// runnable playbook

sextortion

extortion via real/fake intimate imagery. evidence is the threat channel + payment demand + (often) deepfake or scraped imagery.

a guided path, not automation — each step opens a tool you run yourself; nothing uploads. progress is saved only in this browser.

// based on the curated pipeline

wraps the sextortion — image + payment IOC kit preset — drop threat messages + suspect imagery → provenance + face-swap + stego → extract wallet/url IOCs → triage → report

methodology guide →worked example →full tool list + 1 more pipeline →

guided steps

0/7 done

01
evidence manifest generator
hash messages + images before any analysis
open tool →methodology
your note (local only)
02
ai generated image provenance analyzer
determine if imagery is likely AI-generated vs scraped authentic
open tool →methodology
your note (local only)
03
face swap artifact detector
face-swap is the most common deepfake vector in sextortion cases
open tool →methodology
your note (local only)
04
image steganography detector
check for hidden payloads embedded in the imagery itself
open tool →methodology
your note (local only)
05
ioc extractor
pull crypto wallets, payment URLs, and contact identifiers from message exports
suggested options · format: json · aggregate: true
open tool →methodology
your note (local only)
06
ioc bulk validator & triage
score payment-demand IOCs for escalation priority
open tool →methodology
your note (local only)
07
case report generator
draft a victim-advocate report linking imagery assessment to payment trail
suggested options · title: sextortion — evidence package
open tool →methodology
your note (local only)

when you're done

export a run summary — a small JSON record of which steps you marked done, your notes, and a self-hash so the record can't be silently altered. it is your reproducibility note, not a per-tool receipt: each tool emits its own input→output receipt when you run it.