https://en.csintresearch.org/haber Published research files and site updates. en Mon, 05 Oct 2026 00:00:00 GMT 60 https://en.csintresearch.org/about https://en.csintresearch.org/changelog#about-handbook-pdf Mon, 05 Oct 2026 00:00:00 GMT Site update A free PDF with numbered chapters on who I am, what I do and how I examine a case. It walks through one photo published as 1915 from start to end and lists my rules and the method that stays the same. In English and Turkish. https://en.csintresearch.org/gosi-book https://en.csintresearch.org/changelog#book-colour-diagrams Mon, 05 Oct 2026 00:00:00 GMT Site update I redrew every diagram in the book. The colours mean the same thing throughout: blue for a record, dashed ochre for a reading, violet for a question, orange for the result. I added 74 new diagrams, and every case now has a timeline. I added 11 marked images from NASA and USGS records. In one USGS photograph I read five different times from the file and the page, and I downloaded the two Bamako nights from NASA’s archive myself to compare them. The free PDF is updated too. https://en.csintresearch.org/e-library https://en.csintresearch.org/changelog#one-archive-door Sun, 04 Oct 2026 00:00:00 GMT Site update Research files, case videos and case files now sit in one list in the e-library. The old list pages point there; the individual records keep their addresses. The English home page now opens with my name, and the old research-file index points to the archive. https://en.csintresearch.org/newsletter https://en.csintresearch.org/changelog#research-follow-rss-and-contributions Sat, 03 Oct 2026 00:00:00 GMT Site update Subscription links are now on the home page and in the menu. Turkish and English RSS feeds include published research files and site updates. The contribution page uses the existing email address for case suggestions, public sources and corrections. Substack now has separate, optional Turkish sections for case files and updates. Subscription preferences are managed on Substack. The English export now includes the missing app manifest and its icons. https://en.csintresearch.org/support https://en.csintresearch.org/changelog#research-support-buy-me-a-coffee Sat, 03 Oct 2026 00:00:00 GMT Site update My existing Buy Me a Coffee profile is reachable from the home page, newsletter and footer. The support page explains one-time and monthly options; research files stay free. Payments and cancellations take place on Buy Me a Coffee. The site has no payment form or embedded module; the privacy notice now reflects this. https://en.csintresearch.org/changelog#telegram-research-delivery-checks https://en.csintresearch.org/changelog#telegram-research-delivery-checks Sat, 03 Oct 2026 00:00:00 GMT Site update Startup no longer marks drafts as delivered. At most one approved work is shared per day in each language. The Friday recap uses work actually shared in that channel or topic during the week, rather than its original publication date. The Turkish publication channel and the separate English channel have their own feeds, approvals and delivery records. English delivery stops when its destination is missing or invalid. https://en.csintresearch.org/haber/manavgat-2021-uydu https://en.csintresearch.org/haber/manavgat-2021-uydu Thu, 01 Oct 2026 00:00:00 GMT Research I compared surface change around Manavgat in Sentinel-2 images from 20 July and 14 August 2021. Two thresholds give two area counts. Road-side samples show the limits of the comparison. The count covers the entire study box. It is neither forest-only nor clipped to the EFFIS perimeter. It cannot establish that the road stopped the fire. No field visit was made. https://en.csintresearch.org/haber/beyrut-2020-haritanin-siniri https://en.csintresearch.org/haber/beyrut-2020-haritanin-siniri Tue, 15 Sep 2026 00:00:00 GMT Research On the map made after the Beirut explosion, red and orange marks are concentrated around the port. What do those colours show? We checked the map’s description and UNOSAT’s assessment of separate satellite photographs. UNOSAT’s report is also preliminary. The map colours and satellite photographs do not replace a building-level damage assessment or an on-site safety inspection. https://en.csintresearch.org/haber/kilauea-2018-zamanin-izi https://en.csintresearch.org/haber/kilauea-2018-zamanin-izi Tue, 15 Sep 2026 00:00:00 GMT Research A lava lake is visible in April; by August, the scene contains a much larger depression. USGS’s short film, assembled from daily images, lets us follow how that change unfolded. Lighting and visibility change from day to day. We did not measure depth, volume or speed from the images, and the daily record does not show every collapse. The film cannot establish when a future eruption will occur. https://en.csintresearch.org/haber/suez-2021-kuyrugun-izi https://en.csintresearch.org/haber/suez-2021-kuyrugun-izi Tue, 15 Sep 2026 00:00:00 GMT Research Ever Given was freed on 29 March 2021. What about the ships waiting to enter the canal? NASA’s daytime and night images let us examine the queue alongside the official announcement. This comparison does not use AIS vessel-tracking data. We did not match each light to a ship, so it cannot identify vessels or give an exact queue length. We also made no estimate of economic losses or responsibility from the images. https://en.csintresearch.org/haber/mcafee-exif-2012 https://en.csintresearch.org/haber/mcafee-exif-2012 Sun, 30 Aug 2026 00:00:00 GMT Research The two files of Vice’s 2012 photograph of John McAfee were read again from their Wayback Machine copies on 27 September 2026. The first file carries a location; the second has no GPS fields. Four values in the earlier note matched neither file and were corrected. This page is limited to the fields of the photograph files. The coordinates alone do not establish what a person did, and the other people in the photograph are not identified. https://en.csintresearch.org/haber/wannacry-kill-switch https://en.csintresearch.org/haber/wannacry-kill-switch Sun, 30 Aug 2026 00:00:00 GMT Research On 12 May 2017, Marcus Hutchins registered a domain checked by WannaCry. The registration stopped the spread of the sample under examination. Years later, we looked at the same domain’s registration and availability records. The registration date and the query dates describe different events. A server response from 2026 should not be read as a recording of the 2017 attack. https://en.csintresearch.org/haber/wichita-metadata-chain https://en.csintresearch.org/haber/wichita-metadata-chain Mon, 13 Jul 2026 00:00:00 GMT Research In 2005, a floppy disk sent to a television station yielded the name Dennis and links to local institutions. Police followed that lead through web records, camera footage, surveillance and a DNA comparison. Public records describe how those steps came together in the investigation. The article is limited to public records and the ten murders addressed in court. It omits victim addresses and graphic crime details. The use of a family member’s medical sample is also discussed as a privacy issue. https://en.csintresearch.org/haber/code-of-conduct-phishing https://en.csintresearch.org/haber/code-of-conduct-phishing Fri, 15 May 2026 00:00:00 GMT Research In Microsoft’s report dated 4 May 2026, the attack begins with an email resembling a workplace warning. A document and redirects lead the employee to a sign-in page intended to steal session information. This review uses published reports. Suspicious links were not opened and the attack infrastructure was not tested. The reported outcomes are attributed to Microsoft’s observations. https://en.csintresearch.org/haber/mali-fuel-blockade https://en.csintresearch.org/haber/mali-fuel-blockade Fri, 08 May 2026 00:00:00 GMT Research Bellingcat investigated Bamako’s fuel crisis by comparing records of tanker attacks with satellite images and videos. Its findings are read here alongside contemporary reporting on shortages. The attack locations were established by Bellingcat and are credited to that investigation. No graphic violence is shown. Changes visible in satellite imagery and the causes of those changes need to be assessed separately.