GIAC Strategic OSINT Analyst

Most questions are answered over time, not in one search. You set up monitoring across news, social platforms, forums and web archives, tune it to cut noise, and keep what you collect organized and preserved.

• Search operators and advanced search techniques
• Alerts and feeds for ongoing topics
• Social media monitoring and its limits
• Web archives and preserving pages as evidence
• Tuning monitoring to reduce noise
• Organizing and tagging collected material

You build A monitoring setup for one topic, with alerts, archived captures and a tagging scheme.

Some research requires an identity that is not your own, and that carries legal and practical risk. You learn when an organization may use one, how to build and compartmentalize it, and how to retire it without exposing the investigation.

• When a fictitious identity is justified and who approves it
• Legal and platform rules that apply
• Building a consistent and believable profile
• Compartmentalizing accounts, devices and networks
• Maintaining an identity over time
• Retiring an identity and handling the records

You build A governance policy and identity management log for an OSINT team’s use of fictitious identities.

Hidden services hold information that open searches cannot reach, and real risk for the person looking. You learn how these networks work, how to access them with care, what forums and marketplaces reveal, and what the law says about your conduct.

• How anonymity networks and hidden services work
• A safe research environment for dark web work
• Finding and assessing forums and marketplaces
• What leaked and traded data tells an analyst
• Legal limits on interacting with illegal material
• Recording and reporting findings responsibly

You build A dark web research protocol with environment setup, rules of conduct and a reporting template.

Public ledgers record every transfer, though not who stands behind an address. You read blockchain explorers, follow funds across addresses and services, and judge how strongly a trace supports a conclusion.

• How public blockchains record transactions
• Reading transactions in a block explorer
• Following funds across addresses and hops
• Clustering, exchanges and attribution limits
• Mixing services and what they do to a trace
• Presenting a trace with its confidence

You build A traced flow of funds for a sample case, with a diagram and a statement of confidence.

Radio signals around a site are open to anyone with a receiver, within the law. You learn what wireless networks, devices and broadcasts reveal about an organization or area, and where lawful observation ends.

• What wireless networks and devices broadcast
• Passive observation compared with active interaction
• Mapping wireless presence around a location
• Legal boundaries on interception
• Interpreting what signals say about a target
• Recording and reporting wireless observations

You build A wireless survey of a test site, with findings and a legal basis note.

Media is easy to fake and easy to misread. You apply practical and advanced techniques to find where an image was taken, when, by whom and whether it was altered, and learn what current tools can and cannot detect.

• Reverse image and video search
• Metadata and what it can tell you
• Geolocation from landmarks, terrain and shadows
• Checking for edits and synthetic media
• Audio verification techniques
• Documenting a verification so others can repeat it

You build A verification dossier for three media items, with the method and confidence for each.

AI can speed collection and sorting, and it can also invent. You use it for translation, summarization and entity extraction, with checks on each result, and keep clear what a model produced and what a source said.

• Where AI helps in the research workflow
• Translation and summarization with verification
• Entity extraction and link analysis support
• Hallucination and how to catch it
• Protecting sensitive material when using AI tools
• Recording AI use in the analytic record

You build An AI-assisted research workflow with a verification step for every model output.

Judgment depends on knowing whom to believe. You identify disinformation, grade sources and information with structured methods, and analyze groups and individuals in sensitive settings with care for accuracy and harm.

• Disinformation, misinformation and influence operations
• Source and information reliability grading
• Structured analytic techniques and cognitive bias
• The international environment and its context
• Analyzing sensitive groups and individuals responsibly
• Writing judgments with stated confidence

You build A source reliability assessment and analytic judgment on a contested claim.

Manual collection does not scale. You write Python that calls third-party APIs, runs locally and in the cloud, and monitors websites for change, with respect for terms of service and rate limits.

• Python essentials for data collection
• Calling APIs and handling responses
• Parsing web pages and structured data
• Continuous website monitoring and change detection
• Running collection in the cloud
• Storing, deduplicating and reporting results

You build A Python tool that collects from two APIs and monitors one website for change, with logging.

Some sectors and tasks call for particular techniques. You work with protected files you are authorized to open, analyze transportation data such as flight and ship movements, and find exposed credentials automatically so they can be reported and removed.

• Recovering access to protected files you are authorized to handle
• Aircraft and vessel tracking data
• Reading transportation records and schedules
• Finding exposed credentials in public sources
• Responsible reporting of exposures
• Choosing a technique for a sector problem

You build A short sector report that uses transport data and an exposure check, with a responsible disclosure note.

Turn a question into a finished product. You plan collection, gather and verify, analyze with stated confidence and write a brief that a decision maker can use, with every source recorded.

• Framing the question and the plan
• Collecting and verifying
• Analyzing and judging
• Writing and briefing
• Reviewing the work for bias and gaps

You build A finished open-source intelligence brief with sourcing, verification notes and confidence statements.