7 KEYS TO USING OSINT EFFECTIVELY
EFFECTIVE AND SAFE
OSINT
Open Source Intelligence
Julián GL
This work is under aCreative Commons Attribution License
NonCommercial-ShareAlike 4.0 International.
Hello, my name is Julián GL and I am going to give you 7 keys to achieve
OSINT effectively and securely.
My life has been related to the world of the Internet since I
Connections worked with 56k modems.
I am not an expert in Computer Science, nor do I intend to be.
I have been a member of the law enforcement agencies for 25 years.
Furthermore, I am a developer, designer, and page administrator.
WordPress web. I have knowledge in SEO, SEM, and marketing.
digital.
I am the creator of [Link]
I have been training in OSINT techniques for a year, mainly in
self-taught. I warn you, it's addictive.
I completed my last training under the guidance of Vicente.
Aguilera, creator of Tinfoleak.
My next training goal is to become an Expert in Analysis of
Intelligence.
It has taken me many years of research, and I would have
liked to find a place where I can find information
free quality.
I hope [Link] is that place for you.
TABLE OF
CONTENT
INTRODUCTION TO OSINT.........................................1
KEY 1: TOOLS ..........................................................3
KEY 2: ANIMATION............................................................4
METHODOLOGY
KEY 4: PORTABILITY ...........................................................5
KEY 5: EVIDENCES ...............................................................6
KEY 6: ORGANIZATION ..........................................................7
KEY 7: REMOVAL..............................................................8
INTRODUCTION
An OSINT
Open Source Intelligence (OSINT), the translation would be intelligence
with open sources. Although I am going to talk to you about open sources.
on the Internet, they do not have to be just on the Internet.
This concept refers to the collection of information from
using publicly accessible sources such as the internet, networks
social networks, websites, forums, etc.
OSINT is a very powerful tool for collecting all kinds of
information. It can be used by journalists, researchers
private, police, companies, etc.
OSINT is a type of intelligence that is structured from the
collection and processing of information.
Some of the techniques used is the one known as Google
Hacking, in which, using some commands or operators, one
it can obtain information that if it were done in a way
it would normally cost to find her.
OSINT is gaining a lot of importance in companies and in the
research.
The search for information with OSINT must meet the following
phases, called Intelligence Cycle:
Sources of information: The first phase will be to identify that
sources we are going to use for obtaining.
Acquisition: It is the obtaining of information in the various
public sources and what tools we will use.
Processing: It is to process the information found with the use
of different methodologies.
Analysis: It is to analyze the obtained information and find patterns.
of search according to the source of the information. The analysis
it can be systematized or carried out by an OSINT professional.
Intelligence: It consists of presenting the information that is
effectively find through diagrams, flows,
diagrams, software, drawings. Intelligence allows for extraction
conclusions about the obtaining of information
2
KEY 1: TOOLS
There are hundreds of tools for conducting OSINT. I haven't
found one that works for everything. Depending on your needs you will have
to find the most suitable tool.
Like any professional, it is important that you have your
tool collection, if possible, organized by
functionality. Once you start with the data collection work
of information, having to search for tools for it, and
finding out how it works will take very valuable time from you
you could be dedicating yourself to research.
There are hundreds of tools for
perform OSINT. I have not found one
that serves for everything
I leave you a list of repositories so you can start making your
selection
• [Link]
• [Link]
• [Link]
• [Link]
• [Link]
• [Link]
• [Link]
• [Link]
• [Link]
3
KEY 2: ANIMATION
In all OSINT work, it is advisable to take security measures.
to avoid compromising our privacy.
An OSINT specialist must not only know how to obtain
information, but how to protect yours. A task not easy, I tell you
I can assure you. We will always leave traces of the steps that
demos, it is inevitable.
It is best not to use our personal data to carry out these.
tasks.
It is ideal to have email accounts, social media profiles, and phone numbers.
phone exclusive for OSINT work.
Do not use our phone number or personal email to register.
services that we will later use for the research, in this way
we will avoid leaving a large digital footprint with our actions,
leaving our much treasured personal data exposed.
