Introduction to OSINT

The real world is filled with information. Some of it sits in plain sight, and some of it is buried inside digital trails that most people never think to follow. Open-Source Intelligence draws from a wide range of publicly accessible sources, and what makes it powerful is not any single one of those sources in isolation. It is the ability to cross-reference information across multiple sources, identify patterns, and build a coherent picture from fragments that individually seem unremarkable. A username on one platform, a timestamp on a forum post, and a metadata entry inside a photograph can collectively tell you far more than any one of those things could alone.

What Does OSINT Consist Of?

OSINT draws from a wide range of publicly accessible sources. These sources broadly include:

1. Websites and search engines such as Google, Bing, and DuckDuckGo
2. Social media platforms such as X (formerly Twitter), LinkedIn, Facebook, and Instagram
3. Government databases including court records, FOIA disclosures, and public registries
4. Domain and IP lookup tools such as WHOIS, Shodan, and Censys
5. Academic publications, news archives, and public forums
6. Leaked datasets and dark web resources that have entered the public domain
7. 
   

Who Uses OSINT?

OSINT is used across a remarkably wide range of professional disciplines, and understanding who relies on it helps you appreciate the weight of what you are learning.

Cybersecurity professionals use OSINT to map an organization's external attack surface, track threat actors, and monitor for exposed credentials or leaked data. Law enforcement agencies and investigators use it to locate missing persons, build cases against suspects, and corroborate witness accounts with verifiable digital evidence. Journalists and researchers use it to verify facts, expose misinformation, and document events in conflict zones where traditional reporting is impossible. And on the other side of that line, malicious actors use the exact same techniques to identify targets, craft phishing campaigns, and gather intelligence before carrying out attacks.

That last point matters. The tools and techniques you are learning in this course are not inherently good or bad. They are a capability, and like any capability, their value or harm is entirely determined by the purpose behind their use.

The Intelligence Life Cycle

Professional OSINT work does not begin with a search. It begins with a plan. The Intelligence Life Cycle is the structured framework that separates disciplined, repeatable investigations from unfocused searching that produces noise instead of answers. According to the SANS Institute, the cycle consists of five phases that feed into one another continuously.

You will work through this cycle in every module of this course, whether you realize it in the moment or not. Every task you are given follows this structure. By the time you reach the Case Investigation module, running this cycle deliberately and methodically will feel like second nature.

OSINT-Related Organizations

Part of stepping into this field is recognizing that you are joining a broader community of people who use these skills to make a real difference. The following organizations represent some of the most respected and impactful in the OSINT space:

To every investigator and professional working in this field, I thank you. The work you do matters more than most people will ever know.

Now, I leave you with your new task:

Intel Corporation has recently appointed a new Chief Executive Officer. Investors and analysts are monitoring this leadership change closely. Your mission is to use OSINT techniques and advanced Google search operators to uncover specific information about the new CEO's appointment, his previous role, and his board tenure at Intel prior to becoming CEO.

NOTE: This task follows legal and ethical OSINT practices. All information is publicly available through official company websites, press releases, and reputable news sources. Do not attempt to access private, restricted, or sensitive data. Stick to publicly available sources only.