Non-Typical OSINT Introduction: Civil OSINT
To begin with, I want to say that I will consider OSINT as a set of skills or a mindset, because it can be directly related to doxing, military GEO-INT performed by a security company employee or just media OSINT performed by a VC fund employee in order to find new projects for investment, taking the theory of handshakes as a basis...
- OSINT Is A State Of Mind https://medium.com/secjuice/osint-as-a-mindset-7d42ad72113d
- Cognitive Bias and Critical Thinking in Open Source Intelligence (OSINT) https://deepsec.net/docs/Slides/2014/Cognitive_Bias_and_Critical_Thinking_in_Open_Source_Intelligence_(OSINT_-_Benjamin_Brown.pdf)
- A Brief History of Open Source Intelligence https://www.bellingcat.com/resources/articles/2016/07/14/a-brief-history-of-open-source-intelligence/
- How OSINT powered the largest criminal investigation in US history https://www.isdglobal.org/digital_dispatches/jan-6-series-how-osint-powered-the-largest-criminal-investigation-in-us-history/
...Or even a crypto-forensics specialist investigating a major Web3.0 hack case. In other words, it can be used in all spheres of life because it is only a method of working with, assessing and ranking information - do not ever forget that we are all living in the Information Era.
Expand
- On-Chain Investigations Handbook https://github.com/OffcierCia/On-Chain-Investigations-Tools-List
- The Beginner’s Guide to Open-Source Intelligence (OSINT): Techniques and Tools https://medium.com/@mohitdeswal_35470/the-beginners-guide-to-open-source-intelligence-osint-techniques-and-tools-6a91b9c37ee1
- Awesome Intelligence https://github.com/ARPSyndicate/awesome-intelligence
All of what I said above you can develop in yourself, but the essence of all directions is the same - the ability to notice valuable information, anomalies, see the differences, carefully analyze the facts and build a logical chain - while being in the flow of information. Start up from checking out your own info and your own data: make an OSINT research against yourself. Collect all data, visualize it, then, erase - with using SERM/ORM techniques.
- Examples of opsec and privacy fails when doing OSINT https://www.osintme.com/index.php/2022/01/17/examples-of-opsec-and-privacy-fails-when-doing-osint/
- WhatBreach https://github.com/Ekultek/WhatBreach
- More OpSec Studies https://github.com/lawsecnet/OPSEC
- Basic OPSEC Tips & Tricks for OSINT researchers https://web.archive.org/web/20221108024236/https://osintcurio.us/2019/04/18/basic-opsec-tips-and-tricks-for-osint-researchers/amp/
- The Osint Me ultimate guide to Telegram OSINT and privacy https://www.osintme.com/index.php/2022/10/18/the-osint-me-ultimate-guide-to-telegram-osint-and-privacy/
- Dork yourself before “someone” does https://osintteam.blog/dork-yourself-before-someone-does-aa49d0c1929f
I would like to give you the first lesson, all resources which I will advise you - I studied by myself earlier:
- So You Think You Can Google? - Workshop With Henk van Ess https://youtu.be/uyqXS5lL-mc
- OSINT Origins #1 - Jean-Marc Manach/@manhack https://youtu.be/XrTFzZ77eEI
- An Awesome OSINT Mind-map http://files.mtg-bi.com/MindMap.jpg
- A definitive guide to generating usernames for OSINT purposes https://github.com/soxoj/username-generation-guide
Sections