17. OSINT Techniques and Tools
OSINT enables intelligence gathering from public sources. This mind map covers the full methodology and toolkit used by investigators, researchers, and security teams.
Topics Covered
- OSINT framework categories
- Google dorking operators
- Shodan and Censys asset discovery
- Maltego relationship mapping
- theHarvester email and domain recon
- Social media intelligence (SOCMINT)
- Dark web OSINT
- WHOIS, DNS, certificate transparency
- Facial recognition and reverse image
