Blog, Yogosha Blog
OSINT 101: Understanding OSINT, its tools, benefits and risks | Yogosha
OSINT 101: Understanding OSINT, its tools, benefits and risks
**This article is originally published by our partner, Yogosha. Click here to view the original article.

OSINT stands for Open-Source Intelligence. It refers to the practice of collecting information from publicly available sources to be used for intelligence purposes. This can include information from the Internet, media outlets, social media platforms, and other publicly accessible databases.
Who uses OSINT?
OSINT is used by governments, law enforcement, intelligence agencies, private businesses, and other organizations. Malicious actors, such as ransomware groups also use it. It is essential to understand that OSINT is a powerful tool, but like all tools, it’s not inherently good or bad.
What is OSINT used for?
OSINT is generally used to support decision-making and risk management. Information collected through OSINT can be used to gain insights into security threats, market trends, or even the behavior of individuals and organizations.
It can also verify information obtained through other sources, such as human intelligence (HUMINT) or signals intelligence (SIGINT). This can help to increase the accuracy and reliability of the information and to ensure that it is not based on false or misleading information.
For governments, OSINT can be a crucial reconnaissance tool in times of war, as seen in the prominent role it plays in the conflict in Ukraine – both off the record and in the public sphere. Some Twitter accounts even specialize in revealing positions and equipment and have thousands of followers, such as @OSINTtechnical.
For the bad guys, OSINT allows the collection of valuable info about a potential target – social security number, social connections, a school where the kids go, compromising photos or statements left on the Internet, etc. Such information can fuel a future social engineering attack or provide blackmail material.
On-Demand Security Testing Platform
Run VDP, Penetration tests and Bug Bounty programs and oversee all vulnerability management strategies
The right test at the right time.
Contact the Yogosha Team for a free demo to explore their wide range of flexible security testing solutions.




