OSINT Fundamentals and Methodologies 3 â Questions and Answers
Question 1: Which search operator would an OSINT analyst use to find PDF documents hosted on a specific government domain?
- site:gov filetype:pdf (Correct answer)
- domain:gov type:pdf
- host:gov ext:pdf
- url:gov format:pdf
Correct answer: site:gov filetype:pdf
The Google dork 'site:gov filetype:pdf' restricts results to PDFs hosted on government domains, making it a precise tool for document discovery.
Question 2: What is the primary purpose of the 'Wayback Machine' in OSINT investigations?
- Monitoring social media in real time
- Accessing historical snapshots of websites that may have changed or been deleted (Correct answer)
- Tracking email open rates over time
- Mapping physical locations of web servers
Correct answer: Accessing historical snapshots of websites that may have changed or been deleted
The Wayback Machine (web.archive.org) stores historical snapshots of websites, allowing analysts to view content that has been altered or removed.
Question 3: An analyst identifies a username used across multiple platforms. Which tool category is MOST useful for automating cross-platform username searches?
- Packet analyzers
- Username enumeration tools (e.g., Sherlock, Maigret) (Correct answer)
- DNS lookup utilities
- Email header parsers
Correct answer: Username enumeration tools (e.g., Sherlock, Maigret)
Username enumeration tools like Sherlock or Maigret automatically check hundreds of platforms for a given username, accelerating cross-platform identity research.
Question 4: In the context of OSINT, what does 'data enrichment' mean?
- Encrypting collected data for secure storage
- Adding contextual information to raw data to increase its analytical value (Correct answer)
- Deleting duplicate records from a dataset
- Publishing findings to a public intelligence report
Correct answer: Adding contextual information to raw data to increase its analytical value
Data enrichment involves augmenting raw collected data with additional contextual informationâsuch as geolocation, social connections, or organizational affiliationâto make it more actionable.
Question 5: Which metadata field in a photograph is MOST commonly used for geolocation purposes in OSINT investigations?
- ISO speed rating
- Camera model
- GPS coordinates in EXIF data (Correct answer)
- File creation date
Correct answer: GPS coordinates in EXIF data
GPS coordinates embedded in a photo's EXIF metadata can pinpoint exactly where the image was taken, making it one of the most valuable metadata fields for geolocation.
Question 6: What is 'link analysis' in OSINT methodology?
- Checking broken hyperlinks on target websites
- Mapping relationships and connections between entities to reveal hidden networks (Correct answer)
- Analyzing the number of inbound links to a webpage
- Validating URLs before archiving them
Correct answer: Mapping relationships and connections between entities to reveal hidden networks
Link analysis maps relationships between entitiesâpeople, organizations, accountsâto visualize networks and identify key nodes or associations in an investigation.
Question 7: Which of the following scenarios represents a violation of OSINT ethical boundaries?
- Searching publicly available court records for a subject's name
- Using a sock puppet to befriend a target in order to extract private information (Correct answer)
- Viewing a public LinkedIn profile without logging in
- Searching a news archive for articles about a company
Correct answer: Using a sock puppet to befriend a target in order to extract private information
Creating a false persona to deceive a target into sharing private information crosses ethical and potentially legal boundaries, even if the resulting information was shared 'voluntarily.'
OSINT Fundamentals and Methodologies 3
Which search operator would an OSINT analyst use to find PDF documents hosted on a specific government domain?