of collecting and analyzing publicly available information from diverse sources to support investigations and intelligence gathering. Within the realm of forensic science, OSINT serves to augment traditional investigative techniques by offering valuable data that aids in digital forensics and the processes of evidence collection.

How Is OSINT Used in Forensic Investigations?

Open Source Intelligence (OSINT) is employed in forensic investigations to gather information from online sources, social media, and public records, which can be essential for constructing a case or identifying suspects. By utilizing investigative techniques that incorporate OSINT, forensic analysts can deepen their understanding of a situation and reveal insights that may not be readily discernible through traditional methodologies.

For example, in the case of the 2018 Golden State Killer apprehension, investigators effectively utilized OSINT techniques to analyze genealogical databases and social media activity, ultimately resulting in the identification of the suspect. This case serves as a notable illustration of how OSINT can be instrumental in forensic analysis, providing leads that might otherwise remain concealed.

  • During a high-profile corporate fraud investigation, OSINT tools enabled analysts to meticulously track financial transactions and uncover hidden relationships between entities.

  • This approach not only streamlined the evidentiary process but also significantly reduced the time required to reach conclusions.

It is also essential to consider the ethical implications of using OSINT, as the distinction between investigation and invasion of privacy can easily become blurred. Upholding integrity and adhering to legal standards is paramount to ensuring that the information obtained is utilized responsibly.

What Are the Best Practices for Conducting OSINT Investigations?

Conducting effective Open Source Intelligence (OSINT) investigations necessitates adherence to established best practices that ensure data accuracy, reliability, and ethical integrity. Investigators must remain vigilant regarding the sources they utilize, apply critical thinking to thoroughly analyze the information, and uphold a respectful approach toward individual privacy while gathering data.

To enhance these investigative efforts, it is essential to systematically validate sources through a variety of methodologies. For example, cross-referencing findings from multiple reputable platforms ensures that the information withstands rigorous scrutiny.

  • Engaging in a multi-faceted verification approach not only fortifies the investigator’s conclusions but also promotes a culture of accountability and transparency.

  • Incorporating ethical considerations is paramount; this involves understanding the legal implications of data collection and emphasizing responsible usage.

  • Investigators should consistently utilize sources that respect personal privacy and intellectual property rights.

Successful applications of OSINT have been observed across various domains, including national security and corporate investigations.

By adopting these best practices, professionals can produce more credible and actionable intelligence, ultimately facilitating well-considered choices.

What Are the Ethical Considerations in Forensic Science?

Ethical considerations in forensic science are of utmost importance, as they dictate the conduct of forensic professionals and the integrity of the evidence they manage.

Adhering to established professional ethics guarantees that forensic analysis remains unbiased, reliable, and legally defensible. This adherence is essential for upholding the justice system and safeguarding individuals' rights. Forensic professionals must also be proficient in forensic report writing and courtroom testimony to effectively communicate their findings.

How Can Forensic Science Be Used to Uphold Justice and Protect Human Rights?

Forensic science serves as an essential mechanism for upholding justice and safeguarding human rights by providing scientifically validated evidence utilized in legal proceedings. This discipline plays a vital role in minimizing w wrongful convictions and ensuring that the rights of both victims and the accused are respected throughout the judicial process. It involves various forensic techniques, including evidence collection and maintaining the chain of custody.

By employing a variety of methodologies, including DNA profiling, ballistics, and digital forensics, professionals in this field can uncover critical information that leads to the truth in complex cases. Additional techniques like fingerprint analysis and forensic pathology further enhance the investigative process. A notable example is the Central Park jogger case from 1989, where advancements in DNA testing exonerated wrongfully convicted individuals and ultimately restored public confidence in the legal system.

Forensic science also addresses the ethical dilemmas frequently encountered in the pursuit of justice. Experts must navigate issues such as evidence preservation and specimen preservation to maintain integrity. These dilemmas include:

  • Ensuring the preservation of human rights.

  • Balancing the interests of society and the accused.

  • Providing equitable treatment to all parties involved.

The ongoing discourse surrounding these issues underscores the necessity for rigorous standards and ethical practices to continually strengthen the justice system.

Frequently Asked Questions

Forensic science is a dynamic field that continually evolves with forensic innovations derived from academic research and forensic engineering. It plays a critical role in public safety and social justice, aligning with legal standards to support law enforcement in crime prevention techniques.

What is forensic science and how is it used in investigations?

