Two breach-lookup tools disagree on whether a procurement email appears in a public exposure corpus. What belongs in the report?
Select an answer to reveal the explanation.
Short Explanation
When two meters disagree, you do not average them into a fake yes. You show both readings and where they came from. The conflict is part of the finding.
Full Explanation
OSINT tools can disagree because corpora, refresh rates, and coverage differ. Professional reporting records each result with its source and time rather than collapsing them into an unsourced average. Civic readers need to see the conflict to judge confidence. Attacking a mailbox or cherry-picking a preferred answer is not PORP collection.