4 Hours, 9 Channels, 28 Real Events: A Brand-Listening Case Walkthrough

A client asked last month which channels were talking about their brand, and who started the conversation. At first glance, this might seem like a simple Google Alerts answer. However, the process required four hours to complete, forming the actual product. The walkthrough consisted of four hours, each serving a unique purpose.

In the first hour, the focus was on finding the surface, not the mentions. Google Alerts covers web-visible text, and Telegram conversations reside under it. To seed a candidate channel list, three public sources were used: (1) the brand name and two common misspellings in Telegram's public search, (2) channels linked from the brand's own web pages and press kit, and (3) channels found via one known mention's forward header. This led to 47 channels, of which 9 had genuine brand conversation within the specified window.

The second hour involved quantifying without reading everything. With 9 channels and approximately 90 days of public t.me/s/ preview layer data, a few thousand posts were gathered. These posts were then reduced to a standardized format, including timestamp, channel, presence of a brand mention, sentiment cue, and forward origin. This process resulted in 312 brand-mentioning posts, providing a structure rather than just a raw count.

During the third hour, the focus shifted to identifying who started the conversation and who amplified it. The forward-origin column proved crucial in this process. Out of the 312 mentions, 28 origin events were identified, with 284 amplifications following. Contrary to expectations, the top three origin channels, not the biggest ones, drove every brand narrative in the corpus. One such channel had only 4,100 subscribers, while the biggest channel, with 240k subscribers, never originated but only re-broadcasted content.

In the final hour, the origin events were clustered into five narratives: price complaints, a counterfeit scare, a feature praise wave, a competitor comparison, and one geopolitical spillover. The counterfeit scare narrative emerged as the most actionable one. It originated in channel #2, was amplified within six hours, peaked within two days, and remained alive in the corpus for 40 days.

This indicates that new readers continued to arrive at it via search. Each narrative was broken down into its origin post, amplification timeline, top amplifiers, and live/dead status, forming the client's brief.

The client's payment covered the specific shape of the information provided - the separation of origin and amplification plus the narrative lifecycle. No mention-count tool produces such a detailed breakdown. The pipeline, consisting of seed sources, forward-header provenance parsing, origin-detection rules, and brief template, is the core of the Telegram & Web OSINT Bundle, priced at $5.

A free sample brief demonstrates the format, while 48-hour custom runs of the exact walkthrough are available for $25. These custom runs are conducted on public sources using GitHub Actions cron jobs, requiring no server or paid APIs.