VSI GLOBAL // ENTERPRISE ARCHITECTURE

OSINT-025-continuous-asset-monitoring-collection

12 min read

[ASSET HOLDER / MONITORED ASSETS] - Collection Map

OSINT-025 Continuous Asset Monitoring - collection workspace. Central topic = the holder and their named asset portfolio under watch. Branches = data-point categories for standing monitoring. Drop each collected value as a child node; expand it with where it was found. Paste raw tool output into the node’s Notes. → feeds deliverable OSINT-025.

00 · Collection Plan - PIRs & EEIs

The questions this standing watch must answer + the essential elements of information (EEI) for each. Tick as satisfied. → drives §1 Scope & Watch Criteria / Tripwires, §2 Collection Cadence & Sources, §4 Escalation & Notification Triggers.

PIR-1 - Watch Scope: are all named assets and watch items fully enumerated and tripwired?

  • EEI: every §1 watch item has an observable indicator and a firing threshold
  • EEI: each watch item is risk-scored (L×I) and assigned a severity tier
  • EEI: no asset class from the seeding baseline (OSINT-019/020/024) is orphaned off the watch list

PIR-2 - Real Property: is the current ownership / encumbrance status known?

  • EEI: ownership record confirmed in current registry pull (county recorder / land registry)
  • EEI: new liens, judgments, or UCC filings within monitoring period
  • EEI: transfer / quit-claim / deed-in-lieu activity detected

PIR-3 - Corporate Holdings: are the holder’s business interests and directorship positions current?

  • EEI: active / dissolved / struck-off status for each monitored entity
  • EEI: new incorporations or registered-agent changes linked to the holder
  • EEI: officer / director / UBO changes filed in any monitored jurisdiction

PIR-4 - Financial Instruments & Accounts: are observable financial indicators stable?

  • EEI: new public filings (e.g., UCC, bankruptcy, court-ordered freeze) flagged
  • EEI: no undisclosed brokerage / securities accounts surfaced in public records
  • EEI: judgment debtor asset searches return current picture

PIR-5 - Movable Assets (vehicles / vessels / aircraft): is registration and encumbrance status current?

  • EEI: DMV / FAA / USCG / flag-state registration records pulled at cadence
  • EEI: AIS / ADS-B / MMSI position data reviewed for anomalous movement
  • EEI: new liens or titles filed against watched movables

PIR-6 - Cryptocurrency & Digital Assets: is the watched wallet / exchange activity within tolerance?

  • EEI: on-chain activity reviewed at cadence; large or anomalous transactions flagged
  • EEI: no new wallet addresses linked to holder identified in public sources
  • EEI: exchange mention or dark-web listing of watched addresses checked

PIR-7 - Hidden / Nominee Structures: any new offshore, shell, or nominee arrangements surfaced?

  • EEI: UBO registry pulls (where available) confirm no new entities
  • EEI: registered-agent / trust-company associations reviewed
  • EEI: network of facilitators (lawyers, accountants, agents) cross-checked against new filings

PIR-8 - Escalation Readiness: are all tripwire conditions current and notification paths tested?

  • EEI: contact list for each severity tier verified at review cadence (→ §4)
  • EEI: SLA targets (→ §5) are being met; any misses documented
  • EEI: watch list reviewed and formally approved at service-review cadence (→ §6)

Collection gaps / RFIs (running)

  • [open item] → route to [product / PIR]
  • [open item]

00b · Monitoring Cadence & Triggers

Standing monitoring service: watch items, refresh cadence, alert thresholds, and escalation path. → drives §2 Collection Cadence & Sources, §3 Reporting Cadence & Product Format, §4 Escalation & Notification Triggers, §5 Service Levels.

