About this blog
This is the public notebook of a practicing OSINT and digital forensics investigator based in the Philippines. The day work is consulting under OSINT PH on corporate incident response, dark web intelligence, ransomware engagements, and cyber extortion cases. The work you're reading here is the version of that practice that I can share publicly: tools, methods, infrastructure, and the occasional investigation into things that have caught my attention.
What you'll find here
Tutorials on the tools investigators actually use, written by someone who runs them on real cases rather than reviews them from screenshots.
Walkthroughs of OSINT techniques. Some that worked, some that didn't, both kinds documented because the failures are usually more instructive.
Self-hosted infrastructure guides for analysts who want to own their stack rather than rent it from vendors. SearXNG, Changedetection, dark web monitors, threat intelligence platforms, Ghost itself, all set up the way I actually run them.
Investigations into corporate shell games, scam infrastructure, supply chain attacks, and the people running them. Not every week, but every time something is worth pulling on the thread.
Occasional cybersecurity recaps when the month produced enough noise to merit a summary.
What you won't find here
Listicles ranked by SEO instead of substance. AI-generated filler dressed up as analysis. Sponsored content of any kind. Tool recommendations driven by anything other than what I actually use. Specifics about client engagements, ever. Click-bait framing of stories that don't deserve it.
The author
I'm Sigmund. Senior practitioner at OSINT PH. Background spans incident response for Philippine and regional clients, dark web monitoring, ransomware case management, threat intelligence, and OSINT investigations into corporate and criminal infrastructure. I work with PNP-ACG and NBI-CCD when cases warrant it.
I write because the OSINT field is full of advice from people who teach it but don't practice it, and full of practice from people who don't write it down. The intersection is small. This blog is my attempt to widen it.
Why subscribe
The newsletter ships when new posts go up, roughly weekly when I'm in a writing rhythm, sometimes longer when I'm deep in casework. No spam, no third-party tracking, no drip sequences. If a post earns your attention it'll arrive in your inbox. If it doesn't, you won't hear from me.
The blog is free to read without subscribing. The newsletter is the only reliable way to make sure you don't miss the longer investigative pieces.
Contact
For consulting engagements or media queries, find me on LinkedIn or via OSINT PH.
For thoughts on specific posts, the comments section is open below each article.
For abuse reports, errors of fact, or right-of-reply concerns about anything published here, those get taken seriously and responded to within 48 hours.