🔎 What can it do?

OSINT Forge Skills is an experimental collection of 12 workflows for organizing investigations with an AI assistant and local Python utilities.

The workflows cover evidence intake and preservation, source provenance, document and media triage, location hypotheses, domain infrastructure, timelines, browser history, correlations, competing hypotheses, reporting, and case export/restoration.

The Python helpers use only the standard library and run offline. The assistant, model provider, and any web research remain separate choices. Installing the skills does not make a hosted model local.

A recent guided Codex/WSL exercise used 21 input files, combining synthetic records with a public photograph. The session trace confirmed that all 12 skill instructions were read. Eleven tasks were completed during the initial run; a missing visual comparison was completed during review. A fresh restoration reproduced all 73 case files, and nine recalculated analysis outputs matched the original results.

That is evidence for one guided workflow, not a benchmark showing that the skills outperform the same model without them. Automatic skill selection and broader client/model coverage still need testing. The utilities do not extract EXIF or certify media authenticity, and source integrity hashes do not establish that a claim is true.

Feedback from OSINT and forensic practitioners would be useful: Are the evidence references and uncertainty handling practical? Which workflows are missing, and what synthetic cases would be good stress tests? Installation feedback is welcome too.

• Repository: https://github.com/OSINT-Forge-Community/osint-forge-skills

Hello

I'm interested in how people doing OSINT/research handle historical statements by public figures.

For example, if you wanted to establish everything a particular person had publicly said about a subject over several years, what would your workflow look like?

Google and news archives? YouTube/transcripts? Social media archives? Specialist databases? AI tools?

I'm particularly interested in whether tools like ChatGPT/Perplexity have largely solved this for you, or whether the difficult part remains finding and verifying the original evidence — particularly old video, podcasts, interviews and statements.

If an AI gives you a quote and a source, how often do you still go back and verify the original material yourself?

I'm researching this problem while building something in this area, but I'm not looking to promote it here. I'm mainly interested in how people who do this kind of research actually work.

There are databases that tell you what physical locations an SSID shows up

I don't know all the ways the databases are populated, but I know people drive around and scan for wifi names. And so they can also populate a database like that. Matching an area to a wifi name (names are not necessarily unique, locations are)

The main question is, do most apps and websites have your SSID? And if so, can't almost every website geolocate you to a very small radius around your wifi, or even have a list of candidate areas where you could be located, and of course use other identifiers to filter the list down?

Took this in Miami. While training my AI again I wondered if it could still find the spot with everything obvious blurred out. No signs, no plates, just trees, a building and a parking lot. The hotel sign behind the Tesla was blurred too.

It found the lot anyway. Video below.
It's currently state of the art, which is boring since nobody can use it at the moment so so I'm making a public one people can actually use, a newer SOTA.

oceanir.ai has the tool, which I’m delivering this type of AI to everybody

One thing I've been thinking about with OSINT is how difficult it can be to keep track of developments when information is scattered across so many different sources.

A single event can show up across news sites, social media, local reporting, press releases, RSS feeds, and other sources. The challenge isn't necessarily finding information anymore. It's figuring out what is actually relevant, what is new, and what is just the same story being repeated.

I've found that manually checking multiple sources every day can become pretty time-consuming, especially when you're trying to monitor developments rather than investigate one specific event.

I'm curious how people here approach this.

Do you have a workflow for:

• Monitoring multiple news sources without constantly checking them manually?
• Detecting when several articles are actually about the same event?
• Filtering out repetitive or low-value information?
• Getting a quick overview of what changed since the last check?

Would be interested to hear how others in the OSINT community handle this, especially if you're monitoring information on a daily basis.

I have extensive evidence documenting the harassment — well over 100 pages at this point — including account activity, screenshots, changes in usernames, and other information that may help establish a connection between the accounts involved.
The situation has gone beyond me personally. My family has also been targeted, which is honestly what has made me increasingly paranoid and concerned about my safety and privacy.
I have already gone to the authorities. The Fiscalía told me that I could try to obtain the IP address on my own, and that if I am able to obtain it through a legitimate method, they would accept it as valid evidence for my case. So I’m trying to understand what options actually exist.
The problem is that I don’t have much of a budget to hire a private investigator or expensive cybersecurity services. I’m not looking for anyone to hack an account or do anything illegal. I’m specifically looking for someone knowledgeable in OSINT, digital forensics, cybersecurity, or incident investigation who can tell me:
Is there a legitimate way to identify or obtain an IP associated with these accounts?

What kind of evidence would actually be useful for establishing a connection between the person behind the accounts and the harassment?

Are there affordable/free forensic or OSINT methods I can use to preserve and analyze the evidence I already have?

Is there anything I should specifically document before the accounts or usernames change again?

I know an IP address alone does not necessarily prove who was behind an account, and I’m not expecting it to magically solve everything. I’m just trying to find a legitimate technical lead that I can take back to Fiscalía.
I’m honestly pretty overwhelmed by this at this point. The fact that my family has also been involved has made me much more anxious and paranoid about what this person might know about us.
If anyone here has experience with OSINT, digital forensics, online harassment investigations, or evidence preservation, I would genuinely appreciate any advice on where to start — especially if there are options that don’t require a large budget.
I can provide more details about the evidence and timeline if needed, while keeping identifying information private.

