1. Data collected from publicly available sources to be used in an intelligence context.
2. OSINT sources can be divided into six different categories of information flow:
   1. Media:
      1. Print Newspapers
      2. Magazines
      3. Radio
      4. TV
   2. Internet:
      1. Internal URLs:
         1. Netcraft's What's this site running? tool:
            1. https://news.netcraft.com
      2. Information removed from the Internet:
         1. Wayback Machine:
            1. https://archive.org
      3. Physical Locations:
         1. Google Earth:
            1. https://earth.google.com/web/
      4. Job Boards:
         1. https://www.linkedin.com
         2. https://www.dice.com
         3. https://www.indeed.com
         4. https://www.careerbuilder.com
         5. https://www.monster.com
      5. Employee and People Searches:
         1. Data Aggregation Brokerage Sites:
            1. Pipl
            2. https://pipl.com/
            3. Spokeo
            4. https://www.spokeo.com/
            5. Whitepages
            6. https://www.whitepages.com/
            7. People Search Now
            8. https://www.peoplesearchnow.com/
            9. Zabasearch
            10. https://www.zabasearch.com/
            11. Peoplefinders
            12. https://www.peoplefinders.com/
            13. Justia email finder
            14. https://virtualchase.justia.com/content/finding-email-addresses
         2. Social Networking Sites:
            1. Facebook
            2. https://www.facebook.com/
            3. Twitter
            4. https://twitter.com/
            5. LinkedIn
            6. https://www.linkedin.com/
            7. Google+
            8. https://plus.google.com/
            9. Pinterest
            10. https://www.pinterest.com/
      6. Financial Information:
         1. If an organization is publicly traded within the US, then it is registered with the Securities and Exchange Commission, and information about it may be viewed in the SEC's EDGAR Database. To view this information, visit the following URL:
            1. https://www.sec.gov/edgar/searchedgar/companysearch.html
         2. Other sites you can use to gather financial information about an organization are:
            1. Marketwatch
            2. https://www.marketwatch.com/
            3. Experian
            4. https://www.experian.com/
            5. Wall Street Consensus Monitor
            6. https://www.wallstreetconsensusmonitor.com/
            7. Euromonitor
            8. https://www.euromonitor.com/
      7. Google:
         1. For a list of useful Google hacking search rules, visit the following link:
            1. https://www.sans.org/security-resources/GoogleCheatSheet.pdf
      8. Other Tools:
         1. Maltego:
            1. Data analysis software used to examine the relationships between specified network nodes.
            2. Maltego has the ability to examine social network links, DNS records, whois information, search results, web pages, domains, and the Internet infrastructure.
            3. To download Maltego, visit this URL:
            4. https://www.paterva.com/web7/downloads.php
         2. FOCA:
            1. FOCA (Fingerprinting Organizations with Collected Archives) is a tool used mainly to find metadata and hidden information in the documents its scans.
            2. To download FOCA, visit this URL:
            3. https://github.com/ElevenPaths/FOCA
         3. Shodan:
            1. A search engine that lets the user find specific types of computers (webcams, routers, servers, etc.) connected to the internet using a variety of filters.
            2. Shodan is useful to hackers for finding unsecured targets, and useful to security professionals for identifying weaknesses in their own security policy.
            3. To use Shodan, visit this URL:
            4. https://www.shodanhq.com/
   3. Public Government Data:
      1. Public Government Reports
      2. Budgets
      3. Hearings
      4. Telephone Directories
      5. Press Conferences
      6. Websites
      7. Speeches
      8. Although this source comes from an official source they are publicly accessible and may be used openly and freely.
   4. Professional and Academic Publications:
      1. Journals
      2. Conferences
      3. Symposia
      4. Academic Papers
      5. Dissertations
      6. Theses
   5. Commercial Data:
      1. Commercial Imagery
      2. Financial and Industrial Assessments
      3. Databases
   6. Grey Literature:
      1. Technical Reports
      2. Preprints
      3. Patents
      4. Working Papers
      5. Business Documents
      6. Unpublished Works
      7. Newsletters