12 · OSINT and human factors

Depth: outline — expanded teaching material and exercises are still being written. See the content and coverage map.

Outcomes

Assess source reliability, reduce collection bias, and model how people and organizations shape an attack surface. Treat personal data as sensitive even when publicly reachable.

Lab: source triangulation

Choose a fictional organization supplied by the instructor. Record three independent public sources, publication dates, confidence, and contradictions. Do not collect real people’s private information or contact anyone.

Claim:
Source A / date / evidence:
Source B / date / evidence:
Contradiction:
Confidence and reason:
What would change my mind:

The skill is disciplined uncertainty, not accumulation of personal data.

Safety and scope

Use fictional organizations or instructor-provided public fixtures. Do not collect personal data, bypass access controls, contact subjects, or retain identifiers that are unnecessary for the learning claim.

Teach-back

Explain how independent sources, dates, contradictions, and confidence change the strength of an OSINT claim.

Evidence

Keep the three source URLs or fixture identifiers, publication dates, quoted fact in your own words, contradiction, and confidence rationale.