Picking up the pieces

POI‑centric OSINT isn’t about the tool stack — it’s the structured puzzle you assemble from the pieces people leave behind. And when someone is effectively unplugged, the digital footprint is low-signal, high effort. The structure comes from the process. This is what works for me:

1. Start with the anchor. Name variants, approximate age, region, and relational identifiers. You need a stable starting point before anything else.

2. Build the address timeline. Addresses are continuity. They anchor time, movement, co‑residents, and jurisdiction.

3. Map the social graph. Family, past roommates, associates, repeated name pairings. Not guilt by association — just context.

4. Pull the temporal markers. Court events, judgments, relocations, employment disputes. Anything with a date becomes a fixed point in the timeline.

5. Identify behavioral indicators. Not profiling — pattern recognition. Stability, volatility, offline gaps, etc.

6. Cross‑validate. Does the age match the timeline? Do the addresses align with events? Do the name variants converge?

7. Document what you didn’t find. When the trail is narrow, the absence of data is part of the picture. No socials, no email, no online presence — in these cases, the lack of observable data matter to the client as much as the hits.

8. Stop where the data stops. No speculation. No assumptions. Just observable continuity.

When a POI leaves only a few observable crumbs, structure becomes the method: map the known pieces and assemble the picture from there.

Previous
Previous

let’s be clear

Next
Next

It’s not what you’re thinking