Beginners Field Guide: Where & How to Learn OSINT
This is not a comprehensive collection of resources. This collection is based on my own time spent on open-source intelligence. There are a million links with OSINT tools that can get the job done but this post is curated to point you in the right direction to obtain the necessary skills and mindset to get the job done. — EXTRA SECTION — FRAMEWORK FOR BEGINNERS
UNDERSTAND OPEN SOURCE INTELLIGENCE
GENERAL RESOURCES — WHERE TO LEARN OSINT
The books I’ve curated here on OSINT will dive deeper into the topic and provide the tools and techniques you need to analyze information effectively.
Story Driven CTF Games. Providing Capture the Flag exercises that span multiple disciplines, woven together with a compelling story-line and character building. Sharpen all your OSINT, Cyber and Logical skills at once. I highly recommend joining the discord via the website to learn from individuals in various fields of intelligence, cyber and law enforcement.
QuizTime is one of the best places to practice your open source intelligence skills, collaborate with others, and learn new techniques.
The OSINT Dojo’s youtube, website and twitter are places where you learn OSINT, practice your skills and obtain valuable resources.
The Project Owl Discord server is one of the best places to learn from individuals with different professional backgrounds, keep up with the latest techniques and apply your own OSINT skills to contribute to the community.
Perhaps one of the most valuable YouTube playlists that educate individuals on OSINT tools, tips, and techniques.
Created by Sofia a Senior OSINT Analyst that I’ve learned a lot from these exercises of varying difficulties and YouTube video explanations will provide you with OSINT skills.
OZINT a French discord server and website (Think you might need to change your VPN to France or EU to access) is one of the best places to learn Open Source Intelligence, practice and collaborate on a global scale.
Specialist Cyber training in Open Source Intelligence (OSINT) & SOCMINT to military, law enforcement, private and corporate sector. Training is provided in French and English by my good friend OSINT_Tactical You should also check out their twitter.
Projet FOX Discord is another great global community to learn open source intelligence, take part in capture the flag events and really push yourself because the CTF’s they produce are top notch.
The French as I like to call them are definitely the best OSINT teachers. If you want to join a global community and collaborate with like minded individuals and challenge yourself with awesome capture the flag events then look no further than OSINT FR
Sector035 is a part of the QuizTime I linked previously however, their website and twitter are an invaluable resource.
Honestly it would be a crime not to include Jake Creps in a list of places where to learn OSINT. Checkout his twitter and subscribe to the OSINT Newsletter.
The Cyber Detective lists a great resource of tools, tips, and techniques you might not find anywhere else.
Igor, a modern-day Sherlock Holmes, lists various methods of OSINT techniques and methodologies that are useful for a different number of purposes.
Techjournalist will boost your digital investigative skills with their insightful medium posts.
Everything you need to navigate the OSINT world, gain deeper insights, and enhance investigations.
Through a series of films, interviews, guides, tools and workshops, Exposing the Invisible brings together different techniques and individual practices of those working at the new frontiers of investigation.
SPECIFIC PAID FOR RESOURCES
It’s as the name says “Offensive OSINT” a curator of all the offensive uses for open source intelligence that overlap with cybersecurity.
Training provided by Micheal Bazzell a former government computer crime investigator, author of one of the best OSINT books and producer of one of the best OSINT podcasts.
The goal of this course offered by SANS is to provide practical, real-world tools and techniques to help individuals perform OSINT research safely and effectively.
The world’s most extensive portfolio of intelligence training solutions, supporting researchers, analysts, strategists and policy professionals at every stage of their career.
Kase was created by seasoned OSINT Analysts and trainers Espen and Rae to educate and inspire people everywhere to enter the field of OSINT by participating in exciting and fun training experiences.
The course helps learners understand the best times and ways to use an open source tool in research and reviews the basic functionalities of such tools. It encourages critical thinking to help learners push research further across several scenarios drawn from frontline experience, including executive-level RFIs, incident response investigations and information operation campaigns.
The CSI Linux Certified-OSINT Analyst (CSIL-COA) is an open-source intelligence and investigation certification that applies to Data Collection, Analysis, and Reporting of open source information to help provide actionable intelligence to decision-makers.
