Introduction
Fresh open-source satellite intel just revealed unreported naval expansions in two flash-point regions; investigators need practical steps to replicate these discoveries before geopolitical windows close. OSINT is no longer about “nice to have” pictures—it’s about proving what navies deny. If you can’t find a destroyer in under ten minutes, you’re late.
What’s Breaking Now
Yesterday, PlanetScope and Capella’s tasking feeds showed three new piers plus a 30 % increase in support barges at a “fishing port” that never had a Coast Guard cutter. The same imagery caught a new Type-052D destroyer moored next to a warehouse without an AIS ping in 90 days. Translation: someone is spoofing transponders while berthing warships in civilian docks.
Twelve hours later, a commercial SAR pass picked up wake signatures of unflagged fast-attack craft practicing night sorties. These boats are not in Janes, not in Equasis, and not on the official fleet roster. If you’re waiting for a press release, keep waiting.
How to Track Ships Using Satellite Imagery walks through the exact deck plate numbers and shadow lengths that flag a warship even when its paint scheme says “trawler.”
How Attackers (and Analysts) Operate
Step one: grab free low-res optical tiles from Sentinel-2 to spot new dredging. Step two: task a 0.5 m optical bird for the same scene within 24 h—clouds love to screw you on step two. Step three: cross the optical hit with a same-day SAR pass; steel shows up even in monsoon season. Step four: measure length-to-beam ratios against public hull databases; if the ratio is 9.2 and the only vessel matching is a frigate class the navy claims it retired, you just caught a ghost fleet.
Red teams replicate this to spoof defenders; SOC teams replicate it to catch the spoofers. Either way, speed wins. A five-day lag and the ship is back under the container cranes of a dual-use port where every berth looks identical.
Low-Tech OSINT Methods That Still Work shows how to do hull measurements with nothing more than a screen ruler and the known height of a pier crane—handy when your budget request for imagery credits is still stuck in purchasing.
Practical Satellite OSINT Workflow
- Harvest recent AIS gaps inside 20 nm of suspect coastlines—use Kindi to auto-cluster vessels that drop off the air for >72 h.
- Feed those clusters into Sentinel-2 time-series; look for new piers or dredged turning basins.
- Order a 0.3 m optical collect; pay with a credit card, nobody cares about your PO.
- Run a simple band-ratio script (NIR/Green) to highlight fresh concrete; concrete blooms white in the first 60 days.
- Push the cropped candidate chips through open-source hull-recognition models; if TensorFlow yells “frigate” but the metadata says “merchant,” flag it.
- Dump lat/lon into a shared map layer; invite the rest of your team to annotate inside Kindi so analysts in three time zones aren’t duplicating effort.
Common rookie mistake: trusting the satellite vendor’s “ship detection” layer. It’s trained on cruise liners, not corvettes. Always sanity-check against Sentinel-1 backscatter; metal hulls sparkle at –20 dB, fishing boats don’t.
How to Stay Ahead of the Spoofers
Navies now turn off AIS, paint hull numbers to match local ferries, and moor under container cranes for visual clutter. Your counter-move: fuse RF data. A commercial RF geolocation pass that catches an X-band fire-control radar at 9.4 GHz inside a “civilian” harbor is a confession. Pair that with your optical hit and you have proof that matters in a briefing.
Another free trick: use public webcam archives. A beach resort 24/7 livestream saved a 4K frame every 30 s. We rewound to the night of the SAR pass and caught navigation lights that matched the classified vessel’s length. OSINT is just legos; stack enough free blocks and even deniable fleets leave a shadow.
Detecting AIS Spoofing Using OSINT gives the regex to find fake MMSI numbers churned out by $20 software-defined radios.
External Link
The ESA Capella dashboard lists next-day SAR tasking availability and pricing—bookmark it before your next hurry-up request.
FAQ
What resolution do I need to prove a warship vs. a patrol boat?
0.5 m optical for length-to-beam ratios plus 3 m SAR for metal confirmation; anything coarser risks mis-ID.
Can I do this without paid imagery?
Sentinel-2 (10 m) will spot dredging and new piers; pair it with public RF or webcam data to raise confidence before you spend a dime.
How current does the collect need to be?
Target less than 48 h old; navies rotate spoofed vessels fast and clouds can kill optical for a week.
Is this legal for government analysts?
Commercial imagery is unclassified; your derivative work stays unclass until you fuse it with secret sensors—keep workflows separate.
What if the ship is under a warehouse roof?
Use SAR; metal roofs bounce signal and create a “hole” in the image. Measure the shadow—if it’s 130 m long, you still caught a destroyer.
To build stronger OSINT skills, begin with our free hands-on OSINT courses. For teams that need faster investigations and better collaboration, Kindi delivers AI-powered OSINT automation and link analysis.