Find, save, check

Chapter 06 / 18

Look at a photo three ways

First say what you can see. Then check the file and the story around it.

Image, file, context

The photo shows a door, a clock and a sign. These are observations. The file layer may have size and EXIF data. The context layer asks who posted it, when, and with which words. Check all three.

One result has limits

EXIF can change or be removed. No EXIF does not mean ‘fake’. Reverse image search may find nothing. An AI detector can be wrong. A valid C2PA signature alone does not prove that the scene or caption is true.

Figure 06 · MindmapStudy sketch

Study the photo

Study the photo. Content. Technical. ContextEnlarge
Content: What is visible? Technical: What is in the file? Context: Who shared it, and when?CSINT Research · Ahmet Göker
Read as text
  • Content
  • Technical
  • Context

Same terms in both languages

Keep these words

Metadata / EXIF
Data about a file / a metadata format used in photos.
Reverse image search
Using an image to look for similar or older copies.
Provenance
The source and history of an item.
C2PA / Content Credentials
Signed history claims linked to content.

A small example

Let’s do it together

A post says ‘Outside Liman today’. You find a copy of the same photo from last year.

  1. Save the new post and old copy with their sources.

  2. Compare the door, shadow and small details. Is it really the same image?

  3. If the old record is sound, say it does not fit the ‘taken today’ claim. Say if the first photographer is unknown.

From my research notes · Real record

Suez: look at two images first

Look at the same area on two dates. First say what changed. Then read the source to discuss why.

11 March 2021

Satellite view of the Gulf of Suez on 11 March 2021
The earlier view in NASA’s comparison.NASA Earth Observatory / Lauren Dauphin and Joshua Stevens; USGS Landsat / Suomi NPP VIIRSNASA media use guidelines

27 March 2021

Satellite view of waiting ships in the Gulf of Suez on 27 March
The later view. More ship marks are visible at sea.NASA Earth Observatory / Lauren Dauphin and Joshua Stevens; USGS Landsat / Suomi NPP VIIRSNASA media use guidelines

Read the record

  1. Match the coast shape. Check that you are looking at the same area.
  2. Write both dates. More visible ships is an observation. Each ship’s identity is a separate question.

What I can write

These two records help us compare the visible queue.

Where I stop

These small images do not give an exact ship count or ship identities.

NASA Earth Observatory · Traffic Jam on the Suez CanalRead my full source comparison

These are existing public records. The images are resized for reading; no new image detail was generated.

Close the notes. Think first.

Your turn

The image has no C2PA data. Can you say AI made it?

Read the explanation

No. The data may never have been added, or may have been removed. Check the image, file and source history.

Reading record

Only on this browser. These marks are not test results.

Sources

I used my study notes and wrote new practice examples. The source PDF is not distributed here.

About the sources and rights
© 2026 Ahmet Göker · CSINT Research. All rights reserved for the original text and drawings. Except where the law allows, ask for permission before copying or publishing them again. You can share a link to this book. Other names and sources belong to their owners.