OSINT (Open-source Intelligence) is a crucial stage of the penetration testing process. A thorough examination of publicly available information can increase the chances of finding a vulnerable system, gaining valid credentials through password spraying, or gaining a foothold via social engineering. There is a vast amount of publicly available information from which relevant information needs to be selected.
A one of a kind resource designed to teach you how to successfully blend multi-intelligence disciplines to analyze information in an ever evolving digital landscape.
PUT YOUR SKILLS TO THE TEST
The Trace Labs Search Party CTF is a non theoretical, gamified effort that allows for the crowdsourcing of contestants to perform a single task: Conduct open source intelligence operations to help find missing persons.
You could bring them down: help find the EU’s most dangerous fugitives.
You only need to know one thing: people think that intelligence is fixed — but it isn’t. Your brain is like a muscle; the more you use it, the more it grows. Education is no longer a one-time event, but a lifelong experience. Start learning on sourcing.games
HEXA OSINT CTF is designed to test your OSINT skills by providing various challenges over a two day time period. It’s a great place to test your teamwork and communication skills. Yearly CTF
Collaborate with regional intelligence analysts in the Intelligence Fusion Discord Server, learn from others and build your OSINT analysis skills as you learn what counts as reliable intel and what constitutes as noise.
Cyber Detective CTF is an OSINT-focussed CTF created by the Cyber Society at Cardiff University. There are 40 challenges across 3 streams: General Knowledge, Life Online and Evidence Investigation.
A Military themed OSINT CTF
ATII is working together with industry data experts to equip law enforcement and federal officials with fact-based content to address the highly challenging and dynamic nature of cybercrimes in human trafficking, modern slavery, and CSAM.
I sure do love the French they’re great at OSINT and provide so many learning resources. Tackle the investigative case and enhance your critical thinking skills.
A collaborative effort between the FBI and the National Center for Missing & Exploited Children, ECAP seeks national and international exposure of unknown adults (referred to as John/Jane Does) whose faces and/or distinguishing characteristics are visible in CSAM images.
Utilize OSINT skills to verify images that are useful to end a cycle of abuse against innocent children.
FRAMEWORK FOR BEGINNERS
Understanding OSINT Fundamentals:
a. Grasp the concept of OSINT and its significance in intelligence gathering.
b. Familiarize yourself with the types of OSINT sources (e.g., social media, public records, online forums, news outlets).
c. Learn the ethical and legal considerations when collecting OSINT.
Developing Technical Skills:
a. Acquire proficiency in basic computer and internet usage.
b. Learn advanced search techniques using search engines and operators.
c. Understand the importance of anonymity and acquire skills in using VPNs, proxies, and the Tor network.
d. Familiarize yourself with essential OSINT tools, such as Maltego, Shodan, and Google Dorks.
Mastering OSINT Collection:
a. Learn how to identify and prioritize intelligence requirements.
b. Develop a systematic approach to collecting data from various sources.
c. Hone your skills in social engineering, passive reconnaissance, and online reconnaissance.
d. Acquire expertise in geolocation, imagery analysis, and tracking down information on individuals and organizations.
OSINT Analysis and Evaluation:
a. Learn various analysis techniques, such as link analysis, timeline analysis, and sentiment analysis.
b. Develop critical thinking and cognitive bias awareness.
c. Understand the significance of the intelligence cycle and apply it to OSINT analysis.
d. Evaluate the credibility and reliability of sources and information.
OSINT Dissemination and Reporting:
a. Familiarize yourself with the principles of effective communication.
b. Learn how to create intelligence reports, briefs, and visualizations.
c. Understand the importance of tailoring your reporting to different audiences.
d. Develop the ability to present findings in a clear, concise, and actionable manner.
Continuous Improvement and Networking:
a. Stay updated on the latest OSINT trends, tools, and techniques.
b. Participate in relevant online communities, forums, and social media groups.
c. Attend OSINT conferences, workshops, and webinars.
By following this framework, beginners can systematically develop their OSINT skills and become proficient in open source intelligence collection, analysis, and dissemination.
