Skip to content

OSINT (Open-Source Intelligence)

Definition

Intelligence gathered from publicly available sources without special legal authority. In social media investigation, OSINT covers all content visible to any user: public posts, profile information, follower/following lists, public groups, and publicly accessible metadata.

Legal basis
Publicly available information, no special legal authority needed
Social media scope
Public posts, profile data, public metadata, follower lists
Common uses
Asset tracing, suspect identification, timeline building
Excludes
Private messages or content requiring a warrant or login access

Common questions

What is the main limitation of OSINT compared to a lawful data request?+

OSINT only reaches content the platform or subject has made publicly visible, so private messages, deleted content, and non-public metadata such as IP login history remain inaccessible without a warrant or a formal request to the platform.

How do investigators verify that OSINT findings are accurate rather than misleading?+

They cross-reference multiple independent sources, check account creation dates and activity patterns for signs of fabrication or impersonation, and avoid relying on a single unverified post, since public social content can be staged, deleted, or spoofed.

Related terms

Account Attribution
The process of linking a pseudonymous or anonymous online account to a real-world identity. Methods include IP log analysis, device fingerprinting, cross-platform...
Asset Tracing
The forensic process of following funds or property from a fraudulent source through subsequent transactions, corporate structures, and jurisdictions to locate where...
Bank Reconciliation Analysis
The systematic comparison of bank statements against internal ledgers and third-party transaction records to identify unexplained credits, diverted payments, or missing entries.
Beneficial Owner
The natural person who ultimately owns or controls a legal entity or arrangement, as distinct from the nominee or registered owner. Anti-money-laundering...
Forensic Capture
Tool-based documentation of online content that records the URL, timestamp, and page hash alongside the visible content. Preferred over manual screenshots in...
Freezing Injunction
A court order, often called a Mareva injunction, that prevents a defendant from moving or disposing of assets up to the value...
MLAT (Mutual Legal Assistance Treaty)
A bilateral or multilateral treaty framework through which countries agree to provide legal cooperation in criminal investigations, including compelling disclosure of evidence...
Preservation Request
A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...
Shell Company
A legal entity with no genuine business operations, created to receive fraudulent payments. In vendor fraud, the fraudster controls the shell and...
Stored Communications Act (SCA)
Part of the US Electronic Communications Privacy Act (18 U.S.C. 2701-2712) that governs government access to stored electronic communications and data. It...

Explained in these topics

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.