OSINT for Criminal Investigation

A criminal investigation is an official effort to uncover
information about a crime. There are generally three ways
that a person can be brought to justice for a criminal act.
First, and probably the least likely, the individual will be
driven by his conscience to immediately confess. Second,
an officer of the law can catch him in the act. Third, and
most common, a criminal investigation can identify him as
suspect, after which he may confess or be convicted by trial.

criminal investigation is an official effort to uncover information about a crime. There are generally three ways that a person can be brought to justice for a criminal act. First, and probably the least likely, the individual will be driven by his conscience to immediately confess. Second, an officer of the law can catch him in the act. Third, and most common, a criminal investigation can identify him as suspect, after which he may confess or be convicted by trial.

The investigator's interpretation of information and evidence
commonly requires answers to many questions that can lead
critical of decisions, actions, and outcomes, such as:

Who will become the focus or subject of a
criminal investigation?

Will someone be subjected to a search of their
person or of their home?

Will someone be subjected to detention or
arrest and questioning for a criminal act?

Will someone be subjected to a criminal trial?

The Solution Is KIS

Automated investigative approaches can quickly correlate the bits of data collected in a
web search - threat actors' online handles, IP addresses, phone numbers, and photos, for
example. String together enough informational breadcrumbs can help deanonymize
threat actors. Once an identity is unmasked, platform analysis lets investigators uncover
additional relationships and entire networks of threat actors.

Critically analyze all available information and evidence

Preserve and document all evidence and information

OSINT - preserve and document evidence and information

Gather the maximum available evidence and information from people, locations, devices and websites