Duncan Investigations: Expanding Our Digital Investigation Capabilities with Python
Turning Digital Information Into Investigative Intelligence
The internet has changed the way investigations are conducted. Today, an investigation may begin with something as simple as a telephone number, email address, username, social-media account, website or company name. That single piece of information may be the starting point for a much larger investigation.
At Duncan Investigations Inc, we continue to expand our digital investigation capabilities by incorporating Python-powered Open Source Intelligence (OSINT) tools into our investigative toolbox.
Python allows investigators to automate certain searches, examine large amounts of publicly available information and identify potential connections between different pieces of data. But technology is only part of the process. The real value comes from knowing how to interpret, verify and connect the information.
What Is OSINT?
OSINT—Open Source Intelligence—is the process of gathering and analyzing information from publicly available sources. This can include websites, social media, public documents, online directories, company information, usernames, email addresses, telephone numbers and other publicly accessible sources.
The objective isn't simply to find information. It is to determine what the information means, whether it is reliable and how it may relate to an investigation.
Our Python OSINT Toolbox
We use a variety of specialized tools, because different identifiers require different investigative approaches. We are learning python tools daily and we will continue to share our toolbox so we can demonstrate why Duncan Investigations Inc., is your choice for OSINT. Python delivers fast, reliable results relative to traditional OSINT investigations.
📧 Email Investigations — Holehe
Holehe can help examine whether an email address appears to be associated with accounts on various online services. An email address can sometimes provide the first link to a larger digital footprint.
👤 Username Investigations — Sherlock & Maigret
People sometimes reuse usernames across different websites.
Sherlock and Maigret can search for usernames across numerous online platforms, helping investigators identify potential connections.
A matching username is a lead—not automatically proof that the accounts belong to the same person. Verification is essential.
🔎 Google Account OSINT — GHunt
GHunt is designed to investigate publicly exposed information associated with Google accounts. This can provide additional investigative leads when researching an online identity.
📱 Telephone Number OSINT — PhoneInfoga
A telephone number can be a powerful investigative identifier. PhoneInfoga can assist investigators in gathering publicly available information and indicators associated with a telephone number. A phone number may also lead to other identifiers that can be investigated.
💬 WhatsApp — WhatsOSINT
WhatsOSINT provides another avenue for investigating information associated with telephone numbers and WhatsApp.
As with all OSINT, results must be evaluated and corroborated rather than automatically treated as identification.
Telegram Investigations
Telegram has become an increasingly important source of publicly available information. Our Telegram-focused toolbox includes resources such as: Telepathy, Telerecon, Informer, TGInformer, Tosint
These tools can assist with research involving publicly available Telegram usernames, IDs, messages, channels, members, replies, reactions, forwards and other information.
Telepathy, in particular, can help investigators examine relationships and connections within publicly available Telegram information.
SpiderFoot — Automated OSINT
SpiderFoot helps automate the discovery of information from multiple OSINT sources.
Rather than investigating only one identifier, it can help researchers explore information involving areas such as domains, email addresses, usernames, websites, IP addresses and other publicly available data.
Automation can save investigators considerable time and help identify areas requiring further research.
One Piece of Information Can Lead to Another
This is where digital investigations become particularly interesting.
An investigation might begin with:
Telephone Number
↓
Email Address
↓
Username
↓
Social Media
↓
Telegram
↓
Website
↓
Company or Individual
↓
Corroborated Intelligence
This process is known as pivoting—using one piece of information to identify another potential investigative lead.
Technology Does Not Replace the Investigator
A search result is not necessarily evidence.
A username is not necessarily an identity.
An email address is not necessarily proof of ownership.
An online profile may belong to someone with a similar name.
That is why professional OSINT requires verification, corroboration and investigative
judgment.
Our tools help us discover information.
Our experience helps us determine what that information may actually mean.
How OSINT Can Help
Digital investigations can be useful in many areas, including:
Fraud investigations
Online scams
Identity research
Missing-person investigations
Corporate due diligence
Business investigations
Background research
Online relationship investigations
Cryptocurrency-related investigations
Social-media investigations
Telephone and email investigations
At Duncan Investigations Inc., we combine traditional investigative experience with modern digital intelligence techniques to identify, analyze and corroborate publicly available information.
You bring us what you know. We investigate what may be behind it.
Duncan Investigations Inc.
Purpose-Driven Intelligence
Contact us for a confidential consultation to discuss whether a digital or OSINT investigation may be appropriate for your situation
Comments