Description

What you get

• The master tool list: 380+ tools (including ones not on our public directory) organised by what you are investigating: person, username, email, phone, company, domain, IP, image, location, vehicle, crypto wallet, dark web.
• 10 investigation playbooks: username → identity; email → accounts & breaches; phone → owner; domain → operator & infrastructure; image → location; company due diligence; executive footprint; brand impersonation takedown; crypto transaction tracing; social-media account verification. Each is a numbered workflow with the exact tools to use at each step.
• Google dork cheat sheet: 48 ready-to-adapt queries for documents, exposed panels, people and companies.
• OPSEC checklist: how to investigate without exposing yourself (sock accounts, VPN/Tor hygiene, browser isolation, logging).
• Investigation report template (DOCX): executive summary, findings with confidence ratings, evidence log, chain of custody.
• Evidence log spreadsheet (XLSX) for capturing sources, timestamps and hashes.
• Sortable tool list (XLSX): the full master list as a filterable spreadsheet with “tried / rating / notes” columns.

Who it is for

Security analysts, SOC teams, journalists, researchers, due-diligence and fraud teams, and anyone learning OSINT seriously. Written by a practitioner, not a content farm.

Format

PDF (readable on any device) plus DOCX/XLSX templates. This is the 2026 edition; every tool was checked at the time of publishing.

Legal note

This toolkit teaches lawful collection from publicly available sources. It does not include hacking techniques or stolen data, and it must not be used to harass or stalk.