Different types of OSINT

Question 1

Open source data (OSD)

Answer 1

Data coming from primary sources
- Satellite images, telephone call data and metadata, datasets, survey data, photographs, and audio or video recordings that have recorded an event.

Question 2

Open source information (OSINF)

Answer 2

Data that has undergone some filtering first to meet a specific criterion or need;
- Secondary source
- Articles, dissertations, artworks, and interviews.

Question 3

Open source intelligence (OSINT)

Answer 3

Information that has been discovered, filtered, and designated to meet a specific need or purpose.

Question 4

Validated OSINT (OSINT-V)

Answer 4

OSINT with a high degree of certainty
- The data should be confirmed (verified) using a non-OSINT source or from a highly reputable OSINT source.

Question 5

Difference between data, information and knowledge

Answer 5

Data: A set of facts describing something without further explanation or analysis.

Information: Data that has been interpreted properly to give a useful meaning within a specific context.

Knowledge: Information, experience, and insight that has been learned or inferred after some experimentation.

Question 6

Types of grey literature

Answer 6

Gray information: Refers to other publications that cannot be obtained from traditional routes.

Gray literature: All publications that can be obtained from traditional bookstore channels

White: Anything published publicly for sale through traditional bookstore channels.

Ephemeral: This type is short-lived. E.g. flight schedules, draft versions, copies of invoices, advertisements, posters and tickets.

Gray: A mix of the previously mentioned two types.

Question 7

Information Gathering Types

Answer 7

Foot printing: Acquiring technical information about target IT infrastructure

Passive Collection: Your target knows nothing about your intelligence-collecting activities.

Semipassive: This traffic tries to resemble typical Internet traffic to avoid drawing any attention to your reconnaissance activities. The target can know that there is reconnaissance happening if they investigate the issue

Active Collection: Will look like suspicious or malicious behaviour and will leave traces. Intrusion detection system (IDS) or intrusion prevention system (IPS) will be alerted.