OSINT Foundations
Find the thread. Pull it methodically.
Seed discovery, alias pivoting, image and geolocation, archival recovery, public records, technical infrastructure, and the major platforms. The bedrock for any investigator working open sources.
2026.6 edition · revised continuously
What this bundle gives the agent that ChatGPT alone won't.
WHOIS dump only
Returns a privacy-shielded WHOIS. Suggests 'contact the registrar'.
Complete infra graph
Runs domain-and-whois-research → ssl-certificate-pivoting → dns-history → cdn-origin-discovery → github-source-leak-search → wayback-deep-dive. Produces an infra graph with provenance.
Every skill in this bundle.
All 63 skills, grouped by category. Every skill ships as a full folder — SKILL.md plus runnable scripts, legal references, and field checklists.
OSINT — seed & pivot
10 skills- 001Seed Discovery From Name
- 002Seed Discovery From Email
- 003Seed Discovery From Phone
- 004Seed Discovery From Username
- 005Seed Discovery From Photo
- 006Seed Discovery From Domain
- 007Seed Discovery From License Plate
- 008Alias and Handle Pivoting
- 009Username Enumeration Across Platforms
- 010Email Permutation and Verification
OSINT — media & geolocation
9 skills- 901OSINT Image Investigation
- 011Reverse Image Search Workflow
- 012Exif and Image Metadata Analysis
- 013Geolocation From Image
- 014Chronolocation From Image
- 015Shadow Corroboration Geolocation
- 016Video Content Geolocation
- 017Satellite and Aerial Imagery Research
- 018Street View and Mapillary Corroboration
OSINT — archival & deep web
8 skills- 902Webpage Evidence Preservation Wayback
- 019Wayback Machine Deep Dive
- 020Archive Today and Google Cache
- 021Dark Web Investigation
- 022Paste Site Monitoring
- 023Breach Data Correlation
- 024Data Broker Aggregation
- 025Forum and Imageboard Research
OSINT — records
16 skills- 903Mystery LLC Owner Unwinding
- 026Corporate Filings Research
- 027Court Records Search by Jurisdiction
- 028Property Records Tracing
- 029Vehicle Records Tracing
- 030Vessel and Maritime Tracking
- 031Aircraft and Flight Tracking
- 032Shipping and Cargo Tracking
- 033Trademark and Patent Research
- 034Genealogy and Vital Records
- 035Obituary Research
- 036Campaign Finance Research
- 037Lobbying Disclosure Research
- 038Nonprofit 990 Research
- 039SEC EDGAR Research
- 040Regulatory Licensing Lookup
OSINT — technical infrastructure
8 skills- 041Domain and Whois Research
- 042IP and ASN Attribution
- 043SSL Certificate Pivoting
- 044DNS History and Passive DNS
- 045CDN and Origin Discovery
- 046Github and Source Leak Search
- 047Cloud Bucket Discovery
- 048Mobile App Ownership Attribution
OSINT — platforms
12 skills- 049Linkedin Investigation
- 050Facebook and Meta Investigation
- 051Instagram Investigation
- 052Twitter X Investigation
- 053Tiktok Investigation
- 054Reddit Investigation
- 055Discord Investigation
- 056Telegram Channel Investigation
- 057Youtube Investigation
- 058Mastodon and Activitypub Investigation
- 059Dating App Presence Detection
- 060Live Stream Platform Investigation
Skills that stay current.
Buy OSINT Foundations once to own it, frozen at this edition. Add the Update Subscription ($10/mo) and every revision to everything you own lands on your machine as we ship it — new case law, new platforms, new tactics. Cancel anytime; downloads stay yours.
How it worksGive the agent real tools.
36 pre-vetted MCP servers (Maigret, Shodan, Wayback, EdgarTools, Etherscan, Volatility, +30 more) wired into Claude Code / Desktop / Cursor / Windsurf so your agent actually runs the tools — not just suggests them.
What's in the toolkitRun agents in parallel.
Orchestrator.md — one file that makes an advanced LLM automatically spin up multiple agents at once (people, businesses, case-facts review, report writing) and merge them into one case file. Free with the all-bundle package, or $100 on its own.
See the example