10 Ways Journalists Use OSINT in Investigations

The first OSINT skill in any newsroom is verification. A viral video claims to show a protest in a particular city tonight — is it? Journalists check the metadata, reverse-image-search keyframes to find earlier publication, and match landmarks, signage, and shadows against satellite imagery and street-level cameras. WorldEye's 40,000+ public cameras are a direct tool here: pull up a live feed from the claimed location and compare the weather, light, and streetscape.

The same discipline applies to photos from conflict zones. Matching a photo's terrain to satellite imagery, checking the sun angle against the claimed time, and finding the same location on a live camera can confirm or kill a story in minutes. Getting this wrong means publishing misinformation — getting it right is what separates reporting from reposting.

Speed matters, but so does a verification workflow the whole desk follows. The best newsrooms maintain shared checklists and require two independent confirmations before airing user-generated content. Lone-wolf verification is admirable; institutional verification is reliable. Build the checklist once, and every breaking story gets faster without getting sloppier.

One final habit: keep a personal log of your verifications — what you checked, what you found, what you concluded. Over time it becomes both a portfolio of your rigor and a reference when similar claims resurface, as they always do.

Aircraft ADS-B data has broken major stories: rendition flights, oligarch jets, deportation planes, and sanctions-busting cargo routes were all first spotted by journalists watching trackers. A tail number tied to a person of interest, followed across months of flight history, becomes a travel diary no press release will provide.

Ships tell parallel stories. AIS data reveals sanctioned oil transfers (tanker meets tanker mid-ocean, transponder goes dark), arms shipments, and the supply chains behind conflicts. The pattern to watch is the anomaly: the ship that turns off AIS near a sanctioned port, the flight that files one destination and lands at another.

Every website leaves public traces: DNS records, WHOIS registration, SSL certificates, IP ranges, name servers. Journalists use these to unmask disinformation networks — fifty 'independent' news sites sharing one server and one registrant are not fifty news sites. Certificate transparency logs, which record every TLS certificate issued, are a goldmine for finding infrastructure an actor hoped would stay hidden.

Satellite imagery extends this to the physical world: construction at a remote site, the growth of a detention facility, the aftermath of a strike. Time-series imagery — comparing the same coordinates across months — turns a single image into evidence of change.

The Wayback Machine is an investigative tool: deleted press releases, stealth-edited corporate pages, and vanished social profiles all live on in archives. Before interviewing anyone about their past statements, check what the archives remember.

Public datasets do the rest — court records, corporate registries, procurement databases, campaign finance filings, property records. The modern investigative journalist is as comfortable with a spreadsheet join as with a doorstep interview, and the biggest stories increasingly come from the join, not the knock.

When news breaks — an earthquake, a fire, a protest — live data is the newsroom's radar. Seismic feeds, wildfire perimeters, flight diversions, and street cameras near the scene give reporters ground truth before stringers arrive. Monitoring these feeds is now a standard desk skill.

Finally, the ethics that hold it together: OSINT's power cuts both ways. Do not publish personal data of private individuals, do not use these techniques to harass or stalk, and verify relentlessly before publication. The same methods that expose wrongdoing can harm the innocent — the journalist's job is to know the difference.

Behind every flashy technique sits unglamorous public records. Corporate registries reveal who owns what; court filings contain testimony and exhibits no interview would surface; procurement databases show who buys from whom; campaign finance records map money to influence. The journalist who can navigate a secretary of state's business search is armed for stories the press-release crowd never sees.

Property records deserve special mention: they are public, detailed, and underused. Who owns the mansion, when was it bought, for how much, through which LLC — these are answerable questions in most jurisdictions, and the answers have sunk politicians and exposed frauds. Pair an address from a flight track or a leaked document with the property registry and watch a story assemble itself.

The skill is knowing these records exist and being patient enough to pull them. None of it requires hacking or leaks — just the knowledge that the paperwork of power is, by design, public.

Open sources have limits, and honest journalists name them. Some questions can't be answered from public data: what was said in a closed meeting, what a document nobody leaked contains, why a person made a decision. OSINT can narrow the possibilities and sharpen the questions, but it can't replace human sources for interior motives and private acts.

The best investigations pair OSINT with traditional reporting. The flight track tells you the official traveled to a city; the source tells you what the meeting was about. The satellite image shows the construction; the whistleblower explains what it's for. Treat open-source work as the scaffolding: it gets you to the right door, but sometimes you still have to knock.

And maintain the skepticism OSINT teaches. Every dataset has gaps, every image a context, every record a possible error. The journalist who verifies their own findings as ruthlessly as they'd verify a stranger's video is the one whose stories hold up.

No single tool does all of this; the craft is in combining them. A typical investigation might start with a flight track, pivot to the aircraft's registration database, check the operator's corporate records, map its infrastructure via DNS, and verify a key location on a live camera — five public sources, one story.

What distinguishes the professional is documentation: every claim needs a citable public source, every image a provenance trail. Screenshots with timestamps, archived URLs, database exports — the evidence file behind a published investigation is often larger than the story itself. When challenged (and good investigations get challenged), that file is what stands between the journalist and a retraction.

WorldEye was built for exactly this kind of pivoting: flights, ships, satellites, cameras, quakes, and weather on one globe, with an OSINT toolkit (DNS/WHOIS, network scans, SSL analysis) and an AI assistant on the Pro tier to help correlate it all. The map is free — the investigation is up to you.