1) Most obvious: Showing the sheer extent of destruction from high-res satellite images. Like here (my video eval video) on a destroyed warehouse in Stoyanka, Kyiv region. Maxar, March 10.
2) Satellite images can also help to dismiss #disinformation. Fake posts claimed that the warehouse in Stoyanka exploded/burned up in 2015. That's impossible. We see it untouched on dated images inf 2019 & April 2020 on Google Earth
Good tool: livingatlas.arcgis.com/wayback
3) Relying on changes: Something is/isn’t in a video/img but is/isn’t there anymore in satellite images: can serve as crucial evidence to verify whether video/imgs were taken after a certain date... later poss important in human right court cases
4) Analysis of sat images by others: Sat images can be part of leaked intelligence reports. When such footage does leak, find location and confirm time when classified report was produced -serving argument how early govs knew, and even from which satellite
5) Confirm/verify sanctioned (Russian) assets: High res imgs will show if they moved or remained in same place. There are great expls, such as @PutinIsAVirus + @marinetraffic location on #Yachtwatch of Putin's/other oligarch yachts via sat images
6) Then there is environmental damage from the attacks and explosion. On one hand, ships burning, as well as the confirmation of explosions at fuel depots. @planet img, March 11. MORE env analysis by @PAXforpeace /@wammezzpaxforpeace.nl/news/overview/…
7) Confirmation missile batteries & other troop equipment. Sentinel 1 reveal interferences that allow to a certain extent buildup of military equipment. A thread by @DahnJahn goes into this in detail:
8) SAR images to confirm when invasion plans were actually executed. Leaked docs allowed to anticipate the invasion but satellite images shows that hours before troops on the UKR/Russian border were already on the move
9) Daily update: Everyday new war videos emerge. Mapping destruction matters. Maxar/ @EUSPACEIMAGING map damage to civilian infrastructure, s.a Mariupol-Chernihiv.
Crosscheck purpose of buildings (@openstreetmap Overpass API or Google/Yandex maps)
10) Check nature of civilian buildings and crosscheck damage (also of neighboring buildings): Mariupol, 47.104, 37.560 March 9, 2022, get more information in Yandex Maps on the area. Measure extent of damage via Google Earth Pro.
11) Slight changes in position matters: Sat images offer only a snapshot. Often, small changes of an object's position reveal patterns. For an Afghan conflict story, PC-12 moved at base, confirming use. In Ukraine, Turk. A400M is left, analysis by @Gerjon_
12) Nightlight: VIIRS/other nightlight satellite sources can indicate changes: An order to cut lights to battle Russian invaders is visible on data. Then Russian power cuts, affecting civilians. It can also show Russian convoys gathering, great CNN piece shows ↙️
13) Evaluation of humanitarian sectors and refugee convoys:
On Feb 28, Google announ. to turn off live traffic updates in Ukraine. This leaves to check satellite data & civilians traffic queues (Maxar, 50.488, 30.527, cars leaving Kyiv) wired.com/story/ukraine-…
14) Geolocation for verification of video or drone footage: Plenty of work by the @Cen4infoRes thanks to satellite images. It also helps to re-confirm findings by fellow #OSINT researchers, even if Chinese state media repeats it
15) Censorship: we keep seeing areas blurred or removed from Google Earth and other mapping platforms. In China, this helped to reveal XJ camps (as Baidu Maps failed to load tiles for areas). Blurs less common but govs still request censorship (expl 2018) fas.org/blogs/security…
16) Evaluating flooding as a warfare strategy. There are examples of analysis where satellite data helped to investigate flooding of areas to battle Russian troops. Open source Sentinel images offer bands to eval changes in moisture and water bodies.
17) Heat: fires and explosion emit heat. Confirmed via infrared image band combos, we see more such analysis (Maxar here). But there are other tools such as Zoom Earth (live fire tracking) o& firms.modaps.eosdis.nasa.gov/map/
showing heatsources in the past 12hours
18) Satellite images also reveals technological development. A NATO post shows troops relocating on Aug 21, 2014. Today, 8 years later, a teenager in his underpants can do the same analysis from home.
That's progress 😱
19) Agriculture: Evaluate previously burned areas: There are formulas to make those visible, So-called burn scars. Analysis on Ukraine shows how farmland is being affected by the war. Great analysis by @detresfa_
20) 1000 different way to use #satellite imgs in investigating humanitarian/social/military/commercial situation in #Ukraine.
