OSINT OSINT Methodology & Framework 3 — Questions and Answers
Question 1: In OSINT methodology, what is the difference between 'structured analytic techniques' (SATs) and unstructured analysis?
- SATs rely solely on automated tools; unstructured analysis is manual
- SATs use explicit, repeatable steps to reduce cognitive bias; unstructured analysis relies on intuition (Correct answer)
- SATs are only used in government intelligence; unstructured is for private sector
- SATs require classified data sources; unstructured analysis uses open sources only
Correct answer: SATs use explicit, repeatable steps to reduce cognitive bias; unstructured analysis relies on intuition
Structured analytic techniques impose explicit, documented steps on the analytical process to counter cognitive biases, unlike unstructured analysis which depends on individual intuition and judgment.
Question 2: What is 'Analysis of Competing Hypotheses' (ACH) used for in OSINT?
- Comparing the credibility of multiple source platforms
- Systematically evaluating multiple hypotheses against available evidence to identify the most supported conclusion (Correct answer)
- Ranking competing intelligence analysts by accuracy
- Selecting between different data collection tools
Correct answer: Systematically evaluating multiple hypotheses against available evidence to identify the most supported conclusion
ACH is a structured analytic technique that lists all plausible hypotheses and systematically tests each against available evidence, favoring hypotheses with the least inconsistency.
Question 3: Which OSINT collection strategy involves passively monitoring publicly available data streams without directly querying or interacting with any target system?
- Active reconnaissance
- Passive reconnaissance (Correct answer)
- Semi-passive collection
- Directed collection
Correct answer: Passive reconnaissance
Passive reconnaissance collects information from publicly available sources—such as news feeds, social media, or DNS records—without sending any requests or probes that could alert the target.
Question 4: What is the role of a 'requirements matrix' in an OSINT operation?
- It maps software tool capabilities to operating system compatibility
- It aligns specific intelligence questions with corresponding collection sources and methods (Correct answer)
- It assigns numerical scores to source reliability ratings
- It tracks team member task assignments during investigations
Correct answer: It aligns specific intelligence questions with corresponding collection sources and methods
A requirements matrix cross-references intelligence requirements (the questions to be answered) with specific sources and collection methods to ensure systematic coverage and avoid gaps.
Question 5: In OSINT tradecraft, 'source validation' primarily addresses which concern?
- Ensuring sources are freely accessible without subscription fees
- Confirming that a source is authentic, credible, and accurately represents the claimed information (Correct answer)
- Verifying that source data is formatted correctly for ingestion into analysis tools
- Checking that sources are indexed by major search engines
Correct answer: Confirming that a source is authentic, credible, and accurately represents the claimed information
Source validation confirms authenticity, credibility, and accuracy—determining whether a source is who/what it claims to be and whether the information is reliable before use in analysis.
Question 6: What does 'temporal analysis' contribute to an OSINT investigation?
- It measures how quickly data can be collected from various sources
- It examines how information, relationships, or behaviors change over time to identify patterns or timelines (Correct answer)
- It determines the time zone settings used in target social media accounts
- It calculates the processing time required for large datasets
Correct answer: It examines how information, relationships, or behaviors change over time to identify patterns or timelines
Temporal analysis examines data across time dimensions to reveal patterns, timelines of events, behavioral changes, or inconsistencies that static snapshots would miss.
Question 7: When an OSINT analyst uses 'deconfliction,' what are they doing?
- Removing duplicate entries from a collected dataset
- Checking whether another investigator or agency is already working the same target to avoid interference (Correct answer)
- Resolving conflicting information between two sources
- Eliminating false positives from automated scanning results
Correct answer: Checking whether another investigator or agency is already working the same target to avoid interference
Deconfliction is the process of checking with other investigators or agencies to ensure multiple teams aren't unknowingly investigating the same target, which could compromise operations.
OSINT OSINT Methodology & Framework 3
In OSINT methodology, what is the difference between 'structured analytic techniques' (SATs) and unstructured analysis?