OSINT (Open Source Intelligence) involves gathering information on people, businesses, and other targets using publicly available data and various methodologies.
All information collected must be publicly available and legally accessible.
The intelligence life cycle
Planning & Direction
Define the 5 W (who, what, when, where, why)
e.g. Who are we targeting? Why are we targeting them? When will we conduct the investigation?
Set clear objectives and scope
Determine targets
Collection
Gathering the actual information
Methods include:
Image analysis
Data gathering from social media
Public records searches
Technical reconnaissance
Processing & Exploitation
Taking collected data and beginning to interpret it
Organizing raw information
Initial analysis and filtering
Analysis & Production
Deep analysis of processed data
Connecting data points together
Building the narrative and context
Creating intelligence products:
Reports
Briefings
Dashboards
Dissemination
Presenting findings to clients/customers
Ensuring the audience can understand the information
Delivering actionable intelligence
The primary focus is collection methodologies (2nd step); there’s also a brief introduction to analysis and reporting. Not covered in depth: full exploitation, advanced production techniques.
Important Notes
The cycle is never-ending, and doesn’t have to follow strict order. It’s an iterative process: you can move between phases as needed (e.g. during collection, you might realize you need more planning – go back and adjust; while processing, you might need to collect more data for verification; etc.).