Becoming a Social Detective: Using OSINT to Find Qualified Candidates

A working toolkit for sourcing gets built out step by step, starting with organizing personal link collections and moving into the actual detective work of tracing a candidate from a single scrap of information to a full profile.

Among the tools and techniques covered:

• Building a personal "toolbox" page of sourcing links and tools using start.me or a browser speed-dial extension, so every resource travels with you across devices.
• Using Google Lens as an OCR tool to pull text out of resume images found in search results, including a workaround for resumes deliberately padded with invisible keyword stuffing.
• Reading names off badges, awards or flight suits in photos when no other identifying information is available.
• Niche databases for hard-to-source markets, including a medical and dental-focused search tool covering millions of licensed professionals by state and license number.
• A free sourcing dashboard bundling dozens of search engines, X-ray bookmarks, reverse phone and email lookups, and multiple methods for uncovering email addresses.
• A technology reference site that supplies definitions, synonyms and related terms for building sharper Boolean strings.
• A method for cross-referencing a name, skill, location and photo to move from a thin profile on one platform to a developer's code repository, and from there to a personal email address hidden inside a commit link.
• Using team rosters, coaching staff listings and other public breadcrumbs to track down a missing person with almost no starting information.
• Pulling developer contact details out of code-sharing and paste sites by searching for common email domains alongside a technology or skill term.
• Free address and phone lookup and email validation sites, including one that can check bulk lists of email addresses for accuracy.
• A reverse image and username search tool that maps out every social profile, article and photo tied to a single person.

The throughline across all of it is a simple method: find one verified piece of information, then use it to pull the next one, and keep going until a complete, accurate profile emerges, even for candidates who never show up in a standard database search.