OSINT Data Collection & Aggregation Tools 3

Question 1

Which OSINT tool is specifically designed to scrape and aggregate data from social media platforms using API-based collection?

Accepted Answer

Twint

Answer

Twint is an advanced Twitter scraping tool that collects tweets, followers, and user data without requiring API authentication.

Question 2

What is the role of 'pipelines' in the OSINT data aggregation workflow?

Accepted Answer

They automate the flow of collected data through transformation, enrichment, and storage stages

Answer

Pipelines automate the sequential or parallel processing of OSINT data—parsing, normalizing, enriching, and storing it—reducing manual analyst effort.

Question 3

In the context of OSINT tools, what is a 'data enrichment' step?

Accepted Answer

Adding contextual information (e.g., geolocation, threat scores) to raw indicators

Answer

Data enrichment appends additional context—such as geolocation, WHOIS history, or threat intelligence scores—to raw indicators to increase their analytical value.

Question 4

Which tool is best suited for passive DNS historical lookups to track infrastructure changes over time?

Accepted Answer

PassiveTotal (RiskIQ)

Answer

PassiveTotal (now part of RiskIQ) aggregates passive DNS records historically, allowing analysts to see how domain-to-IP mappings have changed over time.

Question 5

What distinguishes 'active' data collection from 'passive' data collection in OSINT?

Accepted Answer

Active collection directly interacts with the target system; passive collection uses third-party sources without touching the target

Answer

Active OSINT involves direct interaction with the target (e.g., port scanning), while passive OSINT uses intermediary sources so the target is unaware of the investigation.

(OSINT) Open Source Intelligence Certification Practice Test

(OSINT) Open Source Intelligence Certification Practice Test

OSINT Data Collection & Aggregation Tools 3