modbender OSINT Graph Analyzer 🕵️
Build knowledge graphs from OSINT data and discover hidden patterns using Neo4j graph algorithms.
What It Does
Ingests OSINT data from multiple sources and creates a Neo4j knowledge graph for:
- Entity linking — Connect same person across platforms
- Community detection — Find clusters of related entities
- Centrality analysis — Identify key influencers in networks
- Path analysis — Trace connections between entities
- Pattern recognition — Detect anomalies and hidden relationships
Use Cases
- Investigation workflows — Map relationships in complex cases
- Threat intelligence — Identify central nodes in attack networks
- Social network analysis — Discover communities and influence patterns
- Counter-OSINT — Understand your own exposure surface
Requirements
- Neo4j 5.x (local or remote)
- Python 3.9+
- neo4j-driver package
Usage
# Start Neo4j instance (local)
docker run -d \
--name neo4j \
-p 7474:7474 -p 7687:7687 \
-e NEO4J_AUTH=neo4j/password \
neo4j:5.23
# Ingest data
python3 scripts/osint-graph.py --ingest data/sources.csv
# Run community detection
python3 scripts/osint-graph.py --community-detection
# Find most central entities
python3 scripts/osint-graph.py --centrality --top 10
# Trace path between two entities
python3 scripts/osint-graph.py --path "Entity A" "Entity B"
# Export graph as visualization
python3 scripts/osint-graph.py --export graph.json
Data Format
Supported formats:
- CSV (node + edge files)
- JSON (Cypher queries)
- Direct API ingestion (Telegram, Twitter, etc.)
CSV example:
nodes.csv:
id,name,type,properties
1,@target_account,person,"{country:US,verified:true}"
2,@associated_handle,person,"{country:RU}"
edges.csv:
source,target,relationship,timestamp
1,2,MENTIONED,2026-01-31
Graph Algorithms
| Algorithm | What It Finds | Use Case |
|---|---|---|
| Louvain | Community clusters | Find groups working together |
| PageRank | Influence centrality | Identify key influencers |
| Betweenness | Bridge nodes | Find connection points between communities |
| Shortest Path | Connection chains | Trace indirect relationships |
| Weakly Connected | Disconnected subgraphs | Find isolated clusters |
Architecture
┌─────────────────┐
│ Ingestion │ ← CSV/JSON/API sources
└────────┬────────┘
│
▼
┌─────────────────┐
│ Neo4j Graph │ ← Nodes + Relationships
└────────┬────────┘
│
▼
┌─────────────────┐
│ Algorithms │ ← GraphX / Neo4j Graph Algorithms
└────────┬────────┘
│
▼
┌─────────────────┐
│ Visualization │ ← JSON export + D3.js / Cytoscape
└─────────────────┘
Inspiration
- CRIS — Multi-agent criminal intelligence system with Neo4j
- Context Graphs — Semantic search + structural analysis
- osint-analyser — LLM-powered OSINT automation
Local-Only Promise
- Data stays local (Neo4j instance)
- No external API calls for analysis
- Optional offline mode
Version History
- v0.1 — MVP: CSV ingest, basic algorithms, JSON export
- Roadmap: API integration, ML anomaly detection, real-time updates