REFERENCE · PDF-READY
Field reference sheet
The moves you reach for mid-investigation, on one printable page: search operators, reverse-image engines, metadata commands, geolocation helpers, network lookups, username pivots, and an OPSEC checklist. Print it, keep it beside the keyboard.
Search operators
site:site:example.com "resume"Restrict to one domain.filetype:filetype:pdf "annual report"Limit to a file type.inurl:inurl:adminMatch text in the URL.intitle:intitle:"index of"Match the page title.intext:intext:"api_key"Match the body text.cache:cache:example.comView a cached copy."""exact phrase"Force an exact match.-jaguar -carExclude a word.ORlinkedin OR githubEither term...2019..2022A numeric range.Reverse image search
Google Lens / ImagesBroadest web coverage.Yandex ImagesStrong on faces and Eastern Europe.Bing Visual SearchDifferent index; good for commerce.TinEyeFind earliest appearance & edits.PimEyes / face searchFace pivots — lawful use only.Metadata & forensics
exiftool image.jpgDump all embedded metadata.exiftool -gps:all image.jpgGPS coordinates only.exiftool -all= -overwrite_original xStrip metadata before sharing.pdfinfo file.pdfPDF author, producer, dates.mediainfo video.mp4Container, codecs, creation time.Geolocation & time
SunCalc / sun positionShadow direction → time of day.Shadow length + dateEstimate latitude and season.Satellite + street viewMatch terrain, roads, signage.Overpass / OSM queriesFind features by tag.What3wordsShare an exact 3 m square.Network & domains
whois example.comRegistration and ownership.dig example.com ANYDNS records (A, MX, TXT, …).dig +short -x 1.2.3.4Reverse DNS for an IP.nslookup / hostQuick resolver checks.traceroute example.comNetwork path and hops.Username pivots
- Try the exact handle, then common variants (_, ., digits, no-digits).
- Enumerate across platforms; verify every hit by avatar, bio, and posts.
- Check Gravatar (email hash) and profile picture reuse.
- Search archived snapshots for deleted profiles.
OPSEC checklist
- ☐Separate browser profile and, where warranted, a separate network.
- ☐Never browse a target while logged into a personal account.
- ☐Strip metadata from anything you publish.
- ☐Vent findings only on a need-to-know basis.
- ☐Log dates, sources, and confidence for every action.