Data Points

@ Username / Handle

🔗 Analyst pivots

🔍 Lookup

📜 Playbook — Username / Handle exploitation

1. Direction — frame the requirement for Username / Handle: what decision does this support, by when?
2. Collection — pull the 0 mapped sources (0 free) and the native workbench; capture provenance and observe OPSEC.
3. Processing — normalize, de-duplicate and enrich the collected data.
4. Analysis — correlate against local holdings; apply ACH; assign confidence.
5. Dissemination — open a case, draft a report, share via STIX/MISP.
6. Feedback — set an alert rule / watchlist to monitor for change.

⚡ AI Skills & Automation

Automate unattended via the cron pipeline (collect → ingest → resolve → enrich → score → alert).

🗃 Data Management

🧩 Advanced Capabilities

✨ Enrichment pathways

🎫 Username / Handle

A username or handle is a self-selected alias a person reuses across platforms as a login or public identity. Because people habitually reuse handles, a username is one of the strongest cross-platform pivots for linking otherwise unconnected accounts to a single individual.

Format: Platform-dependent string, typically 3-30 chars, alphanumeric plus underscore/dot/hyphen; may include @-prefix. No global validation; normalize case and platform-specific rules (e.g., Twitter/X ignores dots, Instagram allows periods).

📡 How it is collected

• Social media profile scraping and enumeration
• Breach and forum-dump datasets
• Gaming, dev, and marketplace platform accounts
• Cryptocurrency forum and Discord/Telegram handles
• Email local-part inference
• Archived/deleted profile snapshots

📚 Enrichment & validation sources

🔗 Pivot to

🧩 Analysis & hunting techniques

• Cross-platform username enumeration
• Handle-mutation and permutation search (variants, numbers, l33t)
• Timeline correlation across account creation dates
• Writing-style / stylometry linkage across accounts
• Avatar image-hash correlation
• Breach-corpus username-to-email pivoting
• Deleted-account recovery via web archives
• Behavioral fingerprinting (posting cadence, timezone)

🔧 Tools

• Sherlock
• Maigret
• WhatsMyName
• Blackbird
• SpiderFoot
• Recon-ng
• Social Analyzer
• Maltego

⚡ Workbench actions

• Enumerate handle across 300+ sites
• Generate handle permutations
• Correlate avatars by perceptual hash
• Pivot to linked emails via breaches
• Recover deleted profiles from archive
• Run stylometry linkage
• Build cross-platform account timeline
• Export identity cluster to link analysis

📊 Dashboard KPIs

📂 Open