note 01
Writing certainty too early
A visible match is not always a confirmed result. Write what you saw, then write what still needs checking.
common mistakes
Most weak OSINT reports fail before the tool step.
The usual problem is not a missing tool. It is a claim written too early, a date ignored, or a single source treated as proof.
single sourceold mediaweak attribution
note 02
Forgetting time
Old images, re-uploaded videos, and stale banners can look new. Date checks belong near the start of the workflow.
note 03
Over-reading a tool result
A tool can show a trace. It does not always show ownership, intent, current access, or who is behind an action.