
Open Source Intelligence Gathering for Professional Investigators
A Two-Day Hands-On Masterclass in Essential Cyber Tools and Defensible Data Acquisition.
​
Day 1: Foundations, Footprints, and People Tracking
​
The first day focuses on protecting the investigator and exploiting the most common starting points: names, locations, and usernames.
​
-
Module 1: Operational Security (OpSec) & Environment Setup
-
Setting up clean, isolated investigation environments (virtual machines, burner accounts).
-
Understanding how PIs accidentally burn their cover (IP leaks, browser fingerprinting).
-
-
Module 2: Advanced Search Techniques & People Hunting
-
Moving beyond basic search engines (search operators, cached data, and historical archives).
-
Public records, voter registries, and deep-web directory scraping.
-
-
Module 3: Username & Email Pivot Points
-
Reverse email and phone lookups using open-source correlation tools.
-
Tracing usernames across hundreds of platforms simultaneously to map an subject's digital footprint.
-
​
-
Day 2: Social Media, Media, and Corporate Analysis
​
The second day shifts to deeper lifestyle analysis, asset tracing, and turning raw data into report-ready evidence.
-
Module 4: Social Media Intelligence (SOCMINT)
-
Extracting hidden data from Facebook, Instagram, LinkedIn, and TikTok without needing a direct connection.
-
Analyzing friends lists, networks, and hidden interactions.
-
-
Module 5: Imagery & Geospatial Intelligence (GEOINT)
-
Reverse image searching and verifying authenticity (spotting fakes or altered evidence).
-
Geolocation techniques: Using shadows, weather patterns, and street furniture to pinpoint exactly where a photo was taken.
-
-
Module 6: Corporate Intelligence & Asset Tracing
-
Investigating company structures, directors, and hidden beneficial owners.
-
Introduction to domain and website analysis (Whois data, historical DNS records) for corporate fraud cases.
-
-
Module 7: Evidentiary Capture & Reporting
-
Preserving digital evidence so it is legally defensible (hashing, timestamps, and chain of custody).
-