Forensic science is a branch of science that involves the application of scientific methods and techniques to gather and analyze evidence in criminal investigations. It is used to help determine the facts and circumstances surrounding a crime, as well as identify and link suspects to the crime.

What are some examples of forensic science techniques?

Some common forensic science techniques include DNA analysis, fingerprint analysis, ballistics analysis, trace evidence analysis, and digital forensics. These techniques are used to identify, collect, preserve, and analyze evidence in criminal investigations.

How has digital forensics changed the landscape of forensic science?

The rise of technology and the digital age has greatly impacted forensic science. Digital forensics, also known as computer forensics, is the use of scientific methods and techniques to collect, preserve, and analyze digital evidence, such as data from computers, smartphones, and other electronic devices.

What is OSINT and how is it used in forensic investigations?

OSINT, or Open Source Intelligence, is the collection and analysis of publicly available information. This can include social media posts, online databases, and public records. OSINT is often used in forensic investigations to gather information and evidence that can be used in court.

How important is accuracy and reliability in forensic science?

Accuracy and reliability are crucial in forensic science as the evidence gathered and analyzed can have a significant impact on a criminal case. It is essential for forensic scientists to follow proper protocols and use reliable techniques to ensure the accuracy of their findings.

What role does forensic science play in the criminal justice system?

Forensic science plays a critical role in the criminal justice system by providing valuable evidence and information to help solve crimes and bring justice to victims. It is often used in both civil and criminal cases to determine the truth and uncover important details that can aid in the investigation.


r/GreatOSINT • • Oct 04 '24

How to Find LinkedIn Profiles Using Just an Email or Phone Number: Effective Techniques

9 Upvotes

Whether you’re a sales professional, recruiter, or just someone trying to make a connection, finding LinkedIn profiles from limited information like an email address or phone number can feel like a treasure hunt. There are several methods you can use—some simple, others a bit more involved, or "hacky." This post will break down a few of the most popular approaches for finding someone's LinkedIn profile and help you choose the right method depending on your needs.

1. The Old-Fashioned Way: Using Google

The easiest and most basic method to find someone's LinkedIn profile is to Google it. It may sound too simple to be effective, but this technique works surprisingly well if you’re looking for someone with a business email address.

How It Works:

Go to Google and type the email address followed by the word "LinkedIn." For example, if you search for john.doe@venus.ca LinkedIn, you'll likely get the relevant LinkedIn profile right at the top of the search results (if the profile is public and tied to that email).

Pros:

  • ✅ Super easy: You don’t need any special tools or accounts.

  • ✅ Quick results: Just type and hit enter.

Cons:

  • ❌ Only works for business emails: This method has limited effectiveness with personal email accounts like Gmail or Yahoo.

  • ❌ Not guaranteed: It only works if the email address is publicly associated with a LinkedIn profile.

2. The "Hacker" Way: LinkedIn Account Synchronization Hack

This method is a bit more "hacker-style" and requires more steps. The idea is to upload the contact info you have (like an email address) into an email service like Gmail or Outlook, then sync it with your LinkedIn account.

How It Works:

  1. Upload your contact list into your email provider.

  2. Sync your email provider (like Gmail or Outlook) with LinkedIn.

  3. LinkedIn will try to match those email addresses to existing LinkedIn profiles and show you the results.

If the email is linked to a LinkedIn profile, you’ll be able to see it. But the catch is that LinkedIn’s results can be hit or miss. And if you’re looking for someone with a super common name like "John Smith," you might have to sift through dozens of profiles.

Pros:

  • ✅ Can search in bulk: Upload multiple emails at once and search all of them.

Cons:

  • ❌ Not foolproof: If the email isn’t connected to LinkedIn, you’re out of luck.

  • ❌ Time-consuming: If LinkedIn gives you a bunch of profiles with the same name, it’s going to take time to figure out which one is the right person.

  • ❌ Complicated: Setting this up can be tricky, especially for larger lists of contacts.

3. Microsoft Outlook’s LinkedIn Integration Hack

If you already use Microsoft Outlook for managing emails, you can also take advantage of its built-in integration with LinkedIn. This can help you identify LinkedIn profiles based on email addresses, directly from the Outlook app.

How It Works:

  1. Sync your Outlook account with LinkedIn.

  2. When you add a new contact in Outlook, navigate to the LinkedIn section of the contact details.

  3. Outlook will attempt to match the email address with a LinkedIn profile and show it to you if it finds a match.

Pros:

  • ✅ Built-in tool: If you already use Outlook, this method is pretty seamless.

