boltأكثر من 3000 أداة OSINT مجانية وأدلّة ومسرد مصطلحات

travel_exploreOSINTGuide

استكشف الأدواتarrow_forward

مرجع

مسرد OSINT

تعريفات واضحة وعملية لأهمّ مصطلحات وتقنيات واختصارات الاستخبارات مفتوحة المصدر — صفحة لكل مفهوم.

search

55 مصطلحًا

Core disciplines

8

Geospatial Intelligence (GEOINT)

Intelligence derived from imagery and geospatial data — the discipline of working with location.

Human Intelligence (HUMINT)

Intelligence gathered from human sources through interpersonal contact.

Imagery Intelligence (IMINT)

Intelligence produced by analysing imagery such as photographs and satellite pictures.

Intelligence Cycle

The structured process that turns raw information into finished, actionable intelligence.

Open-Source Intelligence (OSINT)

The practice of collecting and analysing publicly available information to produce actionable intelligence.

Priority Intelligence Requirement (PIR)

The specific question an intelligence effort is tasked to answer.

Signals Intelligence (SIGINT)

Intelligence derived from intercepted signals and electronic communications.

Social Media Intelligence (SOCMINT)

The branch of OSINT concerned with extracting insight from social-media platforms.

Techniques

10

Chronolocation

Determining when an image or video was captured from clues within it.

Digital Footprint

The total trail of data a person or organisation leaves across the internet.

Footprinting

Systematically mapping the online presence and infrastructure of a target.

Geolocation

Determining the precise real-world location where an image or video was captured.

Google Dorking

Using advanced search-engine operators to surface information that basic searches miss.

Pivoting

Moving from one piece of information to the next until a single clue becomes a full picture.

Reverse Image Search

Searching by an image rather than text to find where else it appears online.

Sock Puppet

A carefully maintained fake research identity used to investigate without exposing the analyst.

Username Enumeration

Checking a username across many platforms to map every account tied to it.

Web Scraping

Automatically extracting data from websites at scale.

Identifiers & artifacts

5

Domain Name System (DNS)

The system that maps human-readable domain names to internet addresses.

EXIF Data

Metadata embedded in image files, often including GPS coordinates and device details.

IP Address

A numerical label identifying a device or server on a network.

Metadata

Data about data — hidden information embedded in files, posts, and documents.

WHOIS

A public record of who registered a domain name and when.

Infrastructure

5

Attack Surface

The sum of an organisation's exposed systems and entry points visible to an outsider.

Autonomous System (ASN)

A block of IP addresses under the control of a single network operator.

Certificate Transparency

Public logs of issued TLS certificates that reveal an organisation's domains and subdomains.

Reverse DNS

Looking up the domain name associated with an IP address.

Subdomain Enumeration

Discovering the subdomains that belong to a domain to map its full footprint.

Data sources

7

Dark Web

Websites that require special software such as Tor to access.

Data Breach

An incident in which private data is exposed or stolen, often ending up in public leak databases.

Data Broker

A company that aggregates and sells personal information compiled from public and commercial sources.

Deep Web

Online content that exists but is not indexed by search engines.

Public Records

Government and official records that are legally accessible to the public.

Surface Web

The part of the web indexed by standard search engines.

Web Archive

A service that stores historical snapshots of web pages.

Verification & disinformation

7

Corroboration

Confirming a fact by checking it against multiple independent sources.

Deepfake

Synthetic media in which a person appears to say or do something they never did, generated by AI.

Disinformation

False information deliberately created and spread to deceive.

Misinformation

False information shared without the intent to deceive.

Provenance

The origin and history of a piece of content — where it first appeared and how it travelled.

Synthetic Media

Any content — image, video, audio, or text — generated or heavily altered by AI.

Verification

The disciplined process of confirming that information is genuine before relying on it.

OPSEC & privacy

5

Attribution

Determining who is really behind an anonymous account, campaign, or piece of infrastructure.

Compartmentation

Keeping separate identities and activities strictly isolated so they cannot be linked.

Doxxing

Publishing someone's private information online, usually to harass or intimidate.

Metadata Scrubbing

Removing hidden metadata from files before sharing them.

Operational Security (OPSEC)

The practice of protecting an investigation and the investigator from exposure.

Practice & analysis

8

Application Programming Interface (API)

A structured interface that lets programs request data from a service directly.

Capture The Flag (CTF)

A competitive exercise used to learn and sharpen OSINT skills.

Due Diligence

Researching a person or company to assess risk before a decision or transaction.

Facial Recognition

Technology that identifies or matches a person from an image of their face.

Link Analysis

Mapping relationships between people, accounts, and entities as a network graph.

Pretexting

Using a fabricated scenario to manipulate someone into revealing information.

Rate Limit

A cap on how many requests a service will accept in a given period.

Threat Intelligence (CTI)

Intelligence about cyber threats used to anticipate and defend against attacks.