What Is OSINT? A Beginner’s Guide to Open Source Intelligence

OSINT (Open Source Intelligence) is the practice of collecting information lawfully from sources anyone can access, verifying and analysing it, and turning it into a meaningful conclusion. This guide explains what OSINT is, where it is used and how you can start from scratch.

What does “open source” mean?

“Open” means the information is not secret and is available to everyone: websites, social media posts, news, maps and satellite imagery, company registers, academic publications, forums, public datasets. Cracking passwords, accessing an account without permission or breaking into a closed system is not OSINT; these are outside the line both ethically and legally.

What makes OSINT valuable is not the information itself so much as bringing scattered pieces together and verifying them. A street sign, the direction of a shadow or a username may look meaningless alone, but with the right connections they can answer a question.

Where is OSINT used?

• Journalism and verification: Checking whether a photo or video was really taken at the claimed place and time.
• Cyber security: Mapping an organisation’s internet-facing attack surface and tracking leaked data and threat actors.
• Due diligence: Checking companies and claims before a partnership, a supplier deal or an investment.
• Academic and civil society research: Building evidence from open data in environmental, human rights and crisis research.
• Personal security: Seeing your own digital footprint and reducing what you share unnecessarily.

Branches of OSINT

Some abbreviations are common in the OSINT community. They come from formal intelligence disciplines but are used more broadly in the open-source context:

• GEOINT (geospatial intelligence): Finding locations from photos and videos, analysing maps and satellite imagery.
• SOCMINT (social media intelligence): Research through social media accounts, usernames and posts.
• IMINT (imagery intelligence): Examining the content and origin of images and whether they have been manipulated.
• FININT (financial intelligence): Company records, ownership structures and financial traces.

The intelligence cycle: how an investigation runs

Good OSINT work does not run on random searching but on a cycle:

1. Planning: Make the question you want to answer precise. “Where was this photo taken?” is a good question; “Everything about this person” is not.
2. Collection: Find sources relevant to the question and record what you find (link, date, screenshot, archived copy).
3. Processing: Organise the raw information: remove duplicates, translate, build a timeline.
4. Analysis: Connect the information, consider alternative explanations and verify every claim with at least two independent sources.
5. Reporting: Write down the conclusion, how you reached it and how confident you are.

Core skills for beginners

• Asking the right question: Break the investigation into small, answerable questions.
• Pivoting: Every piece of information you find is the key to the next search: a username leads to a profile on another site, a sign leads to a street.
• Keeping records: Note the source and time of every finding. Content can be deleted; archive important pages with the Wayback Machine or archive.today.
• A habit of verification: Never trust a single clue. One match can be a coincidence; three independent matches are much stronger.
• Learning methods, not tools: Tools change, shut down and new ones appear. What lasts is knowing which kind of source can answer which question.

Operational security (OPSEC)

You also leave traces while researching. Visiting a profile can notify the other side on some platforms, and an accidental like can expose your investigation. Use a separate browser profile for research, do not interact with the accounts you are looking into, and avoid researching while logged into your personal accounts.

Ethical and legal limits

Information being accessible does not mean you are free to use it for any purpose. In Türkiye personal data is protected by Law No. 6698 (KVKK), and the Turkish Penal Code makes it a crime to violate the privacy of private life (Art. 134) and to unlawfully record, pass on or disseminate personal data (Arts. 135–136).

To practise, use missions designed for that purpose instead of targeting real people. The CTF missions on OSINT TR were built exactly for this: realistic scenarios without touching anyone’s privacy.

Where to start?

1. Pick one area first. Finding locations from photos (GEOINT) is both fun and the fastest way to learn the core skills.
2. Get to know a few of the free tools on the Tools page: start with reverse image search, maps and street view.
3. Read our guide to finding a photo’s location.
4. Try what you have learned in the CTF missions. When you get stuck, change the question you are asking, not the method.