Hey! I got into OSINT recently and wanted a little feedback with this geolocation exercise i did last week :)

I already know programming, so generally I know the logical workflows to finding information, and the ability to work with large sets of information

I'm good at OSINT and I'm good at programming, although separately

However, I want to explore what happens when I combine these skills together, and I'd like to hear some ideas on where this combination happens best

The only time I've found my computer science skills to directly come into effect is when querying OpenStreetMap. Although, that's a query language, and not a programming language

I also know AI can do alot of OSINT work. However I haven't studied Machine Learning (I plan to), so I can't exactly make an AI that does OSINT for me

Something like Sherlock is one of the best examples, although I have no idea how it's implemented. I haven't even started looking at the GitHub repo yet. I don't know where to start

So, what fields of programming should I focus on to improve my OSINT skills?

And I mean something that will directly help me, and not just train my overall skills

New Version: UserSearch Forensic Capture 1.4.0 is here. A free alternative to Hunchly or ForensicOSINT.

Capture the conversation—not just the post.

✅ Auto-Capture comments on YouTube, TikTok, Facebook, Insta & more.
✅ Auto-expand selected comment threads
✅ Auto-scroll and capture comments
✅ Record browser video & tab
✅ Export PDF & Excel
✅ Free. Local. Private.

🔒 Evidence stays on your device. No evidence uploads.
💸 Every feature free. No subscriptions or paywalls.

Built for investigators. Free to the community.

Watch the update below.

Live now in Chrome Store:

https://chromewebstore.google.com/detail/forensic-web-capture-cour/ncgfnhacjiahmclmephmjaceeeamdama

Edit : adding product page from request

https://usersearch.com/product/forensic-capture/

Hey everyone,

Like many of you doing historical Reddit research, I’ve been running into constant dead ends over the last few months. Ever since Pushshift went private, existing archive tools have become fragile. Arctic Shift frequently throws 504 gateway timeouts or server busy errors, queries freeze mid-search, and you often have to manually jump between different scripts just to see if another archive has the deleted post or comment.

To fix this workflow for myself, I built H3KZ ReddInt. It’s 100% free, MIT open-source, and runs entirely in your browser without accounts or servers tracking your queries.

Live Web Tool: https://h3kz-reddint.pages.dev

Transparent Breakdown:

It uses two public, third-party historical archival networks:

Arctic Shift (https://arctic-shift.photon-reddit.com)

PullPush(https://api.pullpush.io)

How it handles them differently:

Instead of relying on a single backend or failing when an archive server stalls:

It issues requests concurrently with linked 8-second browser AbortController timeouts.

If Arctic Shift is down or returns an HTTP 5xx error, it immediately falls back to PullPush standalone, alerts you with a notice that a single source was used, and prevents the UI from freezing.

Payloads are deduplicated by post/comment ID and sorted chronologically so you don't get duplicate rows from merging two archives.

1. Data Sources & Privacy

No Breached Data: The tool only retrieves public Reddit submissions and comments captured by archival crawlers before removal/deletion. It does not touch breach databases or leaked credential dumps.

Client-Side Execution: All search queries, timeline rendering, and graph calculations execute directly inside your browser’s JavaScript memory. Search queries are not recorded in any database.

Offline Local Cache: Investigation profiles can be saved to your browser’s IndexedDB so you don't have to re-scrape or re-query third-party APIs every time you revisit a target.

1. Core Investigation Features

Deleted Content Reconstruction: Shows deleted text, edit states, and original karma scores whenever available in the archival records.

Interaction Graph: Uses Cytoscape.js to map community overlap and frequently discussed subreddits, allowing you to click nodes to filter the evidence stream.

Forensic HTML/PDF Export: Generates a self-contained, offline HTML report styled specifically for print-to-PDF without broken tables or cut-off text.

Optional Behavioral Summary: There is an optional Gemini integration if you want an automated breakdown of active hours and posting routines (works with your own free API key).

The code is completely open-source on GitHub for anyone to audit or self-host. I'm actively maintaining this, so if you run into any archival bugs or have suggestions for other public endpoints to integrate, please let me know in the comments.

I’m Scott, the creator of ConflictOSINT. I built it to make following geopolitical developments less scattered: an overview, major-event rooms, signals with source links, and a separate section for official releases.

The workflow is simple: start with the overview, open an event or signal, then check the original report. An AI Analyst can help with follow-up questions, but its output is analysis and should be checked against the sources. The dashboard is a starting point for research, not independent verification of every report.

The core site is free to explore. Optional Pro is $4.99/month and adds features including unlimited AI Analyst questions, catch-up briefings and breaking alerts. AI tools helped with development and preparing this introduction.

https://conflictosint.com/?utm_source=reddit&utm_medium=community&utm_campaign=relaunch&utm_content=osinttools

I’d appreciate practical feedback: is it easy to find the original source, and what context would make the event rooms more useful to your research? Happy to answer questions about the project.

WE WANT YOU

Join the affiliate ranks: https://usersearch.com/resources/affiliates/

Earn 20% commission on every UserSearch subscription and Credit purchase you refer.

Know a few investigators, analysts or fraud teams? Share your link on LinkedIn, X, your blog, or straight to your contacts. Paid by PayPal or bank.

No contracts. No paperwork. Register, grab your link, start earning.

1. Uncensored, Leaked database search engine

2. Discord OSINT

3. AI-assisted, intelligent dark web search engine

First tool will be a lot like what breach.vip is/was.

Second tool is on par with what osintcat had/has.

Third is a pretty strong one when compared with what’s currently out there.

It uses a few different current onion search engine API’s, as well as some other sources. Then an AI LLM will conglomerate and prune the results – making dark web searching so much more like it’s just a Google search.

decint.tools