OVERVIEW AND PRACTICAL SIGNIFICANCE OF OSINT TECHNOLOGIES

Abstract

OSINT (Open-Source Intelligence) is a methodology and process for collecting, analyzing, and interpreting information available from open sources. Such sources include the Internet in general, social networks, mass media, public registries, scientific publications, and other types of open sources. Unlike closed or classified data, the information used in OSINT is available to any user, which makes this type of intelligence legal and ethically acceptable if the relevant rules and regulations are followed.

Let's imagine that a large bank or telecommunications company monitors the "external" space for leaks that are directly related to them. CTI (Cyber ​​Threat Intelligence) analysts can use OSINT methods to proactively monitor specialized forums where attackers often publish stolen data. With the help of automated tools, including such as Maltego, specialists aggregate, structure and analyze the information found, identify the fact of a leak or the absence thereof and, if necessary, proceed to further measures to strengthen practices and the internal corporate information security system. Thus, the collection and analysis of data from open sources allows us to identify potential risks associated with counterparties, clients or competitors.