We will always leave footprints of the
the steps we take, it is inevitable
I leave you some services that will help you with the task of concealment.
on the Internet:
• TOR Browser– Anonymous browser
• Tails - Operating System
• Whonix - Operating System
• TunnelBear - VPN
• Fakenamegenerator - Identity Generator
• TemporaryFreeEmail - Temporary Emails
• Protonmail - Encrypted email
• Sharpmail - Anonymous Emails and SMS
• Elfqrin - Credit Card Generator
• Mailinator - Temporary Emails
4
KEY 3: METHODOLOGY
Before starting to conduct OSINT, it is advisable to pause to
think and study what method and tools we are going to need
to obtain the information we need.
This will save us potential time losses from starting from
precipitated form.
Just like to assemble a piece of furniture, we need a screwdriver,
hammer, gloves, and wood glue, to do OSINT
we will need to have predefined the tools that we will use and
the method that we will use.
It is advisable to stop and think and
study what method and tools
we are going to need
In the section ofOSINT Guidesfrom my website, you have some guidelines
that can make this job easier for you.
KEY 4: PORTABILITY
It is likely that you have your own PC, and that you carry out from there
always your work, but sometimes you will need to work from
other computers, and the synchronization of our data can
make our work and mobility much easier.
For this type of situation, a USB flash drive comes in handy.
that we have certain tools installed in order to
to work on multiple computers.
5
The synchronization of our data
can make our work much easier and the
mobility
Some of the tools we can use in a memory
USB without needing to install it are:
• TOR Browser
• Tinfoleak
• Tails - Operating System
Another option you can consider is to synchronize the
configuration of your usual browser with all computers
that you use, so that when you change computers, all your favorites,
extensions, passwords, and history will be synchronized.
I left youothis guideso you can see how to configure it in Google
Chrome.
KEY 5: EVIDENCES
It is important that you gather evidence of the information.
that you find, so that, in case it is
removed by the creator, you may have a copy of the
the same.
The collection of evidence must be done with the utmost speed.
for what I was telling you earlier.
It's not uncommon to come back the next day to look for the information and find that it
has been removed.
To do this, we will take screenshots, download the
webs to our PC, or even, if necessary, we will record the
screen.
6
The collection of evidence must
to do so with the utmost speed
For this type of tasks, there are tools that make the work easier:
• Osirtbrowser - OSINT Browser
• Page2images - Web Capturer
• Web2pdfconvert - Web Capture
• Pdfmyurl - Web Capture
• Freetsa - Time Seal
• Egarante - Web Certification
• Webcopy - Download Complete Websites
• Instagram multimedia download
• FireShot - Complete web capture
• Getgreenshot - Screen capture
KEY 6: ORGANIZATION
A researcher must be organized, both before and during.
In key 1, I was telling you how important it is to have your collection.
of tools. Similarly, in key 5 we have seen that the
the gathering of evidence is also very important.
All the information we are obtaining is necessary to keep.
arranged with the aim of being able to analyze it
appropriate and save us time and loss of information.
To do this, you can use a worksheet in Excel where
You can start noting all the relevant data for you.
research.
A researcher must be organized,
as much before, as during
7
A worksheet in Excel could be divided into the following
secciones:
• Account and profile data for the investigation
• Research objective
• Data we have available
• Research Object Sheet
• Tools and steps that we will take
• Obtained evidence
• Research timeline
• Mind map
KEY 7: ELIMINATION
Once the investigation is finished, we must proceed to delete
our digital footprint created for it.
Remember that you should not use your personal profiles or number
telephone.
It is likely that we have created email accounts, as well as
profiles on social networks, and that we have interacted with other people.
It is important to note all the accounts and profiles that we have
created, to proceed to its elimination at this stage.
I leave you direct links to the account deletion section of some.
services, this will help you a lot, because I assure you that some
they are quite difficult to find:
• Facebook
• Google
• Twitter
• Instagram
• LinkedIn
• Pinterest
• Microsoft
8
I hope this book will be useful for your work as a researcher.
Feel free to contact me for any questions,
suggestion or contribution, which will be welcome. Keep in mind that
I am also learning.
As a teacher once told me:
I come here to learn with you
Julián GL
Web:Invalid input, please provide text for translation.
[Link]@[Link]
Twitter:Invalid input. Please provide a text for translation.
Facebook:[Link]
This work is subject to the Attribution-NonCommercial license.
Creative Commons Attribution 4.0 International. To see
a copy of this license, visit
[Link]