Watch items register (seed from §1 tripwire table)

  • [Watch item # - e.g., WI-01 Real Property Transfer]
    • Observable indicator:
    • Tripwire threshold:
    • Risk score (L×I):
    • Severity tier: [Critical / High / Elevated / Moderate / Low]
    • Collection lane (→ §2):
    • Last checked:
    • Status: [No change / Alert fired / Pending verification]
    • Notes / tool output:
  • [Watch item # - e.g., WI-02 Lien / Judgment Filing]
    • Observable indicator:
    • Tripwire threshold:
    • Risk score (L×I):
    • Severity tier:
    • Collection lane (→ §2):
    • Last checked:
    • Status:
    • Notes / tool output:

Refresh cadence by asset class

  • Real property records: [e.g., weekly / bi-weekly]
  • Corporate registries (entity status / UBO): [e.g., weekly]
  • Court / judgment / lien indices: [e.g., daily / weekly]
  • Movable asset registrations (DMV / FAA / USCG): [e.g., weekly]
  • On-chain / crypto wallet activity: [e.g., continuous / daily]
  • Adverse media / news monitoring: [e.g., continuous / daily]
  • Dark-web mention monitoring: [e.g., weekly]
  • Service-health / SLA review: [e.g., monthly]

Alert thresholds

  • Critical (L×I 21–25): immediate notification, ≤ [X] hour(s) - route to → §4
  • High (L×I 16–20): same-day notification, ≤ [X] hour(s) - route to → §4
  • Elevated (L×I 11–15): next-business-day notification - route to → §4
  • Moderate / Low (L×I 1–10): include in routine periodic summary - route to → §3

Escalation path (quick reference)

  • Tier 1 - Critical: notify → via within hours; acknowledge within hours
  • Tier 2 - High: notify → via within hours
  • Tier 3 - Elevated: notify → via next-business-day report
  • Tier 4 - Routine: include in periodic summary

Watch-list change-control log

  • [Date - item added / retired / threshold adjusted]:

01 · Target Identity (Holder)

Confirms who the legal holder is behind every watched asset. → feeds §1 Scope & Watch Criteria / Tripwires (column: watch item), Annex B Onboarding.

  • Legal name:
  • AKA / aliases / transliterations:
  • Date of birth / year of birth:
  • Nationality / citizenship(s):
  • Government / national ID (partial / redacted):
  • Passport number(s) (partial):

Entity identifiers (if holder is a legal person / vehicle)

  • Registered legal name:
  • Registration number / CIK:
  • Jurisdiction of incorporation:
  • Tax / EIN / VAT reference:

Contact selectors (for verification, not investigation)

  • Primary address:
  • Email address(es):
  • Phone number(s):

Seeding baseline products

  • OSINT-019 Asset Trace & Discovery Report ref:
  • OSINT-020 Net-Worth / Wealth Profile ref:
  • OSINT-024 Pre-Litigation / Judgment Recovery ref:

02 · Real Property

Standing pull of ownership, transfer, and encumbrance records for every watched property. Clone block per parcel. → feeds §1 Watch Criteria (tripwires: transfer / lien / encumbrance), §2 Collection Cadence, Annex A.

Watched property

Clone this block per parcel. → feeds §1 real-property rows, §2 registry lane. Sources: county recorder, land registry, assessor portal, PACER (lis pendens).

  • [Property address / parcel ID - e.g., 123 Main St, APN 000-000-000]
    • Jurisdiction / county / state:
    • Current owner of record:
    • Vesting type (joint / tenants / trust / LLC):
    • Purchase date / instrument #:
    • Purchase price (if public):
    • Current assessed value:
    • Active liens (mortgage / HELOC / judgment):
    • Lis pendens / foreclosure notices:
    • Recent deed / transfer activity:
    • Last registry pull date:
    • Change since last pull: [None / Alert - describe]
    • Notes / tool output: ← (county recorder portal, PropertyShark, PACER)
  • [Property 2]

03 · Corporate Holdings & Business Interests

Standing watch on all business entities associated with the holder: status, officer changes, new incorporations. Clone block per entity. → feeds §1 Watch Criteria (corporate-interest rows), §2 registry lane, Annex A.

Watched entity

Clone this block per entity. → feeds §1 corporate rows, §2 registry lane. Sources: OpenCorporates, state SOS portals, Companies House, offshore registries, SEC EDGAR.

  • [Entity name - e.g., Acme Holdings LLC]
    • Jurisdiction of registration:
    • Registration number:
    • Current status (active / dissolved / struck off):
    • Registered agent / address:
    • Directors / officers / UBOs of record:
    • Ownership stake (%):
    • Most recent filing date:
    • Recent changes (officer / address / status):
    • Last registry pull date:
    • Change since last pull: [None / Alert - describe]
    • Notes / tool output: ← (OpenCorporates, state SOS portal, SEC EDGAR)
  • [Entity 2]

New incorporations / registrations sweep

Periodic sweep for new entities linked to holder name / selectors.

