OSINT Techniques#
The tradecraft applied to OSINT sources with the operator’s kit. Each technique is a repeatable procedure that turns raw data into intelligence.
Technique |
Description |
|---|---|
Search-engine dorking |
Targeted queries against general search engines; see Search Engines. |
Username pivoting |
Pivot from a username across platforms to enumerate accounts. |
Domain pivoting |
DNS, WHOIS, CT log, subdomain, ASN pivots. |
Document metadata |
EXIF, MS Office, PDF metadata pull for authorship + tooling. |
Wayback walking |
Compare historical snapshots to surface scrubbed content. |
Social-graph analysis |
Friend / follower graph extraction and centrality measures. |
Geolocation |
Image + video chip analysis, shadow analysis, terrain match. |
People search |
Combine breach data (legal sources only), public records, social to build a profile. |
References#
OSINT for the discipline overview.
OSINT Tools for the operator’s kit.
OSINT Sources for the data sources.