OSINT Bay Blog

A grainy 9-second clip filmed from a kitchen window doesn't look like evidence. Until you stretch it across a 30-meter elevation grid, line up the horizon with a digital terrain model, and prove that the smoke trail in frame 47 could only have come from one specific tree line. That's GEOINT 3D — turning flat pixels i…

A shadow is the cheapest witness in any investigation. It can't be bribed, it doesn't get tired, and it has no political opinions — it just falls where physics tells it to fall. If a photo claims to be from Donetsk at 11:40 in July but the shadows are pointing the wrong way, you don't need a confession. The sun alrea…

A timestamp on a tweet is a claim. The shadow under the burning building isn't. Chronolocation is the OSINT discipline of pinning down when a photo or video was captured — without trusting metadata, captions, or the source. EXIF strips on every social upload. Dates lie. Captions lie harder. What doesn't lie: the angl…

By the time a Telegram channel posts a "fresh" video from a frontline, the satellites have already imaged that frontline four times. That gap — between what's happening and when civilians can see it — is exactly where GEOINT-by-satellite earns its keep. This is the discipline analysts file under GEOINT.SAT: pull fr…

One photo. No metadata. No caption. A wall, a strip of road, a sliver of sky. That's the entire case file — and somewhere on Earth there is exactly one spot that matches it. Manual geolocation is the discipline of finding that spot before the news cycle moves on. Forget the marketing copy about "AI that finds anythin…

Mainstream platforms get the headlines. Niche ones get the receipts. The targets actually worth finding rarely live full-time on X or Facebook. They migrate. They split identities across half a dozen smaller platforms, betting that nobody is paying attention. Most analysts prove them right — they stop looking the mom…

VK still hands over more about its users than Facebook, X, or LinkedIn ever did. That hasn't really changed since 2014, despite a decade of half-hearted "privacy improvements." If a subject of your investigation speaks Russian — drafted into a unit near Donetsk, posting selfies from Mariupol, or running a fake person…

Half the internet doesn't speak your language, doesn't index in Google, and doesn't care about your VPN. That half lives behind the Great Firewall — and if your investigation touches Huawei, PLA contractors, semiconductor supply chains, influence operations, or the overseas Chinese diaspora, ignoring it isn't a metho…

A channel can upload at 14:00, hit 50,000 views by 14:30, and be wiped at 15:00. If you didn't pull it before then, it's gone. That's the basic rhythm of SOCMINT on YouTube: signal-rich, time-sensitive, and self-deleting. The platform leaks intel in every direction — video frames, thumbnails, transcripts, channel met…

Open TikTok with an investigator's eye and you stop seeing dance trends. You see a billion-user search engine that ships every video with a hidden timestamp, a sound graph that links accounts the user never thought to hide, and an algorithm that quietly narrates which narratives are being pushed where. The platform tha…