Co-Founder, Forensic OSINT [email protected]
Canada 🇨🇦
Joined May 2016
- Tweets10.3K
- Following505
- Followers73.7K
- Likes23K
Pinned Tweet
If you're interested in OSINT and want to stay in the loop, this one's for you.
We've got a FREE OSINT newsletter where we share news, updates, and insights the OSINT world.
No cost, just OSINT content worth keeping up with.
Sign up here: forensicosint.com/newsletter
1
14
1,641
OSINT Techniques retweeted
A video of nothing but trees. The aircraft noise in its audio held the location lead.
Colsto matched Doppler curves to ADS-B flight data, starting from a known date and country, then confirmed it visually on Street View.
🔗 gizmodo.com/a-youtuber-figur…
OSINT Techniques retweeted
Issued by the FAA just moments ago, ALL US airports are currently ground stopped. This means NO flights may depart for US airports. Flights already in the air will be allowed to land. This is related to an FAA equipment outage.
ALT DUE TO EXTRAORDINARY CIRCUMSTANCES AND FOR REASONS OF SAFETY. ATTENTION ALL AIRCRAFT OPERATORS, BY ORDER OF THE FEDERAL AVIATION COMMAND CENTER ALL AIRPORTS ARE GROUND STOPPED. ALL DEPARTING TRAFFIC SHOULD REMAIN GROUND STOPPED UNTIL FURTHER NOTICE. INBOUND INTERNATIONAL FLIGHTS WILL BE MANAGED ON A CASE BY CASE BASIS.
OSINT Techniques retweeted
A low-res video of some trees. Aircraft noise in the audio pointed to where it was filmed.
Colsto's method leads this week's Friday 5, plus CBC's fake job ad network, a Shodan check, bias in reports and knowing what you don't know.
🔗 forensicosint.com/newsletter
#OSINT
OSINT Techniques retweeted
We’re seeing encouraging recovery progress, with service availability and email delivery performance improving across a growing portion of affected infrastructure. We know our customers rely on our services to get important work done every day, and regret the impact these outages had on those who depend on us.
We will continue to share more information as we have it, and for now we can confirm that there is no indication this is the result of malicious or cyber activity. Our teams are reviewing what happened and how we can prevent similar issues going forward.
OSINT Techniques retweeted
Breaking News: As a major software outage affects millions of users, Microsoft says it is making progress toward a repair. nyti.ms/4kOhK1l
OSINT Techniques retweeted
Ring a target by accident from your sync phone. Now they have your number, and know you have theirs.
@cqcore on why OPSEC is not privacy, and why no one setup fits all.
🔗 indicator.media/p/why-there-…
OSINT Techniques retweeted
Criminals may attempt to leverage the Outlook outage to phish you. You may receive emails once it’s back up asking you to change your password to prevent further disruption, texts/calls that claim they are IT & need your creds/codes to get you back online. Stay politely paranoid.
Microsoft Outlook is down. Microsoft 365 issues are cutting people off from their email, as well as Microsoft Teams, SharePoint Online, and Microsoft 365 Copilot theverge.com/tech/1032226/mi…
OSINT Techniques retweeted
So you want a career in OSINT? @OSINTtechniques wrote a short guide for @WHInspector, for teens and their mentors.
Practice on puzzles, not people. Ask "should I?" before "can I?"
🔗 thewhitehatter.ca/post/so-yo…
OSINT Techniques retweeted
We're hiring an early-career journalist as a Fellow for the Visual Investigations team at the @nytimes. Come work with me!
You'll do OSINT reporting for a year with our team. Requires in-office work in NYC, authorization to work in the U.S. Pay is $82k.
job-boards.greenhouse.io/the…
OSINT Techniques retweeted
A Canadian woman who spent 4 years with ISIS and married 2 of its fighters is guilty of terrorism, a jury ruled on Tuesday. globalnews.ca/news/12137845/…
OSINT Techniques retweeted
Two satellite images, five days apart, one DC golf course.
@bellingcat pairs Planet Labs captures from Oct 8 and Oct 13 to show the loss.
🔗 bellingcat.com/news/us-canad…
Check out our Free OSINT toolkit
We just released a free OSINT toolkit for investigators.
IP Lookup (VPN/proxy detection + court-ready PDF)
Username Search (600+ sites)
Domain-to-IP with security scoring
Email Header Analyzer
Image EXIF Reader
Timestamp Decoder
Try instantly. Free account for ongoing access. No search data tracked.
OSINT Techniques retweeted
Forensic OSINT v3.8.1: a capture uses less CPU and memory while it runs. It no longer holds every screenshot in memory at once. A new Local Storage card under Settings shows what is on disk. forensicosint.com/whats-new #OSINT
OSINT Techniques retweeted
Grok just told you who an account talks to. Did you open a single post to check?
Nico Dekens (Dutch_OsintGuy) has started a new tip series on X with a practical one: mapping the footprint of one public X account. He practices on @NASA, so anyone can follow along.
The method starts with no AI at all.
You read the profile by hand first, so your first impression comes from the source, not a model summary.
Then Advanced Search operators do the collection:
✅ from:NASA since:2026-09-01 until:2026-10-01 for a fixed window (until: is exclusive)
✅ to:NASA and @NASA -from:NASA for who is talking to the account
✅ min_faves and filter:media for what travels and what gets shared
Grok sits on top as an accelerator. His rule for it is one I would tape to the monitor: no cited post URL, no finding.
A Grok theme without three posts you confirmed yourself gets marked unverified. Posting hours get the same caution. They are clues, not geolocation.
AI can speed up collection. The investigator decides when the evidence is enough.
It is an X Article, so you will need to be logged in to X.
Read Nico Dekens' full piece → nitter.cf/dutch_osintguy/status/…
New X Article: how to map any public X account's online footprint with Advanced Search + Grok. Step by step, copy-paste queries, zero experience needed. And why YOU stay in (and on) the loop. Practice on @NASA. No magic. Just method. View article
OSINT Techniques retweeted
BREAKING: Cyber attack threatens French blood banks
trib.al/6etY2eZ
OSINT Techniques retweeted
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance. buff.ly/9Fa2jBW
OSINT Techniques retweeted
If hackers can take control of a supermarket freezer, how vulnerable is other tech? bbc.in/4eIwcUK
OSINT Techniques retweeted
Outsourcing planning to AI can lead people to surrender their own critical thinking, which can have potentially deadly results in places like the backcountry. buff.ly/sNs5kqF
OSINT Techniques retweeted
The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North Korean malicious cyber activity as "TraderTraitor."
The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.
How You Can Help:
FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.
A list of addresses associated with this activity is available here: fbi.gov/investigate/cyber/al…
ALT FBI public service announcement with Department of Justice seal in the background on a gold gradient.