OSINT desk toolkit
A case desk for public-source investigations: collection, resolution, verification, and a report, split across specialist roles.
The OSINT desk toolkit gives an investigation one case record and separates who may do what. A handler coordinates the case. A collector gathers public-source material. A resolver and a verifier work the results. Playbooks describe the investigative method. Role instructions say who may write which records.
A case holds the questions, task tickets, captured artifacts, observations, entities, edges, assessments, hypotheses, and a versioned report. Scripts open a case, say which role to prompt next, claim and finalize tasks, validate the case, and seal an export. A leads index is rebuilt from sealed cases. Offline fixtures and automated tests cover correlation scenarios without calling live services.
Passive collection adapters in the repository cover keyless public sources, including registration data, historical page snapshots, and DNS. A capability inventory separates those adapters from services that still need a key, and from names that are only a catalog reference. Listing a service is not the same as having it connected. The person running the desk prompts the roles and commits the code. The roles do not commit case data.