  • [New entity surfaced]:
    • Linked selector (name match / address / agent):
    • Registry source:
    • Date surfaced:
    • Notes / tool output: ← (OpenCorporates bulk search, state SOS name search)

04 · Financial Accounts & Instruments

OSINT-visible financial signals only - public filings, court records, regulatory disclosures. Not forensic account access. → feeds §1 Watch Criteria (financial-instrument rows), §2 public-records lane.

Public filings (UCC / bankruptcy / court orders)

  • [Filing / case ref]
    • Type (UCC / Ch. 7 / Ch. 11 / court freeze):
    • Jurisdiction / court:
    • Filed / effective date:
    • Secured party / creditor:
    • Collateral described:
    • Current status:
    • Source grade (Admiralty):
    • Notes / tool output: ← (UCC search, PACER, state court dockets)

Securities / brokerage disclosure (public)

  • [Disclosure ref - e.g., Form 4, 13D/G, Proxy]
    • Filed by:
    • Filed with (SEC / regulatory body):
    • Instrument / position:
    • Date:
    • Notes:

Judgment debtor asset searches

  • [Jurisdiction]:
    • Date searched:
    • Result summary:
    • Source:

05 · Movable Assets

Vehicles, vessels, aircraft, high-value goods - registration, ownership, and encumbrance tracking. Clone block per asset. → feeds §1 Watch Criteria (movable-asset rows), §2 registry / AIS / ADS-B lane.

Watched movable asset

Clone this block per asset. → feeds §1 movable rows, §2 lane. Sources: DMV/state motor vehicle, FAA registry, USCG documentation, flag-state registry, AIS/ADS-B live feeds, artnet/auction records.

  • [Asset description - e.g., 2022 Gulfstream G650, N-reg: N12345]
    • Asset class (vehicle / vessel / aircraft / art / other):
    • Make / model / year:
    • Registration / tail number / MMSI / IMO / hull ID:
    • Owner of record:
    • Lien holder (if any):
    • Flag state / jurisdiction:
    • Last position / location observed:
    • Recent movement anomaly:
    • Registration expiry / renewal due:
    • Last registry pull date:
    • Change since last pull: [None / Alert - describe]
    • Notes / tool output: ← (FAA registry, MarineTraffic AIS, FlightAware ADS-B, USCG)
  • [Asset 2]

06 · Cryptocurrency & Digital Assets

On-chain activity and public exchange signals for watched wallets and addresses. Clone block per wallet cluster. → feeds §1 Watch Criteria (crypto rows), §2 on-chain lane.

Watched wallet / address cluster

Clone this block per cluster. → feeds §1 crypto rows, §2 on-chain lane. Sources: block explorers (Etherscan, Blockchair, Blockchain.com), Chainalysis-style heuristics (public data), OSINT-022 baseline.

  • [Wallet address / cluster ID - e.g., bc1q…]
    • Blockchain / network: [Bitcoin / Ethereum / Tron / other]
    • Attribution (holder link basis):
    • Balance (last checked):
    • Last active date:
    • Large transaction threshold (tripwire):
    • Recent transactions flagged:
    • Known exchange tags / labels:
    • Dark-web / sanctions mention:
    • Last on-chain pull date:
    • Change since last pull: [None / Alert - describe]
    • Notes / tool output: ← (Etherscan, Blockchair, Blockchain.com block explorer)
  • [Wallet 2]

Exchange / platform mentions (public)

  • [Exchange / platform name]:
    • Mention type (KYC leak / sanctions hit / forum post):
    • Date surfaced:
    • Source:

07 · Income & Source of Wealth / Funds (Standing Indicators)

OSINT-visible income signals used to calibrate watch-item thresholds. Not a forensic income trace. → feeds §1 tripwire calibration (L×I scoring), OSINT-023 SoW/SoF if escalated.

