June 21, 2019
To some researchers, TweetDeck might seem superfluous in a world where Twitter Advanced Search exists. The platform would appear to be just a prettier version of what you are already doing through Twitter. However, I am here to show you how TweetDeck can vastly simplify and organize your research while allowing you to collect a…
April 8, 2019
By Aric Toler
Popular apps such as TrueCaller or GetContact advertise the ability to see who is really calling you, even if you do not know the number, and alert the app user of spam or scam calls. However, the way that these apps gather information to determine the name of an unknown caller is not as broadly…
March 26, 2019
By Brenna Smith
After posting a tutorial on tracking GRU agents’ bitcoin (BTC) transactions, I’ve received numerous responses asking how to find out even more. I aim to please, so I’ve put together another tutorial using Izz ad-Din al-Qassam Brigades’ bitcoin funding campaign as a case study. What You’ll Need To effectively analyze any bitcoin address, I rely…
March 21, 2019
By Nathan Patin
Whether you’re investigating a company purporting to have damning information on Robert Mueller or conducting research on anti-Islamic State foreign fighters in Iraq and Syria, LinkedIn can serve as a useful resource for online researchers across a wide variety of subjects. This guide aims to provide helpful tools and techniques for identifying LinkedIn profiles and…
March 5, 2019
It has become abundantly clear that geolocation and remote sensing is fundamental to knowing what happens in conflict areas where it is often too dangerous for journalists, observers and analysts to be present on the ground. This is a satellite-based case study on vetting a three-dimensional view of an area via Google Earth, featuring examples…
February 19, 2019
By Aric Toler
Update: SearchFace is dead, long live FindClone! This guide is now mostly for historical interest, as SearchFace has been taken offline and replaced with FindClone, a far easier tool to use than SearchFace was. You need to use a mobile telephone number to create an account for FindClone, which then gives you 30 searches over a…
February 14, 2019
A Case Study, Featuring the Electoral Roll of the Kyrgyz Republic When conducting digital investigations, using the tools already made available by the government can be a real help. Let’s use Kyrgyzstan as an example here. You may be looking for a witness or even a suspect in a crime, but you only know the…
February 1, 2019
By Brenna Smith
In recent years, cryptocurrencies such as Bitcoin have been used by terrorists to conduct funding campaigns, authoritarian governments to subvert its citizens’ human rights, and GRU agents to hack the Democratic National Committee as well as the Clinton campaign. Though many people utilize virtual currencies for legitimate purposes, the technology is an enticing tool for…
January 4, 2019
By Justin Seitz
URL previews are a nice feature found in most messaging applications. They allow you to paste a URL to a friend or colleague, and have a handy miniature view of the website you are about to view. The downside is that a lot of applications generate these previews without you knowing what is happening behind…
November 19, 2018
Identifying changes in infrastructure is an important task for those of us surveilling areas for investigative purposes. Satellite imagery can show evidence of everything from the destruction of buildings, the erection of temporary structures, as well as newly constructed permanent facilities. This kind of information is important for analysis of events in conflict areas, as…
Subscribe to our email list to receive a weekly selection of stories published by Bellingcat during the previous week, along with links to our favorite examples of open source research around the web.
Along with our published content, we will update our readers on events that our staff and contributors are involved with, such as noteworthy interviews and training workshops.
You can support the work of Bellingcat by donating through the below link: