KNOWLEDGE NETWORK โ† Index
Research Handbook ยท OSINT Reference ยท Archivist's Manual

The Information Discovery, Verification & Knowledge Navigation Guide

Research handbook ยท intelligence-analyst training manual ยท academic methodology guide ยท digital archivist manual ยท OSINT reference ยท internet history encyclopedia ยท scientific literature navigation guide

Purpose: give any researcher, analyst, journalist, archivist, or student a single working reference for finding, evaluating, preserving, cross-referencing, and understanding information across the modern internet, the historical internet, academic archives, public records, scientific literature, and digital knowledge systems.

Core commitments: accuracy over speed, verifiability over authority, transparency of sourcing, reproducibility of method, explicit uncertainty, and ethical collection. Nothing in this guide describes how to bypass authorization, security controls, or paywalls. Every technique here is a technique of finding what is legitimately findable and judging it well.

How to use this guide

  • Treat it as a reference, not a novel โ€” jump to the Part you need via the index.
  • Every source listed should be verified against its live homepage before use โ€” tools, URLs, and ownership change. Treat every named tool/database as illustrative of a category of instrument, not a permanent endorsement.
  • Checklists are meant to be copied into an actual case file or lab notebook.
  • "Confidence," in this guide, is always stated, never implied. If you cannot state your confidence in a claim and why, you are not done researching it.
PART ยท 01

Understanding Information

1.1 What Information Is

Data is raw, uninterpreted signal: a number, a timestamp, a pixel value, a sensor reading. It has no meaning on its own.

Information is data given context and structure โ€” data that answers a question ("the temperature was 21ยฐC at 14:02 on the roof sensor"). Information is what most search and retrieval systems traffic in.

Knowledge is information that has been integrated into a model of the world โ€” connected to other information, tested, and made actionable ("this sensor consistently reads 2ยฐC high, so 21ยฐC actually means ~19ยฐC, and that matters because the greenhouse threshold is 20ยฐC"). Knowledge implies understanding of relationships, causes, and limits.

Wisdom (a fourth, often-omitted layer) is knowing when and how to apply knowledge โ€” judgment under uncertainty, including knowing what you don't know.

        โ–ฒ
        โ”‚      WISDOM      "when/whether to act on it, and what could be wrong"
        โ”‚  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
        โ”‚    KNOWLEDGE     "how it connects, why it's true, what it predicts"
        โ”‚  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
        โ”‚    INFORMATION   "data + context: what, who, when, where"
        โ”‚  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
        โ”‚       DATA       raw signal, no interpretation
        โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ–บ
                 increasing interpretation & structure

This matters practically: a search engine gives you information. Your job as a researcher is to turn it into knowledge โ€” which requires provenance, corroboration, and context that the raw hit rarely carries with it.

1.2 Primary, Secondary, and Tertiary Sources

TierDefinitionExamplesResearch role
PrimaryDirect, first-hand evidence created at the time of the event/finding by a participant or original authorRaw datasets, lab notebooks, court filings, original legislation, a paper's own results section, a photograph, an eyewitness account, an interview transcript, an artifactThe bedrock of a claim; closest to the event
SecondaryAnalysis, interpretation, or synthesis of primary sources by someone not directly involvedReview articles, textbooks, news analysis, meta-analyses, biographies, documentariesUseful for context and synthesis, but one interpretive step removed
TertiaryCompilations/summaries of secondary sourcesEncyclopedias (including Wikipedia), textbooks, almanacs, indexes, bibliographiesExcellent for orientation and for finding sources via citations โ€” weak as a final citation for a load-bearing claim

Practical rule: tertiary sources are a map, not a destination. Use Wikipedia, an encyclopedia entry, or an AI summary to locate the primary/secondary sources in its citation list, then verify the claim against those.

A single artifact can be primary for one question and secondary for another โ€” a newspaper article is a primary source about media coverage of an event but a secondary source about the event itself.

1.3 Authority and Credibility

Authority and credibility are not the same thing and must be evaluated separately:

  • Authority = institutional standing, credentials, position (a government agency, a peer-reviewed journal, a named expert).
  • Credibility = track record of being correct, transparent about method, and honest about uncertainty โ€” independent of title.

A source can have high authority and low credibility (an official body shown to misreport), or low authority and high credibility (an anonymous but rigorously-sourced dataset that has been independently reproduced). Evaluate both axes, never substitute one for the other.

CRAAP-style evaluation (a widely used checklist, extended here):

TestAsk
CurrencyWhen was it published/updated? Is the field fast-moving?
RelevanceDoes it actually address your question, or just something adjacent?
AuthorityWho created it? What is their track record, funding, and expertise?
AccuracyCan the claims be checked against other independent sources? Are methods disclosed?
PurposeWhy does this exist โ€” inform, sell, persuade, entertain, propagandize?
(ext.) ProvenanceCan you trace this exact artifact to its origin, or is it a copy/screenshot that's lost its chain of custody?
(ext.) IndependenceIs this actually a second source, or the same original claim re-reported?

1.4 Scientific Evidence Hierarchy

Not all evidence carries equal weight, even within legitimate science:

STRONGEST  โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
           โ”‚ Systematic reviews & meta-analyses            โ”‚
           โ”‚ (of high-quality studies)                     โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Randomized controlled trials (RCTs)           โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Cohort studies (prospective)                  โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Case-control studies                          โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Cross-sectional studies                       โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Case series / case reports                    โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Expert opinion / editorials                   โ”‚
           โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
           โ”‚ Anecdote, testimonial                         โ”‚
WEAKEST    โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

This hierarchy is domain-specific (clinical/epidemiological research) but the underlying logic generalizes: designs that control for confounding and are replicated independently outrank designs that don't, regardless of field. A single preprint, however dramatic, sits far below a replicated, peer-reviewed, meta-analyzed result โ€” and pre-registration and open data/code push a study up in practical trustworthiness independent of where it sits on this ladder.

Also weigh: sample size, effect size, replication status, pre-registration, conflicts of interest, and whether the result has been independently reproduced. A "significant" result in one small, non-replicated study is evidence, not proof.

1.5 Reliability vs. Popularity

Search rankings, social shares, view counts, and "trending" status measure engagement, not accuracy. These frequently diverge:

  • Content optimized for engagement (novelty, outrage, confirmation of existing belief) outcompetes accurate-but-boring content in ranking/virality systems.
  • A highly-cited paper is not automatically correct โ€” citation can mean "built upon," "refuted by," or even "cited as an example of bad practice."
  • Domain age, backlink count, and follower count are reputation proxies, not truth proxies.

Treat "top result" and "most shared" as candidates to investigate, never as conclusions.

1.6 Truth, Uncertainty, and Confidence Levels

Rarely does research yield binary true/false. Adopt an explicit confidence vocabulary and use it in your notes:

ConfidenceMeaningTypical basis
ConfirmedVerified via multiple independent primary sourcesCorroborated primary evidence
Well-supportedConsistent with converging evidence, no credible contradiction foundMultiple secondary sources agree, or one strong primary source
PlausibleConsistent with what's known, but not independently verifiedSingle source, no contradiction found (yet)
ContestedCredible sources disagreeConflicting primary/secondary sources
UnverifiedClaim located, but no corroborating source foundClaim exists "in the wild" only
Disputed / DebunkedContradicted by stronger evidenceFact-checks, retractions, replication failures

Write the confidence level next to every claim in a research dossier. An unlabeled claim is treated by anyone reading your work as more certain than you intended.

1.7 Cognitive Biases That Distort Research

BiasWhat it doesMitigation
Confirmation biasYou search for, notice, and weigh evidence that supports what you already believeActively search for the strongest counter-evidence first; write the counter-case first
AnchoringThe first number/claim you see distorts your judgment of everything afterSeek the range of estimates before settling, not just the first one
Availability heuristicRecent or vivid examples feel more probable than they areAsk for base rates / systematic counts, not anecdotes
Authority biasTrusting a claim because of who said it, not its evidenceAsk "what is the evidence," not just "who said it"
Bandwagon / social proofTrusting what's popular/sharedCheck the primary source itself, independent of share count
Survivorship biasOnly seeing the cases that "made it"Ask what's missing โ€” failed experiments, delisted sites, unpublished data
Motivated reasoningReasoning backward from a desired conclusionPre-register your own research question and what would falsify it
Automation / algorithm biasOver-trusting a ranked list or AI output because it's "systematic"Treat rankings and AI answers as one more source to verify, not a verdict

1.8 Misinformation, Disinformation, Propaganda & Information Warfare

TermDefinitionIntent
MisinformationFalse or inaccurate informationNot necessarily deliberate โ€” can be an honest mistake
DisinformationFalse information spread deliberatelyDeliberate deception
MalinformationTrue information shared with intent to harmDeliberate harm, not falsity
PropagandaInformation deployed systematically to shape opinion/behaviorPersuasion at scale, often state- or organization-driven
Information warfareCoordinated, often covert campaigns using the above to affect beliefs/trustStrategic, long-horizon, multi-platform
Detection signal

Coordinated inauthentic behavior: near-simultaneous posting across many accounts, templated phrasing, implausible account-creation-date clustering, disproportionate amplification relative to organic engagement, cross-platform messages identical down to typos, and networks that share infrastructure (registrars, ad IDs, hosting) despite claiming to be independent. Verifying this requires the network-analysis techniques in Part 8.3, not a single-post read.

1.9 Algorithmic Influence

Feed ranking, recommendation, and personalization systems are themselves an information-shaping force, independent of any single piece of content:

  • Filter bubbles / echo chambers โ€” personalization narrows the range of what you see over time based on past engagement.
  • Engagement optimization โ€” systems trained to maximize watch-time/clicks systematically favor emotionally activating content, which correlates with โ€” but is not identical to โ€” misinformation.
  • Search-as-a-battleground (SEO / "answer engine optimization") โ€” content is increasingly produced to rank, not to inform, including at scale via generative AI.
  • Zero-click answers โ€” when a search engine or assistant answers directly, the user often never evaluates the underlying source. Deliberately click through when the claim matters.
PART ยท 02

How Search Engines Work

2.1 The Core Pipeline

โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”     โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”     โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”     โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”     โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
โ”‚  CRAWL    โ”‚ โ”€โ”€โ–บ โ”‚  PARSE /  โ”‚ โ”€โ”€โ–บ โ”‚   INDEX   โ”‚ โ”€โ”€โ–บ โ”‚   RANK    โ”‚ โ”€โ”€โ–บ โ”‚  SERVE     โ”‚
โ”‚ (spiders/ โ”‚     โ”‚  EXTRACT  โ”‚     โ”‚ (inverted โ”‚     โ”‚ (query-   โ”‚     โ”‚ (results,  โ”‚
โ”‚  bots)    โ”‚     โ”‚  content  โ”‚     โ”‚  index +  โ”‚     โ”‚  time     โ”‚     โ”‚  snippets, โ”‚
โ”‚           โ”‚     โ”‚  & links) โ”‚     โ”‚  vectors) โ”‚     โ”‚  scoring) โ”‚     โ”‚  answers)  โ”‚
โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜     โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜     โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜     โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜     โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

Crawling (spiders / bots)

Automated programs start from seed URLs and known sitemaps, fetch each page, extract outbound links, and queue those for future crawling. Crawl behavior is governed (voluntarily) by robots.txt and <meta name="robots"> directives, crawl-rate limits, and sitemap.xml files. Crawlers prioritize by estimated importance and change frequency.

Parsing / extraction

Fetched HTML (and increasingly rendered JavaScript, PDFs, OCR'd images, video transcripts) is parsed into visible text, title/meta tags, structured data (schema.org/JSON-LD), the link graph, and โ€” for image/video โ€” extracted metadata and learned embeddings.

Indexing

Text becomes an inverted index: term โ†’ documents containing it, with position/frequency/field data. Modern systems layer a vector index alongside this โ€” every document and query becomes a dense numeric embedding, enabling semantic matching without exact keyword overlap.

Ranking

Candidate documents are scored on hundreds of signals:

  • Relevance โ€” term match, proximity, field weighting, embedding similarity.
  • Authority โ€” link-based measures, domain trust/history, E-E-A-T signals for health/finance/legal queries.
  • Quality/spam โ€” thin/duplicate content detection, ad density, manipulated-link detection.
  • User signals โ€” click-through rate, dwell time, reformulation rate.
  • Freshness โ€” recency weighted heavily for time-sensitive queries.
  • Personalization โ€” location, language, device, history.

Link analysis and PageRank

PageRank (Google's original algorithm, now one signal among many) models the web as a graph and computes each page's importance from how many pages link to it and the importance of those linking pages, recursively. A link from a high-authority page counts far more than one from an obscure page โ€” resistant, though not immune, to simple link-count spam.

Semantic search, vector search, and embeddings

Keyword search fails when a query and a document use different words for the same concept ("heart attack" vs. "myocardial infarction"). Embeddings map text to a vector such that similar meaning lands nearby in vector space; vector search finds nearest neighbors there; modern engines blend lexical and vector scores as "hybrid search," since each catches failure modes the other misses.

AI-powered search / generative answers

Newer search UIs retrieve candidate documents, then feed them to a language model to synthesize a direct answer with inline citations โ€” a form of Retrieval-Augmented Generation (see Part 10). New failure modes: synthesis errors, citation mismatch, and disagreement between sources getting masked by a single confident answer.

Search quality evaluation

Engines are tuned using human relevance raters against published guidelines, live A/B experiments, and offline metrics like nDCG and precision/recall at k. You can informally replicate this: run the same query across engines and score each top-10 for relevance, authority, and source diversity โ€” the fastest way to learn an engine's blind spots.

2.2 Comparing Major Search Engines

EngineIndex approachNotable strengthsNotable weaknesses
GoogleLargest general index; heavy ML/AI ranking, AI OverviewsBroadest coverage, best NL and local/map integration, strongest spam-fightingZero-click answers reduce source visibility; heavy personalization
BingLarge independent index; powers several "meta" engines via syndicationStrong image search, generative chat answersHistorically weaker query understanding for long-tail/colloquial queries
YandexRussia-based; strongest for Russian/CIS contentBest Cyrillic-script coverage; strong reverse image searchWeaker outside its core region; governance considerations for sensitive research
BaiduChina-based; dominant for Chinese-language webBest coverage of the Chinese webHeavily filtered per PRC regulation; weak elsewhere
DuckDuckGoSyndicates Bing + own crawler + hundreds of source APIsStrong privacy posture; useful !bang shortcutsIndex breadth bounded by syndication partners
Brave SearchIndependent index + opt-in browser signalIndependent of Google/Bing; privacy-respectingSmaller index; more variance on obscure queries
KagiPaid, no ads, user-controllable rankingHighest user control (boost/block domains); not ad-fundedSubscription cost; smaller independent crawl
MojeekFully independent crawler/index (UK)True independence for verifying ranking artifacts; no trackingMuch smaller index; weaker on long-tail queries
SearXNGSelf-hostable metasearch โ€” aggregates many engines liveNo single ranking bias; highly configurable; self-hostableOnly as good as upstream sources; can be rate-limited

Practical rule: never rely on a single engine. Run the same query across at least one of {Google, Bing} and one independent index {Mojeek, Brave, Yandex if regionally relevant}, plus a metasearch pass. Divergence between engines is itself a signal โ€” censorship, SEO manipulation, regional blocking, or an indexing gap.

2.3 Search Operators and Advanced Syntax

These vary by engine โ€” test each on the engine you're using, support changes over time:

OperatorEffectExample
"exact phrase"Exact phrase match"information warfare"
site:Restrict to a domain/subdomainsite:nasa.gov
-termExclude a termjaguar -car
filetype:Restrict to a file typefiletype:pdf annual report
intitle:Term must appear in the titleintitle:"research methodology"
inurl:Term must appear in the URLinurl:archive
intext:Term must appear in body textintext:"confidential"
related:Pages related to a domainrelated:example.com
OR / |Logical OR between termspython OR javascript
AROUND(n) (Bing)Terms within n wordsclimate AROUND(5) policy
*Wildcard in a phrase"the * of the internet"

Combine operators for precision: site:.gov filetype:pdf intitle:"environmental impact" 2023 โ€” a core OSINT technique sometimes called "Google dorking" when applied systematically. Legitimate use: finding public documents that are indexed but not linked from a site's navigation. Never for accessing anything not intended to be public โ€” see Part 12.

2.4 Reverse Image and Video Search

Reverse image search finds where else an image (or a visually similar one) appears online, revealing its earliest known appearance, original context, and manipulated reuses.

  1. Extract the image โ€” get the highest-resolution original you can, not a screenshot of a screenshot.
  2. Search it across multiple engines: Google Images, Bing Visual Search, Yandex Images (strong at faces/landscapes), TinEye (exact/near-duplicate match with earliest-found date).
  3. Compare all appearances by date to find the earliest, and read the original caption/context.
  4. Check manipulation cues: cloned regions, inconsistent shadows/reflections, compression-artifact mismatches, inconsistent metadata.

Reverse video search is harder โ€” indexes are shallower:

  • Extract representative key frames and reverse-image-search those individually.
  • Search the exact caption text and any burned-in text/timestamps.
  • Check the platform's own "similar videos" / re-upload detection.
  • Use frame-level or hash-based provenance tools where you have legitimate access.

2.5 Metadata Analysis

  • Images โ€” EXIF can include camera model, timestamp, GPS, software used, but is frequently stripped on upload; absence isn't itself suspicious.
  • Documents โ€” author name, organization, creation/edit software and dates, revision history, or leftover hidden text โ€” a classic technique for finding an author's real name behind an "anonymized" PDF.
  • Web pages โ€” HTTP headers, source comments, and structured data can reveal CMS, hosting, or publication workflow.
  • Caveat โ€” metadata is easy to spoof or strip; treat it as corroborating, never as sole proof.
PART ยท 03

Structure of the Internet

3.1 Surface, Deep, and Dark Web

 โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
 โ”‚  SURFACE WEB  โ€” publicly indexed by general search engines โ”‚
 โ”‚  news sites, public wikis, public social posts, blogs      โ”‚
 โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
                              โ”‚
 โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
 โ”‚  DEEP WEB โ€” online, but not indexed by general crawlers    โ”‚
 โ”‚  paywalled journals, logged-in social content, private     โ”‚
 โ”‚  cloud docs, most databases behind a search form, most     โ”‚
 โ”‚  corporate intranets, academic subscription content,       โ”‚
 โ”‚  medical records, banking portals                          โ”‚
 โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
                              โ”‚
 โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
 โ”‚  DARK WEB โ€” requires special software/protocols (e.g. Tor  โ”‚
 โ”‚  hidden services); a small subset of the deep web,         โ”‚
 โ”‚  intentionally not discoverable via normal DNS/browsing    โ”‚
 โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

Two clarifications researchers routinely get wrong:

  1. "Deep web" โ‰  "dark web." The deep web is overwhelmingly mundane โ€” simply not crawled, usually because it sits behind a login, a paywall, or a search form a crawler can't fill in. The dark web is a small, specific subset requiring specific software (most commonly Tor) to reach .onion addresses that don't resolve via ordinary DNS.
  2. Size estimates from the 2000s ("500ร— larger") are folklore at this point โ€” the web's structure has changed too much (APIs, SPAs, mobile apps with no crawlable equivalent) for that number to mean anything precise today.

3.2 Public vs. Private Systems

System typeWho can normally reach itIndexed by search engines?
Public websiteAnyoneUsually yes
Password-protected member areaRegistered usersNo โ€” login wall blocks crawlers
Enterprise intranetEmployees on the corporate network/VPNNo
ExtranetApproved external partnersNo
Academic subscription resourceEnrolled students/staff (IP range or login)Partially โ€” metadata/abstracts, rarely full text
Government database (public-facing)Anyone, sometimes via a search formOften partial; deep records behind the form usually aren't
Cloud storage (private)Account owner and explicit sharesNo, unless misconfigured to public
Remote desktop / internal admin panelAuthorized operators onlyNo, and should never be reachable by design
Distributed/peer-to-peer systemsParticipants in that network/protocolNot via conventional crawlers

What is publicly searchable: content a site owner has exposed without authentication, not blocked via robots.txt/noindex, and reached by a crawler.

What is not indexed: content blocked by robots.txt, marked noindex, session-generated, behind a search form with no linkable URL, or simply never discovered.

What is inaccessible without authorization: anything behind a login, paywall, VPN, or network boundary requiring credentials you have not been legitimately granted.

Boundary, stated plainly

This guide only describes finding and evaluating information that is intentionally public, or accessed through channels you are authorized to use (a subscription, a public-records/FOIA request, a public API within its terms). It does not, and will not, provide methods for bypassing authentication, exploiting misconfigurations, evading paywalls, or accessing systems without authorization. Where a question requires access you don't have, the correct next step is a legitimate request โ€” never a technical workaround.

PART ยท 04

Internet History & Digital Archaeology

4.1 Timeline of Internet Indexing & Discovery Tools

YearSystemWhat it was
1990ArchieFirst tool to index anonymous FTP contents โ€” arguably the first "search engine," predating the Web
1991GopherMenu-driven document-retrieval protocol predating the Web's hyperlink model
1992VeronicaA search engine for Gopher space, indexing menu titles across servers
1993JugheadA similar Gopher-search tool, typically scoped to one server
1993World Wide Web WandererAmong the first bots to crawl the nascent Web and measure its size
1994Yahoo! DirectoryHuman-curated hierarchical directory โ€” the dominant early discovery model
1994WebCrawler, LycosEarly full-text web search engines
1994โ€“95ExciteEarly concept-based (not just keyword) retrieval
1995AltaVistaFirst fast, comprehensive full-text search of a large fraction of the Web
1996Ask JeevesMarketed around natural-language question answering
1996InktomiPowered back-end results for several major portals
1998GoogleIntroduced PageRank-based link-authority ranking
2004WikipediaReaches broad mainstream adoption as a first-stop tertiary source
2009BingLaunches, successor to MSN/Live Search
2008โ€“2010sSocial searchAlgorithmic feeds rise as a parallel discovery layer
2010sKnowledge-graph searchBegins answering questions directly, not just linking to pages
2020sGenerative/AI-answer searchRAG-based assistants begin to partially replace the ranked-list paradigm

4.2 Why This History Matters to a Researcher

  • Directories vs. crawlers reflect two discovery philosophies โ€” curated-by-humans vs. discovered-by-machine โ€” a tension that recurs today in AI-curated vs. crawler-ranked results.
  • Pre-Google relevance relied on keyword frequency/density, which is why early-2000s SEO was keyword stuffing โ€” a useful dating signal for outdated pages.
  • Gopher still technically exists and is occasionally revived by hobbyists; dedicated clients/gateways exist to browse a gopher:// reference.

4.3 How Historical Internet Research Is Performed

  1. Establish the object of study โ€” a specific page, a site's evolution, a defunct service, a claim about "what the internet looked like."
  2. Triangulate across archive systems (Part 5) โ€” no single archive has full coverage.
  3. Use secondary historical sources โ€” contemporaneous news, Usenet archives, digitized old magazines, academic papers on internet history.
  4. Corroborate with technical artifacts โ€” WHOIS history, DNS history, SSL certificate-transparency logs, archived robots.txt/sitemap.xml.
  5. Respect the limits of memory-by-proxy โ€” personal recollection is primary evidence about perception, not proof of fact.
PART ยท 05

Web Archives

5.1 Major Web Archives

ArchiveWhat it doesNotes
Internet Archive / Wayback MachineLargest general web archive; automated crawls plus user-submitted snapshots since 1996Coverage uneven โ€” driven by crawl discovery and (historically) target-site robots.txt
Archive.todayOn-demand, user-triggered full-page snapshots, independent of the Internet ArchiveExcellent for capturing a page right now; does not crawl proactively
National web archivesMany countries run one (e.g. UK Web Archive/British Library)Often scoped to a ccTLD; full text sometimes restricted to on-site terminals
University/library archivesSpecial collections digitize institutionally significant contentOften the only copy of niche/local material
Common CrawlLarge, open, periodic web crawl released as a public datasetBulk/programmatic data, not a browsable snapshot viewer
Domain-specific archivese.g. Usenet via Google Groups, archived software reposCheck whether the specific platform runs its own archive first

5.2 How Wayback Machine Snapshots Work

  • A crawl or manual "Save Page Now" request fetches the page and stores it as a snapshot, keyed by exact URL and timestamp.
  • The calendar view shows all captures over time โ€” dot density means crawl frequency, not change frequency.
  • Captures may have broken sub-resources even when the text content was faithfully captured.
  • Only what's linked (or submitted) gets crawled โ€” deep, unlinked, or login-gated pages typically have no snapshot.

