Pre-Investigation OPSEC Workflow

1. 1. Audit your current fingerprint with Cover Your Tracks + CreepJS. Document the baseline.

   + Add note

2. 2. Decide OPSEC level: Low (normal browser + VPN), Medium (Mullvad Browser + VPN), High (Whonix gateway + Workstation VM).

   + Add note

3. 3. Create an isolated research identity: dedicated email, no reuse of personal identity elements.

   + Add note

4. 4. For sensitive investigations: use Tails OS on a bootable USB, no persistence.

   + Add note

5. 5. Rotate identity periodically (every 30–90 days for long-running investigations).

   + Add note

6. 6. Never mix identities: each sock puppet lives in its own browser profile / VM.

   + Add note

7. 7. Network hygiene: trusted VPN + DNS over HTTPS. Do not use ISP DNS.

   + Add note

8. 8. Metadata strip: MAT2 or ExifTool before uploading any file.

   + Add note

9. 9. Communications: Signal or Session for source contact. Not personal WhatsApp.

   + Add note

10. 10. Document OPSEC decisions in the final report: what level was used, why, what was done if something failed.

    + Add note

🔒 Your progress and notes are saved only in this browser.