- Let's begin by exploring open-source intelligence,
which is being used as a powerful set of tools
and techniques during the reconnaissance phase
of an assessment or a cyber attack.
Open-source intelligence, or OSINT,
refers to the process of collecting, analyzing,
and using information gathered
from publicly available sources.
These sources can include anything from newspapers,
social media, and online databases,
to publicly accessible government reports
and academic publications.
In this course, we are concentrating on the digital realm
of data and information availability,
or easier to say, we are focusing on the internet
as the biggest publicly available network.
Before we delve into our topic of OSINT,
I would like to mention other disciplines of gathering data
that are very well-known in the intelligence community.
First, SIGINT or signals intelligence,
which refers to the collection
and analysis of intercepted communications
and electronic signals from airplanes,
ships, satellites, and so forth.
Then, HUMINT or human intelligence,
which refers to information gathering
through human sources,
including interpersonal contact, interviews,
even espionage, to obtain information of interest.
Then MASINT, measurement and signatures intelligence,
which is the collection and analysis of data
derived from specific technical sensors
to identify and track unique physical characteristics
or signatures associated with targets
such as radar emissions, chemical compositions,
or seismic activity.
Lastly, IMINT or imagery intelligence,
which is the collection and analysis of visual images,
typically from satellite or aerial photography
to gather information about physical locations,
activities, and objects for intelligence purposes.
To tell you the truth, out of all the disciplines mentioned,
OSINT has the most significant advantages,
which I would like to address now.
The first advantage is the common availability of data.
An analyst can, without any extra effort,
gather large amounts of data in a short time window.
The second advantage would be lower risk,
and that is kind of logical to arrive at
because analysts that conduct OSINT investigations
are usually exposed to significantly less risk
than conducting investigations
in other intelligence disciplines.
To be more clear, an aircraft crew
that conducts terrain imagery in hostile environments
are definitely exposed to more risk than an analyst
who sits at his desk and goes through the materials online.
The third advantage I would like to address
is the price or cost effectiveness.
Unfortunately, everything revolves around money
and OSINT is also not excluded here.
Just think how easier and cheaper it is
to just use your computer
for information gathering and not a satellite
or an airplane in other intelligence disciplines.
Also, it is widely wrong to think
that the information is free.
For example, if you conduct research
using a subscription-based online newspaper,
you need to pay for that subscription, right?
Let's take it a step further.
You are looking at foreign press,
and maybe you will have to hire a translator.
This is just a very basic example for you
to get the idea of the price behind OSINT,
and the fourth advantage would be the legal simplicity,
usually, the governing law of the country you are based in.
Online information gathering usually does not need
any special approvals from different legal entities
to conduct research as opposed to,
for example, ear tapping, falling into SIGINT
as the type of intelligence.
Also, it is important to address operational security here
or OPSEC, which we will touch on
in the coming lessons of this course.