If you are into OSINT, follow me on LinkedIn linkedin.com/in/ritugill-osi…

A confirmed username hit proves the identifier exists. It does not prove who controls it. Omertà, free from The OSINT Vault, labels every result Confirmed, Uncertain or Manual and shows the evidence behind it. 🔗 theosintvault.io/omerta #OSINT

She never named her daughters online. Her video went to Facebook. Meta's AI asked "Who's the child passenger?", named both girls, pulled their ages from relatives' posts, then offered to find where she lives. A few hundred followers. 🔗 futurism.com/artificial-inte…

A screenshot with no visible watermark came back clean on Google's SynthID check. OpenAI's tool then confirmed it as theirs. Detectors mostly read their own maker's mark. "No mark found" is not proof a file is real. 🔗 piped.video/watch?v=kYAyXO1I…

Discord, Twitch and Steam are named in the UN CTED trends report published 10 September. Its argument: terrorist propaganda is no longer merely communicative. It is operational infrastructure for recruiting, fundraising and claiming legitimacy. 🔗 un.org/securitycouncil/ctc/s…

Oddly, I reported back in 2016 that Oxygen was Russian-owned. This was never a secret in the digital forensics industry, but US federal agencies were still fooled by the company's claims of US ownership. Here's the 2016 piece mentioning Russian ownership theintercept.com/2016/10/31/…

Two officers of US-based digital forensics firm Oxygen Forensics have been arrested for allegedly lying to US gov customers. They claimed Oxygen was American and the software was developed in US, though company is owned by Russians and developed in Russia zetter-zeroday.com/us-based-…

POLITICO will continue to fairly report on this White House and future ones. We will vigorously defend our First Amendment rights against any attempt to restrict them. The claims that POLITICO received government subsidies are false and have been thoroughly debunked.

BREAKING: Donald Trump, who has repeatedly vowed to protect free speech as president, is escalating his effort to silence media outlets who don’t lick his boots, this time by attempting to ban CNN, MSNOW, and Politico from the White House press pool. Details ↓ rollingstone.com/politics/po…

BC has a new time zone abbreviation: PCT. PCT stands for Pacific Time, BC’s single year-round time zone. It replaces PST and PDT, providing a consistent way to refer to BC’s time zone in schedules, systems and communications. No falling back this November.

North Korean cyber group “WaterPlum” (aka “Contagious Interview”) is compromising job seekers’ computer networks, harvesting sensitive data, and stealing cryptocurrency. WaterPlum is targeting IT professionals in Japan, the United States, Europe, and beyond. Posing as prospective employers, these actors go after software developers and IT professionals with fake “dream job” offers. They impersonate legitimate AI, NFT, and cryptocurrency companies and use recruiting platforms to reach victims. This threat is active right now. Read the new advisory from the @FBI, @NPA_KOHO, @DC3Forensics, and other partners to learn about WaterPlum: ic3.gov/CSA/2026/260918.pdf

P.S. You can sign up for our OSINT newsletter here → forensicosint.com/newsletter

She never named her daughters online. Meta's AI named them both, then offered to work out where she lives. That, a UN report calling propaganda operational infrastructure, and a username tool that shows its evidence. This week's Friday 5. 🔗 forensicosint.com/newsletter #OSINT

#VPDNews: Vancouver Police are releasing two CCTV images of a suspect wanted in connection with a West End convenience store theft. On September 10, at around 11:30 a.m., a man stole merchandise from a convenience store close to Davie and Thurlow Street. When a pregnant employee tried to intervene, the suspect allegedly pushed her to escape. Police believe the same individual is responsible for a previous shoplifting incident at the same location. Anyone with information regarding the suspect’s identity is asked to call the VPD non-emergency line at 604-717-3321.

166,893 applications. 21,000 interviews. 76 job offers. Gatra Priyandita in ASPI: AI hands North Korea no new capability. It makes the volume model it already runs far cheaper. A persona is cheap to build, expensive to check. 🔗 aspistrategist.org.au/for-no…

The account went quiet for four months. That gap was the finding. A month by month grid across the range tells you which month to open first, instead of reading from the top. 🔗 forensicosint.com/elite-assi…

I watched a timeline capture run for 18 minutes. I never touched the mouse. 5-min walkthrough of Facebook Timeline Capture: set a date range, approve the post list, and each one opens with All comments expanded before it captures. 11 posts, 11 captured. #OSINT

Never been to Georgia. Not a security researcher. He pointed a coding agent at a 2022 disclosure and rebuilt the order 1.52 million ballots were cast in. About 20 dollars. The fix shipped in 2023. Plenty never installed it. 🔗 blog.citp.princeton.edu/2026…

Facebook says 3d. Your report needs a date, a time and a timezone. Hovering the date link is what makes Facebook surface the permalink. Discovery does it on every post it finds. 🔗 forensicosint.com/elite-assi…

How do you flag the one post that matters in 500 captures? I recorded a 4-minute walkthrough of the three ways I take notes while I work. Three methods, three jobs. Pick per situation. ✅ Open the case folder. Forensic Notes is already there, timestamped as you type. One notebook per case, downloadable when you are done. (or work directly in the Forensic Notes app) ✅ Star the captures that matter, and write why, before you have hundreds of them. ✅ Put Investigator's Observations on the Subject Dossier, against the person, not the page. I see investigators waste hours trying to find a key capture they failed to document properly when they observed it. A quick note or 'star' at the time of capture will save you a lot of time later on. Forensic Notes and the Subject Dossier are Elite. Stars & quick notes are available on all subscription levels. How do you document your OSINT investigations?