Technique
Open-source intelligence
technique:open_source_intelligence
Also: OCINT, OSINT, creative Googling skills, open source intelligence-gathering, open-source intelligence, open-source intelligence type techniques, open-source intelligence-gathering, open-source research, open-sourced research
Online information gathering used to prepare social-engineering and physical-security assessments.
Explore relationships
Mentioned in
EP 10
Derived
99%
Collection and correlation of publicly available information about target personnel, systems, and technologies.
“we had done a month of open-sourced research”
Nsa ·
offsets 18545–18589
“searching, scouring the internet to collect the names, e-mail addresses, and phone numbers”
Nsa ·
offsets 12301–12391
EP 22
Explicit
100%
Online information gathering used to prepare social-engineering and physical-security assessments.
“I do a lot of open source intelligence-gathering”
Snow ·
offsets 28166–28214
“Before I do any of these assessments I’m always going online”
Snow ·
offsets 28217–28277
EP 63
Explicit
100%
Use of publicly available information, including search engines, social-media profiles, blogs, and geolocation data, to identify a suspect.
“the FBI did some open-source intelligence, just Googling things”
Jack Rhysider ·
offsets 26888–26951
EP 65
Explicit
100%
Non-intrusive collection and analysis of information already published openly.
“OSINT is a non-intrusive way of collecting data. It’s just reading what’s already been published out there in the open.”
Jack Rhysider ·
offsets 14875–14995
EP 70
Explicit
100%
Investigation method Wesley McGrew used to identify the clinic and gather information about Ghost Exodus.
“I started doing image searches and open-source intelligence”
Wesley McGrew ·
offsets 27004–27063
“gathering as much as I could through open-source intelligence”
Wesley McGrew ·
offsets 28257–28318
EP 75
Derived
100%
Use of publicly observable website structure and search techniques to discover related covert communication sites.
“It just needed some sort of creative Googling skills which most average open-source intelligence technicians”
Jenna McLaughlin ·
offsets 13203–13311
EP 79
Explicit
100%
Use of publicly available information and investigative methods to identify targets, relationships, and infrastructure.
“their work is rooted in open-source intelligence, or OSINT.”
Jack Rhysider ·
offsets 13565–13624
“They’d have to crawl the web and do a digital investigation”
Jack Rhysider ·
offsets 24831–24890
EP 80
Explicit
100%
Collection and analysis of publicly available information from social media, databases, and online records.
“standard sort of open-source intelligence type techniques”
Paint Parrot ·
offsets 27057–27114
“looking at Facebook, Instagram”
Paint Parrot ·
offsets 27586–27616
EP 83
Explicit
100%
Reconnaissance based on publicly available information about targets, users, and infrastructure.
“We would do that sort of open-reconnaissance”
Jeff Man ·
offsets 58850–58894
“using open-source intelligence to figure out ways to infiltrate”
Jack Rhysider ·
offsets 69758–69821
EP 87
Explicit
100%
Use of publicly available information to identify possible email addresses and account details.
“They started doing some OSINT, open-source intelligence-gathering”
Jack Rhysider ·
offsets 24739–24804
EP 90
Explicit
100%
Collection and analysis of publicly available information about a target.
“her first step is always to do OSINT, open-source intelligence-gathering.”
Jack Rhysider ·
offsets 22392–22465
“I go over to the internet and I look at Facebook”
Jenny Radcliffe ·
offsets 24387–24435
EP 144
Explicit
100%
Gathering personal and organisational information from publicly available sources and data-broker services.
“OCINT, open-source intelligence”
Rachel Tobac ·
offsets 20537–20568
Relationships
Claims
Nation State Actor
USES
Open-source intelligence
The operator uses publicly available information from social networks, search engines, Reddit, and technical forums to map personnel and infrastructure.
Explicit
Confidence 99%
· Nsa
EP 10
Details
“I have a team of people – I have like, fifteen people who do nothing other than spend eight hours a day for six to eight weeks, searching, scouring the internet”
Nsa ·
offsets 12173–12333
“we had done a month of open-sourced research”
Nsa ·
offsets 18545–18589
Snow
USES
Open-source intelligence
Snow says she performs open-source intelligence gathering before assessments.
