SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsThis blog post shares how to find OSINT resources and communities, practice techniques to build your skillset, and how to find a job in OSINT.
Even a basic Google search for "what is OSINT" yields a number of search results. Open Source Intelligence (OSINT) is an ever-evolving field of work, so it’s essential to keep up-to-date with new techniques and tools.
If you are new to OSINT, you may have questions about what it is, who uses it, and how you can learn more about it.
OSINT is intelligence produced by collecting, evaluating, and analyzing publicly available information with the purpose of answering a specific intelligence question. Read this previous blog post titled “What is OSINT?” to learn the basics of OSINT.
When someone is interested in learning about OSINT, they typically pose these general questions: how to acquire knowledge about OSINT, how to remain current with emerging tools and techniques, and lastly, how to secure a job in the OSINT field.
It may feel like a daunting task to enter the world of OSINT, but this blog post will show you various methods to find OSINT resources and communities. It will also help you figure out how to practice some techniques, build your skillset, and continue to learn. It even talks about how you can get a job in OSINT.
One way to keep up-to-date with OSINT content is getting online and onto platforms like Twitter
Use Twitter’s search bar to find OSINT-related content. Searching for terms such as OSINT or SOCMINT is a good way to find quick OSINT tips and links to recent OSINT articles. If your interest lies in privacy-related content, try searching for OPSEC (operational security), as well as keywords like privacy or security. These terms have all been used to share content pertinent to OSINT. The advantage of searching for keywords such as OSINT is that it lets you discover Twitter users who consistently share content about this subject.
If you like to read books, check out Rae Baker’s new OSINT book: Deep Dive: Exploring the Real-world Value of Open Source Intelligence. Rae Baker is a Senior OSINT Analyst who specializes in maritime intelligence, human intelligence, corporate reconnaissance, and U.S. sanctions research. This book offers in-depth information and practical insights into open-source intelligence.
There is also Michael Bazzell’s book called OSINT Techniques (10th Edition). Michael Bazzell is a well-known figure in the field of OSINT. He is a former FBI special agent who gained recognition for his expertise in digital investigation, online intelligence gathering, and privacy.
It’s important to remember that there isn’t one standard path to becoming an OSINT practitioner. Each person's journey will look different based on factors such as their work experience, geographical location, and the types of jobs available within their specific industry.
Consider and make a note of any courses you have taken related to internet research, writing skills, analytical writing, critical thinking, etc. This may assist you later on when you apply for an OSINT job.
Conduct online research and look for OSINT job descriptions. Make note of the qualifications for that job, then actively try to find roles that would help you gain that experience.
OSINT Jobs is an initiative by Lorand Bodo, who has created a database of OSINT jobs around the world. The site allows users to filter by country, experience level, job type, and OSINT area.
This blog post provides ideas for where you can find answers to your questions about finding more about the field of OSINT. Each person has their own methods to find information online and preferred method of learning. You may prefer reading blog posts, watching YouTube videos, or finding content by conducting your own searches. Remember, it’s vital to apply what you learn as it’s a great way to remember and continue to build your skill set.
Learn more about SANS Institute's Introductory OSINT course: SEC497 Practical Open-Source Intelligence (OSINT).
Ritu Gill is an Intelligence Analyst with 15 years of experience working with Canadian law enforcement, 12 of those years were with the Royal Canadian Mounted Police (RCMP). Her specialties include investigations and open-source intelligence (OSINT).
Read more about Ritu Gill