school cyberbullying vs cyberstalking
both involve harassment — school-cyberbullying is post-incident district IR on gaggle/bark/powerschool exports under FERPA. cyberstalking is broader adult multi-account impersonation, doxing, and location-leak surfaces outside a single district-owned export pack. wrong call sends K–12 IT to entity-resolver graphs when they need monitor severity ladders — or sends an individual victim to bark schools+ csv when they need social-graph tooling.
primary tools · side by side
ordered entry points from the case-type taxonomy. highlighted rows appear in both case types' editorial tool lists.
school cyberbullying · K–12 IR
post-incident district IR — correlate gaggle · bark monitor severity ladders with powerschool discipline rows · google classroom/schoology audit · doctored-screenshot metadata. not counseling · not mandatory-reporter trees · student education records stay local.
- 01gaggle student safety alert export forensic analyzerdrop gaggle safety export · severity ladder · harassment/self-harm clusters · runs locally
- 02bark school edition alert export forensic analyzerdrop bark for schools csv · concern level 1–5 · thread bursts · runs locally
- 03powerschool sis audit log forensic analyzerdrop powerschool log or incident csv · discipline gaps · harassment clusters · runs locally
- 04google classroom audit log forensic analyzerdrop google classroom audit via workspace · parse class + post + grade events · runs locally
- 05case report generatorfill in case number · examiner · dates · findings · drop evidence files for auto hash · generates structured forensic report PDF · runs locally
cyberstalking
broader than stalkerware-app: social-graph harassment, doxing, multi-account impersonation, location-leak surfaces.
- 01ai chatbot multi-account correlation analyzercorrelate AI chatbot accounts, sessions, and devices across platforms · detect multi-account usage, shared devices, account switching · runs locally
- 02multi-source entity resolverdrop forensic csvs · resolve names emails usernames ips across sources · probabilistic entity profiles · runs locally
- 03investigation knowledge graph builderdrop forensic csv exports · extract entities and relationships · knowledge graph visualization · hub and path analysis · runs locally
- 04osint normalizerpaste osint dump · extract emails phones ips crypto handles · disposable tor private heuristics · e.164 · five tabs · per-category csv · runs locally
- 05natural language writing sample authorship comparatordrop multiple text files or paste writing samples · compute 40 plus stylometric features · sentence length distribution · vocabulary richness · function word frequencies · punctuation patterns · produce similarity score with confidence intervals between samples · runs locally
- 06ios significant locations forensic extractordrop routined Cache.sqlite · parse significant places visits · home work inference · visit timeline · runs locally
- 07android google timeline artifact forensic extractordrop Google Timeline JSON, Takeout location history files, semantic location history exports, or Maps activity artifacts · parse places, visits, activity segments, coordinates, confidence values, and edit metadata · reconstruct Google-derived movement history · runs locally
- 08domain reputation analyzerpaste domains or IPs · score by entropy · TLD risk · homoglyph detection · DGA patterns · punycode abuse · age heuristics · no external lookup · runs locally
editorial overlap
lean toward…
disambiguation signals derived from case-type descriptions and common practitioner confusion points.
lean toward school cyberbullying if you see…
- gaggle/bark/powerschool exports in evidence · student_number or thread_id correlation · district counsel IR packet
- harassment disclosed through school channel first · FERPA education records · schools+ bark csv available
- primary ask is correlate monitor alerts with SIS discipline rows — not multi-platform impersonation graph
lean toward cyberstalking if you see…
- multi-platform impersonation outside district-owned tools · location-leak or doxing without SIS incident row
- individual (non-district) export set · no schools+ monitor csv in evidence profile
- entity-resolver and social-graph tooling — not gaggle severity ladder + powerschool incident management