China OSINT Master · Module 08 · Social Media Intelligence
Tracking a target across Weibo, Douyin & WeChat
Reconstruct a target's network, location pattern and daily routine from what they post across ████████ and ███████████ — including posts they believe are private, deleted, or ██████████████.
screenshotA single handle is enough to pivot. From one account you map mutuals, group memberships and 查档, then confirm the person behind it against ████████████ rather than trusting a display name.
screenshotField Exercise · Practice
Field exercise
Pick 5–10 accounts across ████████ and ███████████ and run the method from this lesson on each: map mutuals, group memberships and 查档, then pivot from every handle to the next. Vary your targets and note how far each pivot chain reaches before it ██████████.
Mark as doneEven a single photo gives up its location. Background detail, signage and ██████ place a post to within █████████████████ — long after the caption is gone.
screenshotHands-On Lab · Practice
Hands-on lab
You are given one WeChat handle and the profile data around it. Using the pivot and verification method from this lesson, work out which contact actually belongs to the person behind the account. Which phone number is theirs?
Put together, these methods turn scattered posts into a continuous picture of where a target is, who they know, and █████████████████████████, without ██████████.
China OSINT Master · Module 11 · Corporate Intelligence
Unmasking hidden ownership behind a shell
Most ownership is deliberately obscured. This lesson follows a single company name through ██████████ — shells, nominees, and the ████████████████ that quietly connect them ██████████████.
screenshotHands-On Lab · Practice
Hands-on lab
You are given a shell company and its filings. Using the ownership-mapping method from this lesson, trace it to the real beneficial owner. Which email address belongs to the true owner of the entity?
Registries rarely tell the whole story. Cross-referencing filings against █████████████ exposes the ████████████ a single record hides.
screenshotBy the end you can move from a company name to the people and money behind it — ███████████████████.
China OSINT Master · Module 21 · Military OSINT
Tracking the PLA: units, bases & pattern-of-life
State media, procurement notices and a recruit's own posts leak more than any adversary intends. This module borrows ███████████████ reconnaissance methods and turns them on ██████ — mapping a unit from the outside in.
Field Exercise · Practice
Field exercise
Pick 5–10 open posts, tenders or recruitment photos and apply the attribution method from this lesson to each: read the ████████, the insignia and the ██████, then pivot from one signal to the next. Track how often the same unit resurfaces and where the pivot chain leads.
Mark as doneOne tender document ties a contractor to a ████ program; one uniform patch ties a soldier to a ████████. Cross-referenced against █████████████, scattered signals resolve into an order of battle.
By the end you can move from an open post to the unit, its ████████ and its pattern-of-life — ███████████████████.
Train to access what others can't.
Gain full visibility into China — the latest methodologies, techniques and search strategies for serious OSINT investigations.
530+ professionals trained · 40+ countries · #1 China OSINT training provider