A transit authority wants to know whether a critic's X handle is a brand-new sock puppet or a long-running account. Which public artifacts should the researcher use first?
Select an answer to reveal the explanation.
Short Explanation
New socks and old regulars leave different footprints in the shop window. Creation date plus how long and how often the public timeline talks is enough to start that call. Backend IPs and legal names are not OSINT's first tools.
Full Explanation
Public account metadata such as creation age, posting volume, and the span of visible history inform sock-versus-long-running judgment without private platform access. A thin, brand-new timeline is a different pattern than years of public posts. Subpoenas and private login logs sit outside OSINT Fundamentals. Locked-account graphs are not public collection.