5.3 Archive Limitations

  • robots.txt impact โ€” historically a site could retroactively hide already-captured history; policy has shifted since โ€” check current behavior.
  • Missing content โ€” JS-heavy SPAs and anything behind authentication are frequently incompletely captured.
  • Snapshot gaps โ€” absence of a snapshot is not evidence the page didn't exist.
  • Redirect/takedown artifacts โ€” some captures reflect a legal request, not the page's actual historical content.

5.4 Recovering Historical Pages โ€” Practical Method

  1. Try the exact URL in the Wayback calendar; if empty, try variants (http/https, trailing slash, www).
  2. Try Archive.today's own search โ€” independent capture history.
  3. If the page moved, search the site broadly in Wayback for the content under a new path.
  4. Check for lingering cached-text remnants in search snippets.
  5. Search for mirrors and reposts โ€” forum quotes, RSS aggregators, email newsletters.
  6. For images/PDFs, check whether the file itself was separately crawled.

5.5 Tracking a Website's Evolution Over Time

  • Pull the full snapshot calendar and sample at meaningful intervals rather than reading every capture.
  • Diff structure (navigation, headings) separately from content (body text) โ€” structural change often marks a strategic shift.
  • Cross-reference against historical domain ownership to see whether content shifts correlate with ownership changes.
  • Historical ownership โ€” WHOIS has grown less transparent (privacy-proxy registration, GDPR redaction); corroborate with certificate-transparency logs, DNS-history aggregators, and archived WHOIS snapshots.
PART ยท 06

Scientific Knowledge Systems

For every source: coverage, strengths, weaknesses, search strategy, citation tracking, and verification method.

6.1 General Science / Cross-Disciplinary

Google Scholar general
Coverage
Broadest cross-disciplinary index of scholarly literature, including preprints, theses, patents, grey literature.
Strengths
Very high recall, free, "Cited by" counts, clusters preprint + published versions, full-text search inside PDFs.
Weaknesses
No quality filter โ€” indexes predatory journals alongside rigorous work; citation counts can be inflated; no bulk API.
Search strategy
Quotes for exact phrases, the author: operator, year-range filter; sort by date or relevance.
Citation tracking
"Cited by N" opens the full citing-literature list; "Related articles" for near-neighbors.
Verification
Click through to the actual publisher/repository page; check the venue independently for legitimacy.
Semantic Scholar general
Coverage
AI-enhanced index, originally CS/biomedical-focused, now broader.
Strengths
Distinguishes citation context (background vs. building-block vs. dispute), TLDR summaries, good API.
Weaknesses
AI summaries can misrepresent nuance โ€” verify against the full text.
Verification
Use the citation-context feature to see how a paper was cited, not just that it was.
OpenAlex general
Coverage
Fully open scholarly graph โ€” works, authors, institutions, venues, concepts.
Strengths
Free open API and full data dumps, transparent methodology, good institutional/funding metadata.
Weaknesses
Entity disambiguation is imperfect, as with any large automated graph.
Verification
Cross-check author/institution disambiguation manually for high-stakes bibliometric claims.
Lens.org general + patents
Coverage
Scholarly literature and global patent data in one graph.
Strengths
Strong for "who patented what, citing which papers" workflows; institutional/funder analytics.
Weaknesses
Less commonly used than Scholar/OpenAlex; smaller community corrections.

6.2 Medicine and Life Sciences

PubMed / PubMed Central medicine ยท NLM/NIH
Coverage
The authoritative biomedical literature index (MEDLINE); PMC holds full-text open-access articles.
Strengths
Rigorous MeSH controlled-vocabulary tagging (see Part 9), authoritative, free.
Weaknesses
Abstract-only for many entries; MeSH search has a learning curve.
Search strategy
Use MeSH terms ("Myocardial Infarction"[MeSH]) for recall; combine with field tags.
Citation tracking
NCBI "Similar articles" and external tools โ€” limited native citation browsing.
Verification
Check whether a claim has been picked up in a systematic review before treating a single study as settled.
Europe PMC medicine
Coverage
Europe's biomedical aggregator, overlapping PubMed with broader preprint coverage (bioRxiv/medRxiv integrated).
Strengths
Strong full-text search, preprint-to-published-version linking, text-mined annotations.
Verification
Check whether a preprint has since been peer-reviewed, and whether conclusions changed.

6.3 Physics

arXiv physics ยท math ยท cs ยท q-bio
Coverage
The dominant preprint server for physics (also math, CS, q-bio, econ, stats).
Strengths
Immediate free access; full version history preserved (v1, v2โ€ฆ).
Weaknesses
Not peer-reviewed at posting โ€” treat as provisional until reviewed or replicated.
Verification
Check version history for corrections, whether a later version was published, and citation trackers for critical responses.
INSPIRE-HEP high-energy physics
Coverage
Specialized literature/citation database for high-energy physics.
Strengths
Deep physics-specific citation network and author-disambiguation; tracks conference proceedings.
Verification
Citation-graph view shows whether a result was built upon or contradicted by its own sub-community.

6.4 Mathematics

arXiv (Mathematics)

Same platform, math.* categories โ€” the provisional-until-reviewed caveat applies strongly, since subtle proof errors can take years to surface.

zbMATH Open
Coverage
Comprehensive reviewing/abstracting database for mathematics.
Strengths
Expert-written reviews โ€” a critical comment can flag a flawed proof long before retraction.
Weaknesses
Review coverage lags new publications by months.
MathSciNet (AMS)
Coverage
The AMS's parallel review/abstract database.
Weaknesses
Subscription-based; institutional access typically required.
Verification (both)
Read the review, not just the abstract โ€” a terse or hedging review is itself a signal.

6.5 Computer Science

arXiv (cs.*)

The dominant preprint venue for ML/AI โ€” much of the most-cited recent AI research appears here first, often never in a traditional journal (conferences are the CS norm instead).

DBLP
Coverage
Near-exhaustive bibliography of CS publications, journals + conference proceedings.
Strengths
Extremely reliable metadata; authoritative venue lists for spotting a pay-to-present mill.
Weaknesses
No abstracts/full text โ€” link out to arXiv/publisher.
Verification
Cross-check a claimed venue name against DBLP's venue list to detect fabricated conferences.