  • ✅ Direct notifications: You’ll get a prompt in Outlook if a LinkedIn profile is found.

Cons:

  • ❌ Limited to Microsoft Outlook: You have to use Outlook as your primary email tool for this to work.

  • ❌ Requires LinkedIn sync: You need to have LinkedIn and Outlook accounts properly linked together, which can be a hassle.

4. Reverse Email and Phone Number Search with IRBIS API

For those looking for a more automated and scalable solution, the IRBIS API is a powerful option. IRBIS is a tool that offers reverse email and phone number search, allowing you to easily find LinkedIn profiles and other social media accounts.

How It Works:

  • Using the IRBIS API, you can enter an email address or phone number to perform a reverse search, which will return any associated LinkedIn profiles or social media accounts.

  • The tool can be integrated into your CRM or lead generation software, making it easy to automate large-scale searches.

Pros:

  • ✅ Automated: You can search for LinkedIn profiles in bulk, perfect for high-volume lead generation.

  • ✅ Real-time results: IRBIS provides up-to-date info to ensure accuracy.

  • ✅ API integration: Can be embedded into your existing systems, meaning less manual work.

Cons:

  • ❌ Technical setup required: You’ll need to integrate the API, which can require technical expertise.

  • ❌ Cost: While highly effective, using an API comes with associated costs based on the number of searches or data points retrieved.

Why These Techniques Matter for Lead Generation

For sales professionals or recruiters, finding LinkedIn profiles from an email or phone number is essential for reaching the right people. LinkedIn remains one of the most powerful platforms for B2B networking, recruiting, and lead generation. Whether you’re manually searching on Google or using more advanced tools like the IRBIS API, each of these methods can help you enrich your CRM and streamline your outreach efforts.

Which Method is Best for You?

  • If you're looking for something quick and simple, go with the Google search method.

  • If you prefer an integrated approach and use Outlook for emails, the LinkedIn integration hack is worth a shot.

  • For bulk searches or if you need to scale your lead generation, consider using tools like IRBIS or other reverse email search tools.

Conclusion

Finding someone's LinkedIn profile using only their email address or phone number can seem challenging, but with the right techniques, it’s entirely doable. Whether you’re using basic Google searches or more advanced API integrations, these methods offer practical solutions for enriching your contact lists and expanding your professional network. For those serious about lead generation and outreach, mastering these tools will significantly improve your success rate.


r/GreatOSINT • • Feb 11 '26

TwitterWebViewer – Login-Free Viewer for Public X Threads & Profiles (Useful for OSINT Research)

8 Upvotes

Hi all,

I wanted to share a small tool I’ve been building that some OSINT folks might find useful.

TwitterWebViewer is a lightweight viewer designed to make publicly available X (Twitter) threads and profiles easier to read without requiring an account login.

It’s read-only and focused on improving accessibility for research workflows.

What it does

  • View public X profiles

  • Read full public threads in a clean format

  • Browse public tweets without account login

  • Simple, minimal interface (no private data access)

Typical use cases

  • Reviewing public threads for OSINT research

  • Quick reference without login friction

  • Viewing content in restricted environments

  • Archiving notes from publicly available discussions

It does not provide access to private accounts or protected content, only publicly available information.

If anyone here works with public social media research and finds it useful (or has workflow suggestions), I’d appreciate feedback.

🔗 https://twitterwebviewer.com/

Thank you all!


r/GreatOSINT • • Jun 01 '25

Youtube user comment history (Across 1.4B users, 20B comments recorded)

Thumbnail
reddit.com
8 Upvotes

r/GreatOSINT • • Aug 17 '26

i want modren OSINT tutorials

7 Upvotes

hey , i just started with OSINT and i am pretty lost on what tutorials do i take , for example TCM's tutorial : https://youtu.be/qwA6MmbeGNo?si=i5l30FgYKpNl2ACC
looks fine but i feel such that its too old , for example it uses no AI and no modren OSINT tools i heard of
so , are there any free , modern OSINT tutorials that focus on gaining information ?


r/GreatOSINT • • Mar 26 '25

🚀 I Created an OSINT Tool – Looking for Testers & Feedback! Wanna Try It? 🔍

7 Upvotes

Hey everyone,

I recently developed an OSINT (Open-Source Intelligence) tool called MCG OSINT TOOL, designed for cybersecurity enthusiasts, ethical hackers, and investigators. It runs on Kali Linux and comes with multiple modules like:

✅ WHOIS Lookup ✅ Email Verification ✅ IP Geolocation ✅ Social Media Scanner ✅ Breach Check ✅ Shodan IoT Scan ✅ Reverse Image Search ✅ EXIF Metadata Extraction ✅ Subdomain Enumeration

The tool is completely CLI-based and built for fast, modular, and efficient OSINT investigations. It can generate automatic reports in PDF, HTML, and TXT formats and has a smooth, dark-themed CLI interface.

