domains / families / security / collecting-open-source-intelligence

collecting-open-source-intelligence

separate

'Collects and synthesizes open-source intelligence (OSINT) about threat

When to use

• Investigating external infrastructure associated with a phishing campaign targeting your organization
• Enriching threat actor profiles with publicly observable indicators (WHOIS, ASN data, SSL certificates)
• Conducting authorized attack surface discovery to understand your organization's external exposure

When not to use

• Active scanning against targets without explicit written authorization

Skill page

Source