investigation-methodology

Geolocation follows a 4-step methodology: reverse image search first (Yandex, Google Lens, TinEye), catalog visual clues like signage and infrastructure, compare against satellite and street-level imagery, then document multiple matching elements before concluding. A single match is not sufficient.

Open the video on TikTok's web version, right-click and Inspect the page, then search the HTML for UploadDate. The value is in Zulu time (UTC), which you convert to local time using a tool like timeanddate.com.

MarineTraffic tracks ships via AIS transponders with port and vessel databases, while ADS-B Exchange tracks aircraft with an unfiltered feed that includes military and government planes other services block. They cover maritime and aviation domains respectively.

No. TikTok shows users who visited their profile, and there is no opt-out. The methodology recommends creating a dedicated research account with no identifying information before investigating TikTok profiles.

Breach data use requires assessing your ethical and legal threshold first. HaveIBeenPwned only shows which breaches included an email, not the leaked data itself; accessing actual breach content via services like Intelligence X or DeHashed is a separate decision the investigator must justify.

A null result only means the searched source returned nothing within its stated scope. Unless the source is demonstrably complete for the exact claim, place, and time, absence of evidence is not evidence of absence, so null paths must record their actual search scope.