OSINT Toolkits, Verification Frameworks & Command Cheatsheets
A practitioner-curated repository of open-source intelligence utilities, commercial satellite portals, command-line forensic scripts, and epistemic verification checklists built for field and desk analysts.
- Core Focus: Open-Source Intelligence (OSINT) tools across Geospatial, Maritime, Aviation, SOCMINT, and Forensic Verification.
- Target Users: Intelligence analysts, defense researchers, investigative journalists, and SOC threat hunters.
- Featured Tools: Sentinel Hub, EO Browser, MarineTraffic, ADS-B Exchange, ExifTool, FFmpeg, Maltego, QGIS, GDELT 2.0.
- Epistemic Standard: 100% passive, legally compliant, open-access tools verified by ICS tradecraft specialists.
1. Satellite & Geospatial Telemetry Portals
Commercial and open-access remote sensing platforms for conflict monitoring, facility expansion tracking, and damage assessment.
| Tool / Platform | Analytical Function & Sensor Scope | Access Tier |
|---|---|---|
| Copernicus Sentinel Hub (EO Browser) ↗ | Multispectral optical & radar (SAR) imagery | Free Tier / Open Access |
| NASA FIRMS Thermal Anomaly System ↗ | Near-real-time satellite active fire & kinetic strike detection | Public Global Feed |
| USGS EarthExplorer (Landsat 8/9) ↗ | Longitudinal terrain and environmental change archive | Free Account |
| Google Earth Engine & Timelapse ↗ | Historical multi-decade satellite imagery comparison | Free Developer Tier |
2. Maritime & Aviation Transponder Tracking
Real-time global tracking of commercial vessels, naval auxiliaries, military transport aircraft, and VIP flight corridors.
| Tool / Platform | Analytical Function & Sensor Scope | Access Tier |
|---|---|---|
| ADS-B Exchange ↗ | Unfiltered aircraft tracking with military filter toggles | Open Web Portal / API |
| MarineTraffic / VesselFinder ↗ | Global AIS maritime transponder position logs & port calls | Freemium / API Available |
| OpenSky Network ↗ | Non-profit academic ADS-B flight history database & API | Free Academic API |
| Global Fishing Watch ↗ | Commercial fishing & dark fleet loitering behavior mapping | Public Data Platform |
3. Digital Forensics & Metadata Sanitization
Command-line and browser tools for chronolocation, reverse-image search, and cryptographic media verification.
| Tool / Platform | Analytical Function & Sensor Scope | Access Tier |
|---|---|---|
| ExifTool by Phil Harvey ↗ | Industry-standard metadata extraction and scrubbing CLI | Open-Source CLI (GPL) |
| FFmpeg Video Analysis Toolkit ↗ | Frame-by-frame extraction, audio spectrography, codec inspection | Open-Source CLI (LGPL) |
| FotoForensics & InVID WeVerify ↗ | Error Level Analysis (ELA) and video debunking extension | Free Browser Tool |
| SunCalc & Shadow Calculator ↗ | Solar azimuth and shadow chronolocation calculation | Free Web Application |
4. Conflict Event Telemetry & Structured Datasets
Aggregated global event databases for quantitative conflict modeling and spatial trend analysis.
| Tool / Platform | Analytical Function & Sensor Scope | Access Tier |
|---|---|---|
| GDELT Project 2.0 ↗ | Global broadcast, print, and web news event geocoding | Free BigQuery / Direct Download |
| ACLED (Armed Conflict Location & Event Data) ↗ | Curated political violence and protest event tracking | Academic / Non-Commercial Free |
| Liveuamap (Live Universal Awareness Map) ↗ | Real-time crowd-sourced and verified conflict mapping | Free Web / Mobile App |
| SIPRI Arms Transfers Database ↗ | International conventional arms procurement and transfer trends | Open Access Database |
Essential Command-Line Forensic One-Liners
exiftool -a -u -g1 -gps:all target_image.jpg
Extracts complete EXIF/IPTC/XMP metadata tags including raw GPS latitude/longitude and camera model.
ffmpeg -i surveillance_footage.mp4 -vf fps=1 frame_%04d.png
Extracts high-resolution uncompressed still frames at 1-second intervals for chronolocation and landmark matching.
exiftool -all= -overwrite_original operational_report.pdf
Wipes all author names, editing software fingerprints, and creation timestamps for OPSEC compliance.
Frequently Asked Questions
Details on access, citations, methodology validation, and collaborative research.
Is open-source intelligence collection legal for private organizations?
Yes. Passive OSINT involves collecting and analyzing publicly accessible data (satellite imagery, commercial radio transponders, public government filings). It complies with international legal frameworks provided no active network intrusion, unauthorized computer access, or privacy violations occur.
How can analysts verify satellite imagery against spoofing or deepfakes?
Professional tradecraft requires multi-sensor cross-validation: comparing optical satellite passes (Sentinel-2) against synthetic aperture radar (Sentinel-1 SAR which penetrates cloud cover), historical weather records, and ground-level shadows calculated via SunCalc solar azimuth.
What hardware and operating system environment is recommended for OSINT investigations?
We recommend conducting investigations inside dedicated, non-attributable virtual machines (e.g. Debian, Ubuntu, or Tails) running over isolated network tunnels (SOCKS5/VPN) with compartmentalized browser profiles and hardware isolation.
Can these toolkits be integrated into automated enterprise data pipelines?
Yes. Most tools featured above provide REST APIs, CLI binaries, or Python bindings that can be containerized into automated collection nodes within our Custom Intelligence Pipeline architecture.