01 OSINT Methodology
The discipline layer. Before collecting anything about a target, you need a plan: what question you are answering, which sources can answer it, how you will verify what you find, and where the legal boundaries are. This subcategory covers the process that every other OSINT topic depends on.
Scope
- Collection planning: intelligence requirements, scope definition, legal review.
- Source evaluation: primary vs secondary, reliability, bias, recency.
- Verification: corroboration, timeline analysis, geolocation cross-checks.
- Documentation: source logging, chain of custody, reproducibility.
- Tooling overview: search operators, OSINT frameworks, automation boundaries.
Files
| # | File | Format |
|---|---|---|
| 01 | OSINT Fundamentals | Two-track |
| 02 | Collection Planning | Two-track |
| 03 | Source Evaluation | Two-track |
| 04 | Verification and Documentation | Two-track |
All four files in this subcategory are published.
Format
Two-track (Offensive / Defensive) plus a ## Pentest and Red Team Application section. See the category README for the
full skeleton and the legal notes.
Related
- 02 People Search - identity resolution and public records.
- 03 Infrastructure OSINT - domains, certificates, cloud assets.
- 04 Social Media and Content - platform-specific collection.
- 05 Corporate and Business OSINT - registries, filings, employee mapping.
References
- OSINT Framework - https://osintframework.com/
- Bellingcat's Online Investigation Toolkit - https://bellingcat.gitbook.io/toolkit
- Berkeley Protocol on Digital Open Source Investigations - https://www.ohchr.org/en/publications/policy-and-methodological-publications/berkeley-protocol-digital-open-source-investigations
- NIST SP 800-53 (Privacy controls) - https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final