Identity & attribution
Usernames, handles, display names and account artifacts correlated across platforms into a defensible attribution chain.
Independent digital investigations
Evidence, assembled
from the open record.
TRIARC OSINT conducts open-source investigations into online misconduct and provides documented findings to affected communities, organizations and individuals — so moderation and safety decisions are made on verified fact rather than rumour.
MethodologyOSINT
SourcingEvery finding
IntakeConfidential
Most online harm is documented somewhere — scattered across screenshots, deleted posts and half-remembered accounts. Our work is to gather it, verify what can be verified, and say clearly where the evidence stops.
What we do
Structured investigation of online misconduct
Reports arrive fragmented — a screenshot here, a username there. We turn that into a case file with a number, a timeline, verified identities and a conclusion that can withstand scrutiny from the people it affects.
Dialogue & evidence analysis
Transcripts, screenshots and chat logs preserved, timestamped and read for behavioural patterns, motive and escalation.
Misconduct assessment
Structured classification of harassment, doxxing, hostile conduct, grooming indicators and coordinated targeting.
Cross-case correlation
Subjects tracked across separate investigations, surfacing repeat actors and networks a single report never reveals.
Documented findings
Each case closes with a sourced dossier: what was found, how, at what confidence, and what remains unverified.
Community briefings
Findings delivered to affected communities, organizations and individuals so they can act on facts, not rumour.
How a case moves
From intake to briefing
- 01
Intake
A report is filed with handles, links and any artifacts already held. Partial information is enough to start.
- 02
Triage
We assess scope, urgency and whether the matter belongs with law enforcement or a platform instead of us.
- 03
Investigation
Open-source collection, attribution work, dialogue analysis and cross-case correlation inside a numbered case file.
- 04
Briefing
A documented findings package is delivered to the affected party, with confidence levels stated plainly.
Operating principles
Independence is only credible with limits
We are not law enforcement and we hold no legal authority. What we offer is disciplined, documented research — and a clear statement of where the evidence stops.
01
Open sources only
We work exclusively from publicly available information. No intrusion, no account access, no breach data.
02
Evidence over allegation
A claim without an artifact is recorded as unverified and reported that way.
03
No vigilantism
We do not organise pile-ons, publish home addresses or call for retaliation. Findings go to decision-makers.
04
Reversible conclusions
Cases reopen when new evidence contradicts prior findings, and corrections are issued.
Confidential intake
Have something that needs investigating?
Submissions are reviewed by our intake team. Share what you have — you do not need the full picture before you report.