6.6 Engineering

IEEE Xplore
Coverage
Major index/full-text repository for EE, electronics, computer engineering.
Strengths
Authoritative for standards-adjacent and applied-engineering literature.
Weaknesses
Subscription/paywall for full text; institutional access usually required.

6.7 Life Sciences Preprints

bioRxiv / medRxiv
Coverage
Dominant preprint servers for biology and clinical/health research (Cold Spring Harbor Laboratory).
Strengths
Fast dissemination โ€” notably valuable during infectious-disease outbreaks.
Weaknesses
medRxiv is explicitly not peer-reviewed โ€” never use it to guide clinical practice directly.
Verification
Check for a published, peer-reviewed version before treating a health claim as actionable.

6.8 Chemistry

ChemRxiv

The chemistry preprint server (ACS-partnered). Same provisional-status caveats as other preprints โ€” check for the peer-reviewed version.

6.9 Earth Sciences

EarthArXiv

Preprint server for earth/planetary/environmental sciences โ€” community-run, transparent moderation, useful for fast-moving events. Same provisional-preprint caveat.

6.10 Social Sciences

SSRN
Coverage
Huge preprint/working-paper repository across economics, law, management, social sciences.
Strengths
Economics and legal scholarship circulate here well before journal publication.
Weaknesses
No peer review at posting; heterogeneous quality.
Verification
Check author affiliation and whether it's part of a recognized series (e.g. NBER); search for the eventual publication.

6.11 Humanities

JSTOR
Coverage
Massive digitized archive of humanities/social-science journals, books, primary sources.
Strengths
Excellent historical journal runs; strong full-text search.
Weaknesses
Paywalled; a "moving wall" delays the most recent issues entirely.
Project MUSE
Coverage
Full-text humanities/social-science journals and books, university-press focused.
Strengths
Strong current-issue coverage, high curation quality.
Weaknesses
Paywalled; smaller than JSTOR.

6.12 Spotting Predatory or Low-Quality Venues

Checklist for any journal/conference you haven't heard of:

  • Is it indexed in DBLP / MEDLINE / a recognized field-specific index โ€” not just claimed on its own website?
  • Does it have a real, checkable editorial board?
  • Is peer-review turnaround implausibly fast for the claimed rigor?
  • Does the publisher appear on current, actively-maintained "predatory publisher" watch-lists?
  • Does it solicit submissions via unsolicited mass email with flattering, generic language?
  • Is the claimed "impact factor" independently verifiable, or self-reported?

6.13 General Citation-Tracking Method

  1. Forward citation search โ€” who cited this paper since (Scholar, Semantic Scholar, Web of Science, Scopus).
  2. Backward citation search โ€” what it's built on; check whether claims trace to primary data or to "citation laundering."
  3. Look for a systematic review or meta-analysis already aggregating the sub-field.
  4. Check retraction status (Retraction Watch and the journal's own site).
  5. Check for an independent replication.
PART ยท 07

Open Data & Public Records

7.1 Government Open-Data Portals

RegionPortalFocus
United Statesdata.govFederal open datasets across agencies
European Uniondata.europa.euPan-EU and member-state open data
United Kingdomdata.gov.ukUK national/local government data
Canadaopen.canada.caFederal open data
Indiadata.gov.inNational open data
Various citiese.g. NYC Open Data, data.london.gov.ukMunicipal-level records

Treat these as examples of a category โ€” nearly every national government and many major cities run some form of open-data portal.

7.2 Census & Demographic Data

National statistical agencies publish population, economic, and household data with methodology documentation โ€” always read the definitions page, since terms like "unemployment" or "poverty" are defined differently across agencies and time periods.

7.3 Geographic Data & Satellite Imagery

  • OpenStreetMap โ€” crowd-sourced map data with an auditable edit history.
  • National mapping agencies (USGS, Ordnance Survey, etc.) โ€” authoritative topographic data.
  • Satellite imagery (Sentinel/Copernicus, Landsat) supports change-detection research; OSINT geolocation combines imagery with landmarks, shadow-angle analysis, signage, and terrain cues.

7.4 Economic Databases

World Bank Open Data, IMF, OECD.Stat, national central banks and statistical agencies. Always check the base-year/methodology vintage โ€” rebasing changes historical series retroactively.

7.5 Legislative Databases

National legislature sites (congress.gov, UK Parliament's Hansard, the EU's EUR-Lex) โ€” primary sources for what a law actually says, versus news paraphrase.

7.6 Court Records

Public court-record systems (PACER for U.S. federal courts, national equivalents) โ€” treat docket entries as primary but remember filings are allegations, not established fact, until adjudicated.

7.7 Corporate Registries

National/regional company registries (UK Companies House, EU business registers, U.S. Secretary-of-State systems) โ€” foundational for ownership research, though beneficial-ownership transparency varies enormously by jurisdiction.

7.8 Patent & Trademark Databases

Patents โ€” national offices (USPTO, EPO), WIPO's PATENTSCOPE, Google Patents, Lens.org. Trademarks โ€” national databases (USPTO TESS/TSDR), WIPO's Global Brand Database. Useful for corroborating a company's real activity independent of its own marketing.

PART ยท 08

Advanced Research Methods

8.1 Cross-Source Verification & Triangulation

Triangulation: establishing a fact via at least two (ideally three) independent sources with different methods, incentives, or vantage points. Independence matters more than count โ€” three outlets re-reporting one press release are one source, not three.

             Source A (primary data)
                    \
                     \___ Do they converge
             Source B (independent          on the same fact?
             methodology) __/               โ”‚
                    /                       YES โ†’ well-supported
             Source C (different            NO  โ†’ contested;
             vantage point/incentive)              investigate the
                                                    discrepancy itself

8.2 Citation Tracing

Follow a claim backward through its citation chain until reaching the primary data, or the point where the trail breaks โ€” an assertion with no source, or a citation that on inspection doesn't say what's claimed. Actually opening the cited source catches a large share of circulating misinformation.

8.3 Network Analysis

Map relationships (who links to/cites/funds/employs/co-authors with whom) as a graph to reveal structure invisible from any single node โ€” coordinated networks, funding clusters, or the small number of hub sources a whole narrative traces back to. Manual diagrams for small cases; graph software (e.g. Gephi) for larger ones.