Problem: commercial sat firms dragged into the war - a boon/curse. Who decides who has access? Open source data must catch up on frequency/resolution
• • •
Missing some Tweet in this thread? You can try to
force a refresh
#OSINT protips: Incredibly useful at this stage for journalists assessing the situation in UKR: Street Cameras... Thread
Today showed unmistakably what livestreaming street cameras can offer for open source investigators/Journalists. How to find them?
Search on Youtube for live camera on the filter, for "Камера"...
There are various YouTube accounts that r immediately of great value, some started streaming recently, offering #OSINT intel to investigators... Wont call them out because I dont want them to close down. But especially in ODESSA there is one of GREAT value. Hope more open up
The Russian-triggered Ukraine border tension involves increasingly incidents around critical infrastructures, especially around #pipelines
A short #OSINT thread on working with data on pipelines and tools that help in the process (1)
Yesterday, a UKR armed forces officer posts a video of a burning electricity plant. Filmed @ Luhansʹka Power Station in Schastia, as @bibken geolocated, we find the name of the assoc. city mentioned. Then google dork the plant. Rest is SOP #GEOSINT (2)
Another example: few days earlier showed the value of ready-at-hand geo-information on pipeline infrastructure:
Media name-drops pipeline involved in a blast, in UKR. Problem: Druzhba gas pipeline isnt involved in breakaway Luhansk. Easy factcheck with interactive maps here (3)
On July 15, 2021, one girl, three boys, a doctor, an engineer, and a bunch of other civilians get killed in an Afghan airstrike. The reconnaissance plane coordinating bombing w. AAF fighter jets spotted & IDed as a Pilatus PC-12
Our #swissarms story out, a quick #OSINT thread
Video analysis shows a range of bombing videos tweeted by @ro_modafghan. Crosshair & other details such as the flying speed, verified via MGRS calculator (legallandconverter.com/p50.html) corroborate type of reconnaissance plane used.
Pic: MOD boasting w PC12 plane (2)
Mainly Google/Twitter/FB dorks w. Persian translation helped the team. It verified early images of a missing plane, when a Taliban Badri 313 "Special Forces" soldier is IDed on other footage (3)
Helpful dorking cheatsheet here: gbhackers.com/latest-google-…
Quick #OSINT Thread: how to determine the exact location of a photographer, time, date... from an image and a few other details. A few months back I ran some training on the matter... Where is this? (1)
(2) Reverse image search of the little red sign, reveals its owner, the SBB, Swiss rail service. Check IP address via IP Lookup, which narrows it down to Zürich City... (use a web scraper to create a polygon area for location estimates) iplocation.net #OSINT
(3) By now, it should have dawned on you, which Hotel building the shadow throws onto a train station and the name of a new popuphotel. Dare a guess for the wifi name, via Wigle shows you access points... another way of confirming the location... #OSINT wigle.net
Als Pfleger impffrei arbeiten? Unglaublich! dafür wirbt eine Impf-skeptische Jobbörse(n) "impffrei(.)work"
Eine News Analyse zeigt: nicht nur das hier unzweifelhaft auf #Disinformation verwiesen wird, sondern auch Indizien gefunden werden von wem sie stammen könnte (1) Thread:
Auf Twitter Aktiv wieder seit Nov 21, Impffrei(.)work vermittelt ungeimpfte auch in Pflege-jobs, auch in der #Schweiz. Platform Linktr zeigt impffreiwork hat min. 7 Ersatzdomains, auch auf via Tor/Darkweb. Eine Testspende zeigt ImpffreiWork ist in Italien registriert (2)
Viel weiteres ist über die organisation hinter ImpffreiWork nicht bekannt. #Bitcoin Analyse einer Spenderziel Adresse zeigt: Ein paar Kleinbeträge sind überwiese worden. Anonymous hatte sich impffrei.work schon angenommen... (3)
Thread: Biden threatens to end #NordStream2. Germany's chancellor dares not to object. The US has had objections since 2018. So did Ukraine's Ex-President (2014-2019) saying “lifting of sanctions against Russia's Nord Stream 2 is an alarming signal to the Ukrainian government”...
...👀 on Nord Stream 2 AG headquartered in Zug, 🇨🇭, plays now an integral role. For the German part of the pipeline, the company founded a new subsidiary, the "Gas for Europe GmbH", only after the German regulator demanded it. We see the entrance on Google images, in 2018...
In 2021, Swiss political parties (all but one) said the country should distance itself from Nord Stream 2, meaning, no Gas to🇨🇭. Zug, a tax haven with its Nord Stream 2 AG, could mean (as seen before) reputational loss for the whole country & relationship issues with the US...