After capturing public posts on three platforms, the timestamps conflict with the claimed incident window. How should the OSINT report present that?
Select an answer to reveal the explanation.
Short Explanation
Conflicting clocks are part of the evidence, like three watches that do not agree after a power blip. Show each sourced time instead of sanding the story until it matches the 311 ticket. An honest timeline beats a neat one.
Full Explanation
Social OSINT products are timelines of sourced public posts, including contradictions with a claimed incident window. Analysts should record each platform timestamp and the retrieval time rather than dropping outliers, averaging clocks, or treating platform time as unexamined truth. Smoothing to match a 311 ticket hides uncertainty the reader needs. Methodology and evidence sections exist to show those tensions, not to erase them.