Employment / directorship income signals

  • [Employer / board position]:
    • Salary range (public / estimated):
    • Source:

Business distributions / dividends (public filings)

  • [Entity / filing ref]:
    • Amount / period:
    • Source:

Real property rental income (public indicators)

  • [Property / listing ref]:
    • Estimated income:
    • Basis:

Other public income signals

  • [indicator]:
    • Source / basis:

08 · Liabilities & Encumbrances

Outstanding obligations and encumbrances that may affect asset liquidity or transfer. → feeds §1 Watch Criteria (lien / judgment rows), §4 escalation on new filing.

Active liens

  • [Lien ref - type + creditor + amount]
    • Jurisdiction / recording date:
    • Collateral / property affected:
    • Status (current / delinquent / satisfied):
    • Source grade:
    • Notes / tool output: ← (county recorder, UCC search, PACER)

Judgments

  • [Case ref - court + case #]
    • Creditor / plaintiff:
    • Judgment amount:
    • Date entered:
    • Satisfied / outstanding:
    • Notes:

Bankruptcies / insolvency proceedings

  • [Case ref]:
    • Chapter / type:
    • Filed date / current status:
    • Trustee / administrator:
    • Notes:

09 · Hidden / Nominee Structures

Offshore, shell, trust, and nominee arrangements that may hold watched assets out of direct view. → feeds §1 Watch Criteria (nominee / hidden-structure rows). Escalates to OSINT-021 Hidden Asset Investigation.

Offshore / shell entity sweep

Periodic sweep of offshore registries and leaked-data corpora. Sources: ICIJ Offshore Leaks DB, OpenCorporates, BVI / Cayman / Panama / Seychelles registries, OCCRP Aleph.

  • [Entity name / leaked reference]
    • Jurisdiction:
    • Linked selector (name / address / agent match):
    • Source (registry / leak database):
    • Date surfaced:
    • Notes / tool output: ← (ICIJ Offshore Leaks, OCCRP Aleph, OpenCorporates)

Trust / foundation arrangements

  • [Trust / foundation name]:
    • Trustee / protector:
    • Jurisdiction:
    • Linked assets:
    • Source:

Nominee directors / beneficial owners

  • [Nominee name / firm]:
    • Entities linked to:
    • Jurisdiction:
    • Source / basis:

10 · Network & Facilitators

Lawyers, accountants, registered agents, brokers, and associates who may be instruments in asset management or concealment. Clone block per facilitator. → feeds §1 Watch Criteria (network rows); cross-reference §09 Nominee Structures (above).

Facilitator / associate

Clone this block per individual or firm. → feeds §1 network rows. Sources: state bar / SRA / regulatory directories, LinkedIn, company filings, court records.

  • [Facilitator name / firm - e.g., John Doe, Esq. / Acme Trustees Ltd]
    • Role (attorney / accountant / registered agent / broker / other):
    • Jurisdiction / license #:
    • Linked entities (from §3):
    • Linked assets (from §2/§5):
    • Adverse regulatory / disciplinary history:
    • Date of association established:
    • Source / basis:
    • Notes / tool output: ← (state bar registry, SRA register, OpenCorporates agent search)
  • [Facilitator 2]

Adverse-media sweep (holder + facilitator network)

  • [Outlet + date]
    • Substance:
    • Reliability (A–F) / Credibility (1–6):
    • Watch item implicated:

99 · Collection Admin

Working register - not a deliverable section, but the audit trail behind it. → feeds Annex A Source & Watch-List Register, Annex B Onboarding / Offboarding & Data-Handling Checklist.

Source register

Every material datum traceable to a graded source (Admiralty). Grade = Reliability letter (A–F) + Credibility number (1–6), e.g. B2.

  • [S-1 - source / lane name]
    • Type: [Primary / Secondary / Tertiary]
    • Watch item(s) served:
    • Reliability (A–F):
    • Credibility (1–6):
    • Grade:
    • Collection cadence:
    • Last accessed:
    • Notes:

Evidence archive

  • [screenshot / capture ref + hash + URL + timestamp]:

Service-health log

  • [Date - metric - target - actual - on-target Y/N]:

Open gaps / verification pending

  • [item submitted, not yet returned - route to PIR]

Formal RFIs issued

  • [RFI # - question - issued to - date - status]

Graph View