Back to workflows

Unsure workflow

Start here when you do not know what you have.

A guided workflow for identifying the input type and choosing the safest next path.

Passive and safe research workflow

When to use it

You have Website and want to check it through safe, legal, source-based research.

What you get

Recommended workflow and starting note.

Safety boundary

This workflow is not for exploitation, probing, or unauthorized scanning. It reads public records, records dates and uncertainty, and avoids turning signals into final claims.

Simple order

Work through the steps in order.

  1. Name the input

    Decide whether it is a website, image, text claim, technical indicator, or something else.

    Check: The input type is written.

  2. Choose the purpose

    Pick verification, research, reporting, or learning.

    Check: The purpose is clear.

  3. Open the closest workflow

    Use the decision tree or workflow list.

    Check: The workflow shows safe boundaries.

  4. Write a short note

    Record target, date, source, and confidence.

    Check: A starting record exists.

Report language

When the input is unclear, the first task is classification, not tool use.

Move to evidence notes

Sources

Start with these sources.

Open resource archive
  • Access Now Digital Security Helpline logo

    Access Now Digital Security Helpline

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • Bellingcat Online Investigation Toolkit logo

    Bellingcat Online Investigation Toolkit

    Verification and fact-checking

    Use to separate claim, source, evidence, and interpretation.

    Open source
  • CISA Cybersecurity Best Practices logo

    CISA Cybersecurity Best Practices

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • CISA Report Cyber Issues logo

    CISA Report Cyber Issues

    Reporting templates

    Use to keep evidence, interpretation, limits, and confidence separate.

    Open source
  • EFF Surveillance Self-Defense logo

    EFF Surveillance Self-Defense

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source
  • Freedom of the Press Foundation Training logo

    Freedom of the Press Foundation Training

    OPSEC and researcher safety

    Use to protect the researcher, reduce exposure, and avoid unnecessary collection.

    Open source