8.4 Timeline & Event Reconstruction

  1. Collect every dated artifact touching the event.
  2. Normalize all timestamps to one timezone/format.
  3. Order them; look explicitly for gaps (flag, don't fill with assumption) and contradictions.
  4. Distinguish event time, report time, and index time โ€” conflating these is a common error.

8.5 Historical Reconstruction & Source Mapping

For "what really happened" questions spanning years: build a source map listing every source, its type, its independence from every other source, and its confidence contribution to each specific sub-claim โ€” the discipline that separates rigorous history from a well-written but under-sourced narrative.

8.6 How Professionals Verify Claims โ€” Synthesis

  1. State the specific, falsifiable claim.
  2. Identify what would confirm or refute it, before searching.
  3. Search broadly across source types.
  4. Separate primary from secondary/tertiary; prioritize primary.
  5. Actively seek disconfirming evidence.
  6. Assess independence, authority, and credibility separately.
  7. Assign an explicit confidence level and document why.
  8. Record the full source trail so the work is reproducible.
PART ยท 09

Knowledge Organization

9.1 Taxonomies

A hierarchical classification scheme (broader โ†’ narrower), like a library's subject tree or species classification. Simple and readable, but rigid โ€” an item often genuinely belongs in more than one branch.

9.2 Ontologies

Formally define not just categories but the relationships and constraints between them (e.g. "a Person worksFor an Organization"), typically machine-readable (RDF/OWL) โ€” letting software infer new facts from stated ones.

9.3 Knowledge Graphs

A large, populated instance of an ontology-like structure: real entities as nodes, real relationships as edges. Search engines' Knowledge Panels are a public-facing view onto an internal graph, increasingly the retrieval layer behind AI assistants.

9.4 Wikidata

The largest fully open, collaboratively edited knowledge graph โ€” structured facts with cited sources per statement, each item carrying a stable Q-number independent of language. Verification check: does a given statement actually have a reference attached? Many don't.

9.5 Linked Open Data

The practice of publishing structured data with shared identifiers (URIs) so datasets from unrelated publishers can be automatically cross-referenced โ€” the infrastructure behind "everything is connected" in modern digital libraries.

9.6 Controlled Vocabularies & Metadata Systems

  • Controlled vocabularies (MeSH, LC Subject Headings) enforce one standard term so search doesn't miss synonyms โ€” why PubMed's MeSH search beats free-text keywords.
  • Metadata standards (Dublin Core, MARC, schema.org, EXIF/IPTC) define what descriptive fields an item carries, so systems can interoperate.
PART ยท 10

AI & Information Discovery

10.1 LLMs as a Discovery Layer

LLMs generate fluent text by predicting likely continuations โ€” they do not, by default, "look anything up" at answer time. This is the source of their central research risk: a fluent, confident-sounding answer is not evidence that it's correct.

10.2 Retrieval Systems and RAG

Retrieval-Augmented Generation pairs an LLM with a live retrieval step, feeding retrieved documents into the model's context so it can ground its answer in checkable sources. RAG substantially reduces โ€” but does not eliminate โ€” fabrication.

   User question
        โ”‚
        โ–ผ
  โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”     retrieve top-k     โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
  โ”‚  Query โ†’  โ”‚ โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ–บ โ”‚  Document /   โ”‚
  โ”‚ embedding โ”‚                        โ”‚  vector index โ”‚
  โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ—„โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
        โ”‚           relevant passages
        โ–ผ
  โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
  โ”‚  LLM generates answer using โ”‚
  โ”‚  retrieved passages as      โ”‚
  โ”‚  grounding context          โ”‚
  โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
        โ”‚
        โ–ผ
  Answer + citations  โ† you must still open and check these

10.3 Embeddings, Revisited

The same embedding technology underlies RAG's retrieval, semantic deduplication, clustering, and recommendation โ€” why an AI tool can retrieve an on-topic document sharing no keywords with your query, and, conversely, a superficially similar but substantively wrong one.

10.4 Knowledge Graphs in AI Systems

Some systems query a structured knowledge graph directly for entity facts โ€” generally more reliable for discrete facts (dates, relationships, numbers) than free-text generation, because it's a lookup, not a guess.

10.5 AI Hallucinations

A fluent, confident output that is factually wrong or fabricated. Risk factors: very recent events, obscure topics, requests for precise numbers/quotations, and long reasoning chains where an early error compounds.

Rule

Never treat an AI-generated citation as located until you have actually opened it and confirmed it exists and says what's claimed.

10.6 Verification Workflows for AI-Assisted Research

  1. Use AI to generate leads and structure, not as a final citation.
  2. Demand inline sources for every load-bearing claim.
  3. Open every cited source โ€” confirm it exists, says what's claimed, and is characterized fairly.
  4. Cross-check any specific number, date, quote, or name independently.
  5. Re-ask in a different phrasing/tool; treat inconsistency as a flag to dig deeper.

10.7 Human-in-the-Loop Validation

Treat AI output as a first-pass draft requiring verification proportional to stakes: a quick sanity check for low-stakes questions; the full workflow above โ€” with a named accountable human โ€” for anything health, legal, financial, safety-related, or destined for publication.

PART ยท 11

Practical Research Workflows

Each workflow is a checklist-style sequence. Adapt depth to stakes.

