useOSINT

Router for investigation work. Pick the workflow that matches the selector you were

handed, set scope before collecting anything, and grade what you find.

Sources

Your knowledge of breach corpora, data-broker coverage, registry endpoints and platform

APIs may be outdated. Prefer retrieval over pre-training — the references below are the

current source of truth. When a reference and the live documentation disagree, trust the

documentation.

Append .md to any useosint.com/skills URL to retrieve its Markdown source instead of HTML —

fewer tokens, no markup: https://useosint.com/skills/find-anyone.md

Step 1 — Scope before you collect

Every workflow here assumes a documented lawful basis. Before searching, establish: the

subject, the objective, what is in bounds, what is out of bounds, and which jurisdiction's

law governs you and the subject. Read [../../ETHICS.md](../../ETHICS.md).

If the objective is to confront, embarrass, locate or reach a private individual in

person, stop. That is not what these workflows are for.

Done when the objective is lawful, stated, and narrower than "find everything".

Step 2 — Route on the selector you hold

Business framings map onto the same workflows:

Several of these workflows are deliberately not auto-invoked — they carry scope gates and

must be entered by name. Naming them from here is the intended path.

Step 3 — Work cheapest and least intrusive first

Structured official record → published output → regulated registers → corporate filings →

public legal and property records → social and behavioural → aggregators → archives. Do

not start with data brokers; they hand you plausible wrong answers before you have any way

to reject them.

Before touching anything that could tip off the subject, read

investigate-without-getting-made.

Step 4 — Grade before you report

Two independent sources per claim, where independent means different origin, not different

website. Grade the identity attribution separately from the claim itself — a record can be

entirely genuine and still not be your subject. Record negative findings; an absence is a

finding, not a gap to hide.

Hand off to write-the-intel-brief.

Where this goes wrong

• Skipping scope. The most common failure is collecting first and justifying later.
• Name collision. Never search a name alone; bind it to a second selector first.
• Aggregators laundering each other. Three brokers agreeing is one source.
• Over-trusting a photo match. A shared image proves shared images, not shared identity.
• Treating a sparse footprint as concealment. It usually means a private person, a

non-English footprint, or closed registries.