Technique
technique:osint
Also: cyber OSINT, online OSINT, open-source intelligence, pre-attack OSINT
Open-source intelligence gathering using publicly available information about people or organizations.
Open-source intelligence gathering using publicly available information about people or organizations.
“We had done a lot of OSINT and we found that the bank was undergoing an audit”
“OSINT is open-source intelligence-gathering which is where you look in public areas online for private information about a company.”
Open-source intelligence gathering using publicly available maps, imagery, social media, company websites, and property records.
“Yeah, we did a bunch of OSINT”
“OSINT is a huge piece”
Open-source intelligence collection, discussed in the context of maritime piracy and online investigations.
“they were doing OSINT”
“got me interested in the cyber OSINT online space”
Open-source intelligence used to assess companies and identify targets.
“GandCrab did some OSINT”
“we can use OSINT to find them”
Open-source intelligence collection and analysis using public social-media, business, mapping, image, and contextual information.
“This guy — I refer to this guy as the OSINT pinata”
“complete OSINT win”
Open-source intelligence gathering used to identify and profile cryptocurrency holders before attacks.
“my role was really the pre-attack OSINT”
Open-source intelligence gathering used to identify U.S. data brokers and private investigators.
“doing lots of OSINT to get me a list of all the data brokers in the US”
Use of open, public online searches to gather information about a penetration-testing target.
“penetration testers often use OSINT, which is just gathering data on a target through open, public searches online”
“your OSINT can find you some of those entry points”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Christopher Hadnagy | Explicit | 69 |
| incoming | USES | The Innocent Lives Foundation | Explicit | 69 |
| incoming | USES | Brian Halbach | Explicit | 95 |
| incoming | USES | Jonathan Studebaker | Explicit | 95 |
| incoming | INVOLVES | piracy in the Horn of Africa | Explicit | 122 |
| incoming | USES | GandCrab | Explicit | 126 |
| incoming | USES | REvil | Explicit | 126 |
| incoming | USES | Bryan Hance | Explicit | 153 |
| incoming | USES | Conor Freeman | Explicit | 154 |
| incoming | USES | Hieu Minh Ngo | Explicit | 162 |
| incoming | USES | Maxie Reynolds | Explicit | 166 |
Christopher Hadnagy USES OSINT
Chris and Ryan used open-source intelligence to learn that the Jamaican bank was undergoing an audit and to prepare their pretext.
Explicit Confidence 99% · Christopher Hadnagy EP 69 Details
“We had done a lot of OSINT and we found that the bank was undergoing an audit”
The Innocent Lives Foundation USES OSINT
Jack says people at the foundation use OSINT and hacking skills to help authorities identify child predators or human traffickers.
Explicit Confidence 98% · Jack Rhysider EP 69 Details
“people use OSINT and hacking skills to try to help authorities find and capture child predators or human traffickers”
Brian Halbach USES OSINT
Brian says they conducted OSINT while mapping the facilities.
Explicit Confidence 99% · Brian Halbach EP 95 Details
“Yeah, we did a bunch of OSINT”
Jonathan Studebaker USES OSINT
Jonathan describes OSINT as a major part of their reconnaissance, including reviewing employee social media and company websites.
Explicit Confidence 99% · Jonathan Studebaker EP 95 Details
“You know, so, OSINT is a huge piece”
piracy in the Horn of Africa INVOLVES OSINT
Lisa says Somali pirates conducted OSINT to identify ships and plan attacks.
Explicit Confidence 98% · Lisa Forte EP 122 Details
“they were doing OSINT”
GandCrab used open-source information about companies’ profits and turnover to select lucrative targets.
Explicit Confidence 98% · Jack Rhysider EP 126 Details
“to figure that out, GandCrab did some OSINT.”
REvil affiliates used OSINT to choose targets before seeking access to their networks.
Explicit Confidence 98% · Will EP 126 Details
“It would start with the OSINT, it would start with picking a target”
Bryan Hance USES OSINT
Bryan describes using open-source intelligence to identify the seller, his contacts, locations, and supply chain.
Explicit Confidence 99% · Bryan Hance EP 153 Details
“I refer to this guy as the OSINT pinata, ‘cause the minute you poke at him, literally everything falls out.”
Conor Freeman USES OSINT
Conor identifies his main role in the group as pre-attack OSINT, finding and profiling people with cryptocurrency.
Explicit Confidence 99% · Conor Freeman EP 154 Details
“my role was really the pre-attack OSINT”
Hieu Minh Ngo USES OSINT
Hieu used OSINT to compile a list of U.S. data brokers.
Explicit Confidence 99% · Hieu Minh Ngo EP 162 Details
“doing lots of OSINT to get me a list of all the data brokers in the US”
Maxie Reynolds USES OSINT
Maxie used open-source intelligence to learn about targets and identify possible entry points.
Explicit Confidence 96% · Jack Rhysider EP 166 Details
“penetration testers often use OSINT, which is just gathering data on a target through open, public searches online”