Reviews 4,2
Reviews 4,5
Open Source Intelligence (OSINT)
Open-source data holds the traces of nearly every attack, fraud attempt, and security gap. Open Source Intelligence (OSINT) unlocks these sources systematically – using proven research techniques and modern analytical tools for cybersecurity, forensics, and threat analysis.
Key topics
- Systematically access and extract information from the internet.
- Evaluate data on individuals, organisations, and network infrastructure.
- Know and apply specialised OSINT tools and platforms.
- Explore and document domains, DNS structures, and networks.
- Uncover and assess attack surfaces and social engineering patterns.
- Critically assess, validate, and cross-check sources.
- Understand and apply legal frameworks and organisational obligations.
Prerequisite
Those who are comfortable with search engines, web services, and digital workflows can start right away.
Target group
This training is designed for everyone working in security, compliance, or investigative contexts who wants to use open sources professionally for analysis and decision-making.
Those who apply OSINT effectively spot risks earlier, analyse threats more precisely, and act on reliable, verifiable data.
Course Content
OSINT – Foundations and Getting Started
- Understanding OSINT – methods and concepts at a glance.
- Applications in cybersecurity, investigations, and analysis.
- Distinguishing OSINT from threat intelligence and traditional reconnaissance.
- Ethical principles and legal frameworks in OSINT.
- Frameworks and approaches: OSINT Framework and IntelTechniques.
Setting up an OSINT Lab
- Build and configure a secure working environment.
- Deploy virtual machines: Kali Linux, Tails, and Whonix.
- Maintain anonymity with VPNs, Tor, and ProxyChains.
- Key browser extensions and plugins for OSINT work.
Search Engines and Google Dorking
- Use search engines strategically: Google, Bing, Yandex, DuckDuckGo.
- Run advanced queries with the Google Hacking Database (GHDB).
- Extract data from cached and archived pages (Wayback Machine).
- Locate hidden and unindexed content online.
Analysing Social Networks (SOCMINT)
- Systematically evaluate information from Facebook, Twitter, LinkedIn, and Instagram.
- Extract and analyse metadata from posts and profiles.
- Collect and process social media data in an automated way.
- Map social networks and visualise connections.
Email Addresses and Usernames
- Research and attribute email addresses.
- Track and analyse usernames across platforms.
- Analyse email headers to trace origins and sources.
- Recognise and classify fake and disposable email addresses.
Analysing Websites and Domains
- Run WHOIS queries and explore DNS structures.
- Examine and document subdomains and server infrastructure.
- Identify web technologies in use (Wappalyzer, WhatWeb).
- Track changes and data leaks on websites (Wayback Machine, Visualping).
Exploring the Dark Web and Deep Web
- Understand the structure and differences between the dark web and deep web.
- Access and navigate .onion sites securely using Tor.
- Systematically search dark web marketplaces and forums.
- Use specialist dark web search engines to gather information.
Geolocation and Image Analysis
- Run reverse image searches and identify origins.
- Read and evaluate metadata from image files.
- Determine locations via OpenStreetMap, Google Earth, and Sentinel Hub.
- Use satellite and aerial imagery for analysis and investigations.
Evaluating Video and Audio Files
- Extract and analyse metadata from video and audio files.
- Search videos in reverse and assign relevant frames.
- Identify background sounds and locations from audio recordings.
- Fact-check and verify the authenticity of multimedia content.
Investigating People and Identities
- Systematically search public records and data breach databases.
- Trace online identities and digital footprints.
- Recognise behaviour patterns and assess social engineering risks.
- Gather and classify information about threat actors.
Cyber Threat Intelligence with OSINT
- Identify and attribute threat actors and criminal groups.
- Detect and track data breaches and leaks early.
- Analyse malware and cybercrime activity, including with VirusTotal.
- Apply OSINT to incident response and active threat hunting.
Reporting and OPSEC
- Organise and document OSINT findings in a structured way.
- Create and present clear, actionable OSINT reports.
- Protect investigator identities and maintain operational security (OPSEC).
- Scale and accelerate data collection with automation tools.
Up to 100% funding for your continuing education
Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.
Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.
Who uses OSINT?
- OSINT is used by security analysts, investigators, compliance teams, journalists, and risk managers. Structured research also delivers valuable insights in areas such as recruitment, brand monitoring, and due diligence.
What should I bring to the course?
- Confidence with search engines, web services, and digital platforms is enough. Knowledge of IT security, data protection, or research methods is helpful but not required. Python skills can open up additional possibilities, but are not a prerequisite.
What tools are covered in the training?
- The training covers search operators, WHOIS queries, DNS tools, and platforms such as Maltego, Shodan, and SpiderFoot. Combining multiple sources delivers far more precise results than standard search engine queries.
Which fields is OSINT relevant to?
- OSINT is applied in cybersecurity, threat intelligence, compliance, incident response, and corporate security. It also supports candidate screening, supplier assessments, and company research.
What do typical OSINT tasks look like?
- Common tasks include analysing attack surfaces, tracing digital footprints, and verifying information about companies or individuals. OSINT also enables risk assessment before investments, partnerships, or security projects.
Why is OSINT growing in importance?
- The volume of publicly available data is growing rapidly and increasingly reveals threats, risks, and market developments. Those who evaluate open sources systematically make better decisions – faster and on a broader basis.
What are the biggest challenges in OSINT?
- The main challenge is the quality and reliability of information: data can be outdated, incomplete, or deliberately falsified. Source validation, cross-checking, and thorough documentation are therefore essential.
What professional benefits does OSINT offer?
- OSINT skills are particularly in demand in cybersecurity, compliance, and corporate security. Those who use open sources professionally open up broader opportunities in investigation, risk analysis, and strategic security.