11.1 ยท Investigating a Company
  • Corporate registry lookup: legal name, incorporation date/jurisdiction, officers, filing history.
  • Trace beneficial ownership as far as the jurisdiction allows; note explicitly where it goes opaque.
  • Financial filings (SEC EDGAR or equivalent) or, for private firms, flagged press/trade estimates.
  • Patent/trademark portfolio as a proxy for real R&D vs. marketing claims.
  • Domain/website history via Wayback to see how positioning has shifted.
  • News archive search for litigation/regulatory action โ€” verify against the primary filing.
  • Employee-review and professional-network data as culture/scale signals, weighted cautiously.
  • Cross-reference everything; write a source map before concluding anything reputational.
11.2 ยท Investigating a Technology
  • Find the original technical source โ€” the paper, patent, or standard โ€” not the press release.
  • Check for independent replication/benchmarking beyond the originating team's own claims.
  • Trace forward citations for critiques, extensions, or refutations.
  • Check the maturity signal: prototype vs. peer-reviewed vs. standardized vs. widely deployed.
  • Look for a survey paper summarizing the sub-field's consensus.
11.3 ยท Investigating a Scientific Claim
  • Locate the primary study; read the methods and results, not just the abstract or news summary.
  • Check study design against the evidence hierarchy.
  • Check for a systematic review/meta-analysis on the same question.
  • Check replication and retraction status.
  • Check funding source/conflicts of interest.
  • Check whether news coverage accurately reflects the paper's actual, often more hedged, conclusion.
11.4 ยท Investigating a Historical Event
  • Assemble primary sources before reading secondary narratives.
  • Build a timeline, explicitly noting evidence gaps.
  • Cross-check secondary accounts against the primary timeline for discrepancies.
  • Note whose perspective each primary source represents.
11.5 ยท Investigating a Person (Ethical OSINT)
  • Use only information made publicly available, or accessed through a legitimate, authorized channel โ€” never account compromise, impersonation, or pretexting.
  • Corroborate identity carefully โ€” common names create false-match risk.
  • Separate verified public-record facts from unverified social-media self-presentation.
  • Consider proportionality before publishing โ€” does it serve a legitimate purpose? (See Part 12.)
  • Never aggregate and publish in a way designed to enable harassment ("doxxing"), regardless of whether each fact was individually public.
11.6 ยท Tracking Citations
  • Start from the target paper/claim.
  • Forward-trace who cites it.
  • Backward-trace what it cites, for its evidentiary basis.
  • Flag any chain that terminates in an uncited assertion rather than primary data.
11.7 ยท Finding Original Sources
  • Search the exact wording of a secondhand claim to find the earliest attributed instance.
  • Check that instance's own sourcing โ€” primary, or also secondhand?
  • Use Wayback/Archive.today if the live trail has gone dead.
  • If no primary source is ever found, label the claim unverified explicitly.
11.8 ยท Recovering Historical Web Content

See Part 5.4 in full: check Wayback โ†’ check Archive.today โ†’ search site-wide in Wayback โ†’ check mirrors/reposts โ†’ check binary-asset-specific captures.

11.9 Building a Research Dossier

A reproducible dossier should contain, at minimum:

1. RESEARCH QUESTION โ€” stated precisely, falsifiably 2. METHOD โ€” what sources/tools were searched, in what order, with what queries 3. FINDINGS โ€” each claim, with: - the claim itself - source(s), each labeled primary/secondary/tertiary - independence assessment between sources - confidence level (Part 1.6) - date accessed / archived copy link (Part 5) 4. CONTRADICTIONS / GAPS โ€” explicitly listed, not smoothed over 5. WHAT WOULD CHANGE THIS CONCLUSION โ€” stated up front 6. FULL SOURCE LIST โ€” every source consulted, including rejected ones (and why)

This structure is what makes a dossier reproducible: someone else, given only this document, should be able to retrace your path and reach the same โ€” or a specifically disputable โ€” conclusion.

PART ยท 12

Ethics & Legality

12.1 Responsible Research โ€” Core Principles

  • Minimize harm โ€” weigh public-interest value against the harm of compiling/publishing.
  • Necessity and proportionality โ€” collect only what the question actually requires.
  • Transparency of method โ€” a reproducible method is also an accountable one.
  • Right of reply โ€” seek a subject's response before publication where feasible.

12.2 Privacy

A legal ability to find information is distinct from an ethical justification to compile, publish, or act on it. Aggregating many individually-public facts about a private individual can itself constitute a privacy harm โ€” the "mosaic effect" โ€” even where no single fact was secret.

12.3 Copyright & Fair Use

  • Archiving, quoting, and citing for research/criticism generally falls within fair use/fair dealing, but specifics vary by jurisdiction โ€” this is not legal advice.
  • A personal archival copy for research is on safer ground than republishing/redistributing it.
  • Respect explicit licensing terms on datasets/APIs โ€” "technically accessible" isn't "licensed for your use case."

12.4 Data Protection

Jurisdiction-specific law (GDPR and analogues) can impose obligations even on researchers who didn't collect data directly from the subject โ€” around retention, further processing, and republication. Route sensitive-data research through institutional ethics review where applicable.

12.5 Public vs. Private Information

"Publicly accessible" and "intended for public consumption" are not identical. When in doubt about whether information was meant to be found and used this way, treat it as more sensitive, not less.

12.6 Ethical OSINT โ€” Boundaries

  • Legitimate OSINT uses only overtly available information and authorized access.
  • It does not involve credential theft, pretexting, exploiting misconfigurations, bypassing paywalls, or impersonation.
  • When access is genuinely required but unavailable, the answer is a legitimate request path โ€” never a technical workaround.

12.7 Research Boundaries โ€” When to Stop and Ask

Stop and seek review

When a task involves minors, victims of crime, medical/health status, precise real-time location of a private individual, financial account details, sensitive-category data, or any plan to publish a dossier about a private individual. These are not this guide's call to authorize.

APPENDIX

Master Checklists & Quick-Reference Cards

A.1 ยท Universal Source Evaluation

  • Primary, secondary, or tertiary?
  • Currency, Relevance, Authority, Accuracy, Purpose checked?
  • Independent from my other sources?
  • Confidence level assigned and written down?
  • Archived a copy in case it changes or disappears?

A.2 ยท Pre-Publication Ethics

  • Every compiled fact from a legitimate, authorized source?
  • Personal information minimized to only what's needed?
  • Considered the mosaic effect of aggregation?
  • Sought right-of-reply where a party is implicated?
  • Checked copyright/licensing terms on anything republished?

A.3 ยท Quick Multi-Engine Search

  1. Primary engine (Google or Bing) for breadth.
  2. One independent engine (Mojeek/Brave).
  3. Region-specific engine if regionally concentrated.
  4. Metasearch (SearXNG) for a fast union view.
  5. Reverse-image search across โ‰ฅ2 engines if images involved.
  6. Wayback/Archive.today if the page might have changed.

A.4 ยท Quick Scientific-Claim Verification

  1. Find the primary study, not the press release.
  2. Check study design against the evidence hierarchy.
  3. Check for a systematic review/meta-analysis.
  4. Check retraction/replication status.
  5. Check funding/conflict-of-interest disclosure.
  6. Assign confidence; note what would change it.

A.5 Confidence-Level Quick Reference

Confirmed > Well-supported > Plausible > Contested > Unverified > Disputed/Debunked

Always state which one, and why.