Explicit
Confidence 99%
· Snow
EP 22
Details
“I do a lot of open source intelligence-gathering”
Snow ·
offsets 28166–28214
Higinio Ochoa
USES
Open-source intelligence
The FBI used open-source intelligence to connect the w0rmer identity with Higinio Ochoa.
Attributed
Confidence 97%
· Jack Rhysider
EP 63
Details
“the FBI did some open-source intelligence, just Googling things like putting w0rmer and Higinio Ochoa together”
Jack Rhysider ·
offsets 26888–26998
Wesley McGrew
USES
Open-source intelligence
Wesley McGrew used open-source intelligence and image searches to identify the facility shown in the screenshots.
Explicit
Confidence 99%
· Wesley McGrew
EP 70
Details
“I started doing image searches and open-source intelligence based off the pictures”
Wesley McGrew ·
offsets 27004–27086
Iranian intelligence
USES
Open-source intelligence
After finding one covert website, Iranian officials used open-source or creative Googling techniques to find additional sites.
Explicit
Confidence 98%
· Jenna McLaughlin
EP 75
Details
“It just needed some sort of creative Googling skills which most average open-source intelligence technicians – but, you know, even average people now, the hordes of Twitter, are certainly capable of.”
Jenna McLaughlin ·
offsets 13203–13402
Citizen Lab
USES
Open-source intelligence
Citizen Lab’s investigation relied on open-source intelligence and publicly available data.
Explicit
Confidence 99%
· Jack Rhysider
EP 79
Details
“their work is rooted in open-source intelligence, or OSINT”
Jack Rhysider ·
offsets 13565–13623
Paint Parrot
USES
Open-source intelligence
Paint Parrot used open-source intelligence techniques to research a target and the target's family, contacts, and routines.
Explicit
Confidence 99%
· Paint Parrot
EP 80
Details
“use your standard sort of open-source intelligence type techniques”
Paint Parrot ·
offsets 27048–27114
The Pit
USES
Open-source intelligence
The Pit gathered publicly available information about targets, people, naming conventions, and likely passwords before seeking approval for an attack.
Explicit
Confidence 98%
· Jeff Man
EP 83
Details
“We’d try to learn as much as we could about the target from a benign perspective”
Jeff Man ·
offsets 58349–58429
“We would do that sort of open-reconnaissance”
Jeff Man ·
offsets 58850–58894
Operation Eligible Receiver
INVOLVES
Open-source intelligence
The exercise used open-source intelligence to identify ways to infiltrate military bases and networks.
Explicit
Confidence 99%
· Jack Rhysider
EP 83
Details
“using open-source intelligence to figure out ways to infiltrate different military bases and networks”
Jack Rhysider ·
offsets 69758–69859
The Guild of the Grumpy Old Hackers
USES
Open-source intelligence
The Guild used publicly available information to identify possible email addresses associated with Trump.
Explicit
Confidence 99%
· Victor
EP 87
Details
“We acted on OSINT. We acted on publicly available information”
Victor ·
offsets 25210–25272
Jenny Radcliffe
USES
Open-source intelligence
Jenny says that OSINT is normally her first step in a social-engineering job.
Explicit
Confidence 99%
· Jack Rhysider
EP 90
Details
“When starting the job or any social engineering job, her first step is always to do OSINT”
Jack Rhysider ·
offsets 22339–22428
“I go over to the internet and I look at Facebook”
Jenny Radcliffe ·
offsets 24387–24435
Rachel Tobac
USES
Open-source intelligence
Rachel uses open-source intelligence and data-broker information to identify phone numbers, personal details, and target information.
Explicit
Confidence 99%
· Rachel Tobac
EP 144
Details
“when we’re doing OCINT, open-source intelligence”
Rachel Tobac ·
offsets 20520–20568
“I can find those pieces of information through OCINT”
Rachel Tobac ·
offsets 24012–24064