CASE STUDY 001 · OPEN-SOURCE INTELLIGENCE
OhSINT Investigation
CompletedA guided OSINT investigation into image metadata, public-source correlation and information disclosure risk.
This case is a curated public summary; private source records are not directly accessible to visitors.
Case study
Evidence snapshot
Summarized observations from the documented lab. No private logs or tenant identifiers are included.
| Check | Recorded result | Evidence status |
|---|---|---|
| Image metadata inspection | GPS-related fields identified in XMP-exif using ExifTool | Observed |
| Challenge completion | 7 of 7 questions completed with coaching | Completed |
| Wireless SSID lookup | Result supplied by coach; not independently confirmed | Limited |
| Blue Team controls | Detection, prevention and verification criteria proposed; not deployed | Proposed |
READ-ONLY COMMAND USED IN LAB
exiftool -a -G1 -s '-GPS*' '.\image.jpg'Approach and tools
Used Windows, PowerShell and ExifTool to inspect a challenge image, identify XMP-exif GPS-related metadata and correlate public information.
Evidence and validation
Completed all seven TryHackMe questions with coaching. A Wi-Fi SSID observation was supplied by the coach and was not independently verified.
Result and limitations
Documented investigative limitations and proposed defensive controls for image-publishing workflows. Those controls have not been deployed or tested.
Lessons learned
Distinguish observed evidence from inference; inspect EXIF and XMP; avoid overstating verification.