Identity Pivots

PORP · 50 questions

• A city procurement analyst is performing OSINT on a vendor whose public website has no contact page. How should the analyst discover email addresses for the due-diligence file?
• A city utility PDF from several years ago still lists an employee's personal Gmail in the footer of an old fact sheet. What is the sound OSINT treatment of that address?
• The clerk's office sees [email protected] on staff directories and wants to assume a contractor uses the same pattern on a private vendor domain. What should the OSINT analyst do?
• Housing-authority due diligence turns up a landlord contact of [email protected]. How should the analyst treat that address as an identity pivot?
• Grants staff find an applicant's email in a public breach-lookup service. What is the appropriate OSINT finding to report?
• Civic IT security asks the OSINT analyst to get the password from a public dump so staff can log into a vendor SSO. What should the analyst do?
• A permit applicant's email appears in a 2013 public dump and in no later public corpora the analyst can find. How should licensing be briefed on risk?
• Parks fundraising OSINT finds a public Gravatar-class avatar tied to a donor email. How should the analyst use that image?
• Transit OSINT finds the same vendor email on a city RFP-response PDF and on a personal blog. What does that correlation support?
• An open-data CSV on the city portal accidentally includes extra email columns. An analyst mirroring the portal for OSINT should treat those addresses how?
• Economic development asks the analyst to generate every possible email permutation for a target firm and mail all of them. What is the PORP-aligned response?
• A public-health inspector's work email appears in a third-party conference attendee PDF. What should the analyst record as the finding?
• A solid-waste vendor's domain shows many addresses in a public breach index. How should the analyst brief vendor-risk staff?
• The library consortium finds a staff email in a public dump and wants the leaked password printed in the council packet. What belongs in the civic OSINT report?
• A 311 complainant email is a plus-addressed variant of a known civic critic's mailbox. How should the analyst treat it?
• A fleet vendor lists different emails on WHOIS, the company website, and a state contractor registry. What should the analyst do?
• Elections staff look up a campaign email in public breach-index tools and get no hits. What does that result mean?
• A snow-plow contractor's website lists a distinctive handle in the footer. What is the highest-value next OSINT step?
• Code enforcement sees the handle cityhallfan12 on a complaint screenshot and assumes it uniquely identifies one resident. What should the analyst warn?
• Procurement finds a project manager's PDF resume on a personal site listing City of X — 2019. How should the analyst use it?
• Housing staff find two vendor PDFs with the same display name but different middle initials. What is the correct people-OSINT move?
• An analyst uses the assessor's public owner-name search to see who is listed on a parcel tied to an illegal dump site. What does the owner-of-record listing establish?
• A people-search aggregator page mixes a city engineer with a same-name dentist in another state. How should the civic analyst treat that profile?
• Parks OSINT finds a distinctive username on a trail forum and the same string on a code-repo profile that lists the city as employer. What does that pair support?
• Library staff doing public-facing research on a contractor find an old resume that omits a bankruptcy news story. How should people OSINT treat those sources?
• A county procurement analyst runs a username-hunter tool on a vendor contact’s common firstlast pattern and receives 40 hits across games, blogs, and forums. What should the analyst do next?
• Transit safety asks an analyst to identify a busker from a username shown on a public platform clip of a station plaza. What is the correct OSINT boundary?
• A port-authority vendor page advertises a public community server where points of contact use the same discriminator-style ID. How should that string be treated?
• A grant applicant’s public resume lists “Deputy Director of Harbor Resilience,” a municipal title the city has never used. What should people OSINT do first?
• Open-meeting minutes list a speaker as Jonathan M. Hale, while public social usernames use JonnyH. What is the sound identity move?
• Building-department staff paste a contractor into a people-search site that lists relatives. The civic task is confirming the contractor’s public business identity. What should the analyst collect?
• A unique display name appears in a municipal team-chat archive that was accidentally published on the city’s open-data portal. How should the analyst handle that handle?
• Economic development finds a founder’s CV hosted on a public university staff page. How should that source be used?
• Parks due diligence finds two public handles that differ by one character: citytree1 and citytreel. What should the analyst do?
• A 311 complaint includes a callback number. What is the analyst’s next lawful OSINT step?
• Parks finds a VoIP number on an illegal dump-site flyer. What should phone OSINT infer about location?
• County elections, in a jurisdiction that publishes a public voter roll, needs to confirm a petition signer’s status. How should that roll be used?
• A vendor’s public campaign-finance listing on the state portal shows a phone number that also appears on a paving-company website. How should the analyst treat the match?
• Clerk staff find a public birth-index listing, in a state that publishes indexes, that may distinguish two same-name contractors. What is the correct OSINT use of that index?
• An animal-control found-pet poster lists a number that reverse-lists to a shared commercial call center. What should the analyst conclude?
• The housing authority sees a disposable app-provisioned number on a rental flyer. How should that number be treated?
• A public property card lists the owner’s mailing address as a PO box. How should people OSINT treat that address?
• Stormwater asks an analyst for a callback number’s “current GPS” from OSINT. What should the analyst explain?
• A public resume PDF lists a cell number that also appears on a published city-council comment signup sheet. What does that overlap support?
• Library staff find a birth year on an old community-award page and a different year on a public resume. What should they do with the dates?
• Occupancy licensing looks up a tradesperson on the state professional-license board, which lists a phone; a people-search scrape shows a different number. Which source should lead for civic identity?
• A public voter-roll address is a campus dorm, while a vendor application lists a suburban house. What should the analyst record?
• Port procurement sees a phone formatted with a foreign country code on a website that claims to be a local vendor. What is the sound next OSINT move?
• Public health asks an analyst to “find anyone named Maria at that restaurant” with no other public identifier. What should the analyst do?
• After email, username, phone, and public-roll checks, only the email is corroborated. The PIO still wants a full biographic dossier. What should the analyst deliver?