REQUEST YOUR COPY OF THE CASE STUDY
OR EMAIL US AT INFO@FIVECAST.COM:
Map the network behind a disinformation campaign
How analysts trace narrative amplification and threat actor networks across social media using OSINT.
Disinformation campaigns spread through networks of accounts that amplify a common narrative across social media. This case study shows how analysts surface those actors, narratives, and networks using open-source intelligence.
Starting from a single Twitter-derived lead tied to the Handala Hacking Team, analysts used Fivecast ONYX to expand outward. Entity extraction, hashtag analysis, and activity volume turned one hashtag into a map of the campaign.
What will you learn?
- How to expand a single social media lead into a full network
- How hashtag analysis surfaces linked emails, handles, and websites
- How activity volume spikes correlate with global events
- How network analytics identify accounts amplifying a narrative
- How translation and filtering surface cross-language content
Who is this case study for?
Intelligence analysts, threat researchers, and security teams tracking influence operations and disinformation. It suits anyone mapping how narratives originate, spread, and gain amplification online.

