Open-Source Intelligence, Explained
The information is already public. The skill is finding it before someone else does - and knowing whether it's worth anything when you do.
What's New & Updated
Understanding Large Language Models (LLMs) in OSINT
Refreshed: Understanding Large Language Models (LLMs) in OSINT
Foundations curriculum
Refreshed: Foundations curriculum
OSINT Case File Analysis: Identifying and Verifying Information
Refreshed: OSINT Case File Analysis: Identifying and Verifying Information
Mastering Information Requests for Open-Source Intelligence
Refreshed: Mastering Information Requests for Open-Source Intelligence
Understanding Contact Information in OSINT
Refreshed: Understanding Contact Information in OSINT
New lesson every week
What just landed — and what's cooking
Next up
theHarvester
Passive email and host collection from search engines and APIs — next up in the backlog.
One job · not a chatbot
Paste a target. Get a case file.
The archive stays the archive. This layer turns a collection question into a cited investigation plan using the OSINT 101 method — intelligence cycle, OPSEC, and real module links. Foundations are free.
Open the Case File PlannerLearning Modules
Structured modules that teach you how to actually think like an analyst — not just how to Google with attitude.
OSINT Fundamentals
Learn the basics of Open Source Intelligence gathering. Master the mindset of a digital bloodhound.
Kali Linux Mastery
Master the tools of the trade. From nmap to Maltego, become a command-line ninja.
Digital Forensics
Investigate digital crime scenes. CSI: Cyber edition, with more coffee.
Geolocation and Imagery OSINT
Master the techniques of determining locations from photos, videos, and descriptive information. From EXIF data to visual clues, learn to pinpoint locations with precision.
Social Media Intelligence
Uncover insights from social platforms. Learn to read between the posts and tweets.
Network Reconnaissance
Map networks like a digital cartographer. Discover the hidden topology of the internet.
People Profiling
Learn to gather information about individuals ethically. Become a digital detective.
Social Media Investigations
Master the art of analyzing social platforms for intelligence. Handle large volumes without losing your mind.
Dark Web Research
Learn to safely navigate and research dark web sources. Understand the landscape without becoming a cautionary tale.
Geospatial Intelligence (GEOINT)
Learn to analyze geographic data for investigations. Connect locations to patterns and patterns to people.
Domain and Website Investigations
Learn to investigate websites and domains for intelligence. Trace ownership, hosting, history, and connections.
Cryptocurrency Investigations
Learn blockchain analysis basics for tracing transactions, identifying wallets, and connecting crypto activity to real-world entities.
Digital Identity Analysis
Learn how to reconstruct a person's digital footprint from publicly available information across social media, professional networks, and public records.
OSINT Reporting and Presentation
Transform raw intelligence into actionable reports. Learn structured analytical techniques, source citation standards, and how to present findings to different audiences.
Breach Data Analysis
Learn how to search, analyse, and interpret data from known security breaches for OSINT investigations. Understand credential stuffing, exposure assessment, and timeline analysis.
Telegram OSINT Investigations
Master the art of gathering intelligence from Telegram - one of the most valuable OSINT sources for monitoring groups, channels, and user activity.
OSINT Methodology & Structured Workflow
Build a repeatable investigation workflow that keeps you organised, focused, and defensible.
Email & Username Intelligence
Trace email addresses and usernames across platforms to build identity profiles and connection maps.
Company & Organisational Intelligence
Research companies, their structure, leadership, and digital footprint using open sources.
Quick Briefings
Short reads. The longer tracks stay above.
Foundations curriculum
What a foundations curriculum covers: sources, search, verification, tools, and reporting.
Community Building and Engagement
Learn the fundamentals of building and engaging a strong online community around your OSINT efforts or projects. This lesson covers strategies for fostering interaction, managing discussions, and leveraging community feedback.
OSINT Resources
A curated list of essential Open Source Intelligence (OSINT) resources, tools, and platforms to enhance your investigative capabilities.
Sherlock: One Username, 400 Doors
Check where a username exists across hundreds of sites, then do the part the tool can't: decide which hits are actually the same person.
Holehe: Asking the Front Desk if You've Checked In
Find which sites an email address is registered on, why that works, and why some of these checks are one wrong flag away from emailing the person you're researching.
Numint: Start With the Digits, Not the Drama
Parse a phone number offline with libphonenumber, learn what presence checks are (and why this lesson never runs them), and keep phone OSINT on the safe side of the line.
Maigret: Sherlock With a Bigger Rolodex
Run a broader username search, read recursive pivots carefully, and treat every FOUND as a lead until you open it yourself.
WhatsMyName: The Username Checklist You Can Read
Use the WhatsMyName web UI and JSON rules to check a handle, then learn how detection rules actually decide 'exists'.
User Scanner: Username and Email in One Noisy Suitcase
Use User Scanner's username checks on your own handle, keep any email experiment on your own address, and leave recovery-style modules alone.
GoSearch: One Binary, Three Hundred Doorbells
Install a single Go binary, check your own username across hundreds of sites, and compare the hit list to Sherlock without drowning in Python packaging.
Aliens Eye: Another Username Net (Use It to Argue With Yourself)
Run a third username checker on your own handle and practise reconciling disagreements between tools instead of trusting the longest list.
Linkook: Follow the Links They Publish About Themselves
Trace linked social accounts and emails from public profile connections — tradecraft that beats brute-force username blasting when the subject helpfully links their own footprints.
Socialscan: Available Versus Exists (Not the Same Thing)
Query a few major platforms for username and email availability using socialscan — on your own identifiers only — and learn why 'taken' is not a full profile.
Mailcat: Which Providers Know That Nickname?
Check which mail providers accept a nickname as an address — using only nicknames you own — without Tor theatre or anything that notifies a human inbox on purpose.
FindMe: The Simple Username CLI (And When to Stop Collecting Tools)
Run a straightforward username search on your own handle, use it as a cross-check, and practise retiring redundant tools instead of hoarding them.
The Asset Library
Checklists, cheatsheets, search operator references, and templates — everything you need to run a clean investigation.
Browse ResourcesGet the Case Files
New lessons, occasional tradecraft notes. Founding members read the dossier first.
No spam, ever. Unsubscribe anytime. We trained our email bot better than that.