Public information, professional standards. The internet is not a source until you can say where it came from.
Eight lessons from the definition through workflow, search, social platforms, the deep web, and the version of OSINT that has to move while the event is still happening.
Read them in something like this order if you are new. If you already live in a browser with forty-seven tabs, start at the workflow — the tabs are not a method.
Intelligence from publicly available information: what counts, what does not, and why 'I found it online' is not a citation.
Media, internet, government data, geospatial, and the rest of the filing system — so you pick a source on purpose.
Search operators, public records, site history, imagery, and the legal line between research and trespass.
Plan, collect, process, analyse, report. A sequence you can defend when someone asks how you know.
Advanced search operators, used as a craft rather than a party trick. Legal, documented, and easy to do badly.
Social platforms as sources: what people publish, what the platform is doing to the record, and the ethics that travel with it.
The unindexed web is mostly ordinary databases. How to use them without confusing them with places you are not allowed to be.
Monitoring while an event is in motion: triage, verification under a clock, and the difference between a feed and a finding.
Continue your intelligence analysis journey with these recommended learning paths
Explore different types and categories of open-source intelligence
OSINT Types & CategoriesMaster advanced techniques for deep web research and analysis
Deep Web Research