OSINT Case

A local investigation workspace: profile subjects, map links, build a timeline, keep evidence, export a report.
No server, no telemetry.

Install

Debian, Ubuntu, Kali, Mint, Parrot — the menu entry and icon come with it:

curl -LO https://github.com/emrekybs/OsintCase/releases/latest/download/osintcase_amd64.deb && sudo apt install -y ./osintcase_amd64.deb

Other systems, with pipx or pip:

pipx install osintcase        # or: pip install osintcase
osintcase                     # opens the app in its own window
osintcase --web               # opens it in your browser

From source (Node.js 18+):

npm install
npm run dev

What it does

Link network with confirmed, probable and doubtful links, shortest path and centrality. Subject profiles with 50+ identifier types. Locations on a map. One timeline. Evidence vault with audit log. Reports as PDF or single-file HTML.

Light

Link network	Map

Subject profile	Report

Dark

Link network	Timeline

Evidence	Report

Example reports

Generated from the sample case Operation Nightjar:

• Dark report (PDF)
• Light report, redacted and watermarked (PDF)

Sample cases

Three fictional cases are listed on the home screen and in example/.

Licence

GPL-3.0