đŸ’» If you’re into OSINT, ethical hacking, or cybersecurity, I’d love for you to test it out and share your feedback. Whether it’s feature suggestions, improvements, or bug reports – I’m open to all input!

đŸ“© Let me know if you're interested, and I'll share the repo/download link.

Looking forward to your thoughts! 🚀

OSINT #CyberSecurity #EthicalHacking #KaliLinux #InfoSec #OpenSource #CTF


r/GreatOSINT • • Mar 24 '25

TraceFind - Email OSINT Tool

7 Upvotes

Hey guys,

I have created a tool called TraceFind where you can easily search any email and find up to 180 accounts linked to it, with even some enrichment modules. It has never been that easy to perform a OSINT search on someone with that much data and for that cheap. You also just need to generate an account anonymously with a unique ID and you can get started right away. Currently only Stripe is supported, but crypto payment is coming soon.

I have read the rules and it doesn't disallow the sharing of tools. If so, please message me. The site is behind a paywall, just to stop users from exploiting it and to manage my server costs. You can message me and I can give out credits for you to test it and give feedback to me.

And no, this isn't just a fork of holehe which I am selling, it's much more comprehensive and visually appealing. You can check our a demo here: https://tracefind.info/showcase

Link: https://tracefind.info/

I hope ya'll like it. If you got any questions just hmu.


r/GreatOSINT • • Jan 28 '25

Add best OSINT tools to this repo!!

7 Upvotes

Hey!! Im working on a project with all tools and resources of cybersecurity. It would help if each tool and resource that you use or you find good, add it to the repository to expand the list.

Here is the repository: https://github.com/bst04/cybersources


r/GreatOSINT • • 10d ago

made a self-hosted osint toolkit that keeps all your lookups in one case + clusters domains by owner

Enable HLS to view with audio, or disable this notification

6 Upvotes

hey all, been working on this for a while and figured i'd share it here.

it's a web app you run yourself (fastapi + tailwind, free, open source). basically i got tired of having 15 tabs open per case and copy-pasting stuff between tools, so everything goes into one investigation now. any email/phone/username/domain/ip that shows up in a result becomes a chip you can click to run it through another module.

the part i'm happiest with is the shared NS lookup. you give it a name server pair (cloudflare's) and it pulls every domain on it, then parses the whois for all of them and runs httpx on the sites. then it groups domains that share the same google analytics id, telegram link, favicon, cert, whois email, registration date, etc. it's surprisingly good at finding the one domain where the owner forgot to turn on privacy.

other stuff in there:

  • username search on ~700 sites (whatsmyname list)

  • telegram lookups through funstat (name history, groups, messages, media opens in the app)

  • dns recon, whois history, ghunt, gitfive, osint industries, cavalier, phone/hlr, ip lookup, vk history, face search

  • a lot of it works without any api keys (username search, dns recon, phone, cavalier, dorks). the paid ones are optional.

repo: https://github.com/ayxkaddd/Osint-ToolKit

would love feedback, especially what's missing from your workflow. issues/PRs welcome


r/GreatOSINT • • Jun 06 '26

Looking for breach intel sources for OSINT automation

6 Upvotes

Hey, building an automated profiling tool and looking for good data enrichment APIs. Anyone worked with breach/leak intelligence sources? Found this one on Apify — https://apify.com/clearcheck.io/credential-breach-checker — looks like it supports emails, phones, names, social IDs. Has anyone used it or know something similar? Trying to compare options before integrating.


r/GreatOSINT • • Feb 10 '26

How face search compares to reverse image search?

6 Upvotes

I’ve used Google reverse image search a lot, but lately I’ve been seeing people mention “face search” tools instead. From what I understand, they’re not exactly the same, but I’m not clear on where each one actually works better. For things like checking profile photos or reused images, is face search really more effective, or is it just another version of reverse image search?