Test location, capture date, publication date and source freshness separately before accepting a map claim.
Advanced OSINT practice starts when several plausible observations point in different directions. The task is not to invent the most dramatic explanation. It is to identify which records are independent, what their timestamps mean and what a proposed conclusion would require.
Five progressively harder investigations
Operation Flood Frame: Geolocation, seasonal context and source lineage
Test where, when captured and when published as separate claims. Exact archived bytescan settle reuse while current weather only provides context; avoid using a contextual match to override stronger provenance evidence.
A fictional flood photo is labelled as today’s damage at a named bridge. You have text descriptions of the image, three candidate sites and a verified archive. Determine location and temporal limits without browsing real places.
Investigate the advanced dossier
Operation Shadow Meridian: Orientation correction and multi-feature exclusion
Verify transforms such as mirroring before comparing spatial relations. Use multiple independent scene constraints, then report the size and coverage of the candidate set rather than claiming worldwide uniqueness.
A fictional harbor photograph has been horizontally mirrored. You must restore orientation before comparing candidate quays. The supplied descriptions are the entire geographic packet.
Investigate the advanced dossier
Operation Port Alias: Position freshness and physically feasible movement
Keep observation time, receipt time and display-name history apart. Check route feasibility and upstream feed dependencies before drawing a movement line between two displayed map markers.
A synthetic shipping post combines vessel coordinates, an image and an arrival claim. Distinguish an alias, stale position and a physically feasible route. Distances and limits are stipulated, not real navigation advice.
Investigate the advanced dossier
Operation Checkpoint Grid: Constraint intersections and map-unit arithmetic
Write constraints explicitly and intersect them before looking at a favored candidate. Keep inclusive boundaries, unit conversion and time type visible so small interpretation mistakes do not silently change the location conclusion.
A fictional aid photograph is narrowed by three independent descriptions. Solve the grid constraints and reject a promoted near-match. Coordinates are synthetic; no personal location is identified.
Investigate the expert dossier
Operation Horizon Fuse: Composite media and multi-view geometry
Cross-validate a media bundle with source-level provenance rather than a plausible visual story. A common object can appear at many sites; calibrated differences and exact tile lineage provide stronger tests of continuity.
A synthetic image bundle is claimed to show a single continuous scene. Compare horizon heights, seam provenance and synchronized camera descriptions. Decide which evidence rules out continuity.
Investigate the expert dossier
A reusable evidence worksheet
- Record the observation. Preserve the original wording, identifier, timestamp, source and uncertainty. A quoted claim is not the same as an independently verified event.
- Normalize without overwriting. Add a corrected time or comparable amount beside the original. Write the timezone, clock error, unit conversion and rounding rule so another analyst can reproduce it.
- Trace dependency. Identify copied reports, shared instruments and derived records. Several displays may still represent one originating observation.
- Test the competing explanation. Look for a control, alternative version, ordinary mechanism or missing authority that could produce the same visible result.
- State the boundary. Separate established observations, reasonable inferences and unresolved questions. Name the additional independent record most likely to change the assessment.
How these cases level up your practice
Each dossier contains eight synthetic evidence records and seven graded objectives. The first three investigations in this category are Advanced; the final two are Expert. Difficulty comes from multi-record reconciliation and calculation rather than hidden internet searches or obscure trivia. The brief states the necessary assumptions and answer format. You can keep a narrative analysis in your notes while the engine checks the decisive short answers.
Hints are progressive. Start with the structure hint, use the method hint if you need a way into the problem, and reserve the worked-resolution hint for learning after a genuine attempt. Final-answer reveals are a learning review and do not establish an unassisted investigation result. Published methods here explain the approach without reproducing the seven graded answers.
Frequently asked questions
Are these real incidents?
No. The records, identities, organisations and events are fictional. Where public current guidance is linked, it supplies a topic context rather than authentication of a dossier.
Do I need to contact or scan a real target?
No. The supplied packet contains the evidence needed for the objectives. Do not identify private people, access restricted systems or treat a tabletop route decision as real emergency guidance.
Can an unresolved conclusion be correct?
Yes. A sound investigation can establish a discrepancy while leaving identity, intent or cause unresolved. Report the supported result and the evidence required to go further.