Open-source intelligence (OSINT) is answering a question from information anyone can lawfully get to: public websites, records, archives, images and the metadata they carry. The tools in the registry make the collecting fast. What makes a finding hold up is the method around them, and that is what this guide is about. Read it before the investigation playbooks; each of them assumes it.
You will learn:
- The method: scope, collect, pivot, verify, record and report.
- Opsec for the investigator: what your own requests reveal and how to keep your work separate.
- Legal and ethical basics: purpose, personal data, and where to stop.
- Recording and reporting: a findings log someone else can check.
Then pick a playbook for what you have:
| You have | Playbook |
|---|---|
| A username | Username investigation |
| An email address | Email investigation |
| A phone number | Phone number investigation |
| A social media profile | Social media profiles |
| A domain | Domain investigation |
| An IP address | IP address investigation |
| A photo | Image verification and geolocation |
| A crypto address | Cryptocurrency address tracing |
Note
This guide is general information, not legal advice. When your case raises a legal question, ask someone qualified where you work before you collect.