AI FOR OSINT COURSE

• Instructor intro
• Course premise & philosophy
• Course structure & tool setup
• Assignments & final project overview

Discover how modern OSINT investigations work by combining traditional intelligence methods with AI-powered workflows. Learn to assess digital attack surfaces while navigating the ethical boundaries of AI-assisted investigations.

• OSINT & the traditional intelligence cycle
• Intro to Gen AI & ML in digital investigations
• Attack Surface Monitoring
• "Human in the Loop" necessity & ethical boundaries

Build a secure, investigation-ready OSINT environment and learn the operational tradecraft behind safe, effective intelligence gathering. Explore AI-powered research personas, automation tools, and professional OPSEC practices.

• Secure, AI-powered investigation environments.
• Sock puppet accounts & operational security (OPSEC) risk
• AI tools, synthetic persona generators & credible research personas
• OPSEC: Transitioning from manual to automated tradecraft
• Intro to NotebookLM
• Demo: Navigating a cloud-based lab environment

Assignment #1: Lab Configuration & OPSEC Verification

Automate large-scale intelligence collection and organise findings into actionable threat intelligence. Learn how AI streamlines OSINT workflows and supports MITRE ATT&CK mapping.

• AI operators & custom scripts for data scraping
• Aggregating massive volumes of unstructured text data
• Intro to the MITRE ATT&CK Framework
• Demo: Prompt-driven workflow

Understand the legal and ethical frameworks that shape modern OSINT investigations. Learn how to collect, document, and assess intelligence while remaining compliant and defensible.

• Conceptual overview of privacy laws: GDPR/RIPA or CCPA/CFAA
• Navigating UK privacy laws during digital investigations
• Compliance for penetration testing vs. threat intelligence
• Deploying AI tools compliantly
• Structuring defensible, unbiased evidence logs
• Case Study: Information Commissioner's Office (ICO) vs. Clearview AI

Assignment #2: Data Collection & TTP Mapping

Learn to identify AI-generated and manipulated media using professional forensic tools. Evaluate digital evidence and produce reliable authenticity assessments with confidence.

• Analysing video/audio metadata with AI tools
• Detecting synthetic content & AI hallucinations
• Verifying the authenticity of digital media in real-time
• Workshop: Verifying the authenticity of suspect media files

Verify where and when digital content was created using AI-powered geolocation techniques. Combine mapping, satellite imagery, metadata, and visual clues to validate evidence.

• Automating visual verification with AI mapping tools
• Satellite imagery analysis
• Shadow calculations for time & location pinpointing

Assignment #3: Visual Media Triage

Explore how AI uncovers hidden social networks, coordinated influence campaigns, and bot activity. Learn to map online relationships and evaluate intelligence with analytical confidence.

• Using ML to map complex social networks
• Tracking influencer echo chambers
• Identifying coordinated bot activity across platforms
• The Admiralty System

Turn online conversations into actionable intelligence by analysing sentiment, emerging threats, and disinformation campaigns. Learn how AI helps organisations detect risks before they escalate.

• Deploying AI sentiment analysis on public chatter
• Monitoring brand reputation & hostile narratives
• Assessing physical or digital threat risks
• Case Study: 2016 Brexit referendum

Assignment #4: Digital Footprint & Sentiment Mapping

Transform complex datasets into clear intelligence visualisations that expose hidden connections. Learn to map relationships between people, organisations, infrastructure, and threat actors.

• Visualising complex relationships between threat actors
• AI mind-mapping tools for tracking
• Tracking shell companies & illicit financial flows
• Workshop: Data visualisation & intelligence synthesis

Understand how intelligence professionals leverage deep and dark web reporting without compromising legal, ethical, or operational standards. Learn how to assess exposure signals and interpret threat intelligence safely.

• Surface web, deep web, & dark web
• Legal, ethical, & OPSEC boundaries
• Tor Browser & anonymisation technologies
• Third-party monitoring services & exposure signals
• Interpreting sanitised dark web intelligence reports

Assignment #5: Entity Link Analysis

Convert technical findings into clear, decision-ready intelligence reports for both executive and operational audiences. Learn to communicate AI-driven insights that support effective incident response.

• Different types of cyber threat intelligence
• Actionable intelligence reports for distinct audiences
• Translating complex AI data for corporate boards
• Mapping MITRE ATT&CK findings & threat actor behaviors

Final Project: The Executive Threat Briefing

Explore how OSINT powers intelligence across government, cybersecurity, and corporate security. Discover career pathways, industry expectations, and where your skills fit within the evolving intelligence landscape.

• The current landscape of AI & OSINT roles
• Public sector vs. private sector
• Mapping specific titles
• Workforce frameworks

Build a professional OSINT portfolio that showcases your investigative skills while meeting legal and ethical standards. Prepare for technical interviews, portfolio reviews, and career opportunities in intelligence.

• Building a sanitised, legally compliant OSINT portfolio
• Interview prep & navigating technical assessments
• Continuous learning, networking, industry-recognised certifications
• Breakout Room Session: Portfolio review & interview readiness

Present and defend a professional executive threat briefing while receiving expert feedback. Explore emerging AI trends and discover how the future of OSINT is reshaping intelligence investigations.

• Team presentations: Executive Threat Briefing
• Peer & instructor feedback sessions
• Emerging AI trends in the intelligence community