Read as
Last updated: April 29, 2026
Search operators, Shodan, Censys, subdomain enumeration, GitHub dorking, dark-web research, tradecraft OpSec.
Open-Source Intelligence (OSINT) is the practice of collecting information from publicly available sources — no hacking, no paid access required. For CTI analysts, it fills 60-80% of the picture at zero marginal cost. This module covers the tools, techniques, tradecraft, and operational security a researcher needs to do OSINT safely and effectively.
What OSINT covers
- Surface web — search engines, social media, company websites, press releases
- Technical data — DNS records, WHOIS, SSL certs, passive DNS
- Code / infrastructure — GitHub, Docker Hub, PyPI, cloud metadata
- Dark web / paste sites — forums, marketplaces, leaked data dumps
- Archive / historical — Wayback Machine, archive.today, cached versions
- Adjacent data — business records, court filings, regulatory disclosures
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants