Regional OSINT

Digital Landscape

Internet penetration ~93% of ~335M (Pew/ITU). Google (~88% market share), Bing, DuckDuckGo and Brave dominate search. Facebook, Instagram, X/Twitter, TikTok, Reddit, LinkedIn, Snapchat and Discord are the dominant social platforms; messaging skews to iMessage, WhatsApp, SMS (still heavily used for 2FA), Signal (journalistic) and Telegram (extremist/cyber-criminal). The US is also headquarters to most of the global OSINT-vendor stack (Palantir, Recorded Future, Sayari, Maltego ownership, Blackbird.AI, OSINT Industries).

Intelligence Agency & OSINT Tradecraft

• Lead civilian foreign-intelligence agency: Central Intelligence Agency (CIA) — https://www.cia.gov ✅
• Lead signals-intelligence agency: National Security Agency (NSA) — https://www.nsa.gov
• Federal law-enforcement & domestic intel: Federal Bureau of Investigation (FBI) — https://www.fbi.gov
• OSINT dedicated unit: Open Source Enterprise (OSE), organisational descendant of the Open Source Center (OSC, est. 2005), itself descended from the Foreign Broadcast Information Service (FBIS, est. 1941). OSE sits under the CIA's Directorate of Digital Innovation (DDI) but coordinates across the IC through the Open Source Inter-Agency Center (OSIAC) reporting to the Director of National Intelligence.
• Publicly verifiable tradecraft points:
  • ODNI Intelligence Community Open Source Strategy 2024-2026 — https://www.dni.gov/files/ODNI/documents/IC_OSINT_Strategy.pdf ⚠️ 403 to bots, downloadable in any browser. This is the first public IC document that formally elevates OSINT to a first-tier INT alongside HUMINT/SIGINT/GEOINT/MASINT.
  • State Department OSINT Strategy 2024-2026 — corroborates the IC-wide elevation.
  • FBIS historical lineage (declassified): CIA Historical Review Program released the FBIS collection guide and millions of translated foreign-broadcast transcripts (1941-1995).
  • WMD Commission (Silberman-Robb, 2005): publicly recommended elevating OSINT — documented origin of the Open Source Center.
• What is NOT verified (myth-busting):
  • There is no public confirmation that the CIA runs sockpuppet armies at scale. The single documented case is the 2014 AP story on "ZunZuneo", a fake Cuban Twitter.
  • "The NSA reads every email" — actual Snowden-disclosed programs (PRISM, UPSTREAM, XKEYSCORE) targeted traffic under FISA §702; bulk domestic collection was narrowed by the USA FREEDOM Act 2015.
  • The CIA did not create the internet (DARPA did, 1969). CIA venture arm In-Q-Tel did fund Keyhole (→ Google Earth) and Palantir.

Government Sources (Verified URLs)

State-level company registers: The US has no federal companies register. Each state runs its own Secretary of State business search (e.g. California https://businesssearch.sos.ca.gov, Delaware https://icis.corp.delaware.gov/ecorp/entitysearch/namesearch.aspx, New York https://apps.dos.ny.gov/publicInquiry/).

Local Sources & Press

• Quality press: New York Times, Washington Post, Wall Street Journal, ProPublica, Reuters, AP, Bloomberg, Los Angeles Times, Miami Herald, Texas Tribune, CALmatters.
• Investigative NGOs: ProPublica (Pulitzer-winning nonprofit), International Consortium of Investigative Journalists (ICIJ) — https://www.icij.org ✅, Center for Public Integrity, OpenSecrets (https://www.opensecrets.org ⚠️ 403, live in browser), LittleSis (https://littlesis.org ✅).
• OSINT community: Bellingcat (US-originated, Amsterdam-based since 2018), IntelTechniques (Michael Bazzell), OSINT Framework (Lockfale), SANS SEC497/SEC487 training, Trace Labs, OSINT Curious, The OSINT Newsletter.
• Academic OSINT: National Security Institute (George Mason U.), Harvard Belfer Center, Stanford Internet Observatory, Texas A&M Scowcroft Institute.

Country-Specific OSINT Tools

• CourtListener (Free Law Project) — https://www.courtlistener.com ✅ — PACER alternative for federal appellate/district opinions and the RECAP archive.
• OpenCorporates US state data — https://opencorporates.com — pulls from 50+ state SOS feeds.
• OpenSanctions US datasets — https://www.opensanctions.org/datasets/ ✅ — FBI Most Wanted, OFAC SDN, BIS Denied Persons, SAM exclusions.
• Sayari — https://sayari.com ⚠️ — commercial, strong on corporate-network construction.
• Palantir Gotham / Foundry — used by US defense & law-enforcement.
• Maltego — https://www.maltego.com ✅ — graph-based link analysis.
• Recorded Future — https://www.recordedfuture.com ⚠️ — commercial threat intel.
• OSINT Industries — https://osint.industries — email/username → linked accounts.

Legal Considerations

• First Amendment protects newsgathering broadly but is not absolute.
• Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030 — https://www.law.cornell.edu/uscode/text/18/1030 ✅. Post-Van Buren v. United States (2021) the Supreme Court narrowed "exceeds authorised access" but ToS-violation scraping with a login remains risky.
• Electronic Communications Privacy Act (ECPA) and Stored Communications Act (SCA) govern interception and access to stored comms.
• FOIA (1966) — https://www.foia.gov ✅ — the strongest federal transparency lever. State public-records laws vary (California PRA, Texas PIA, Florida Sunshine Law).
• State privacy laws: California CCPA/CPRA (2020/2023), Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA (2024).
• No federal GDPR-equivalent. Investigators publishing personal data of US persons are largely constrained by defamation, false-light and tortious-interference law.
• SLAPP risk: 32 states have anti-SLAPP statutes (California, Texas, New York, Florida among the strongest).
• State secret / classification: 18 U.S.C. § 798 (Espionage Act) relevant if an investigator receives leaked classified docs.
• OPSEC: US-based investigators can be subpoenaed by grand jury. Border searches under 8 CFR 287 — devices can be searched at the US border without reasonable suspicion.

Notable Cases

• MH17 (2014, Netherlands-led but Bellingcat-driven). Bellingcat used open VK posts, satellite imagery, geolocation of a Buk TELAR transport and matched social-media timestamps to attribute the downing of MH17 to Russian forces. Methodology PDF: https://www.bellingcat.com/app/uploads/2015/10/MH17-The-Open-Source-Evidence-EN.pdf ✅. The case is the textbook example of OSINT-as-evidence (used by the JIT and cited in the Dutch court verdict in absentia against Russians Girkin/Dubinsky/Pulatkij in 2022).
• 1MDB kleptocracy asset recovery (2016-2024). DOJ Civil forfeiture complaints — https://www.justice.gov/criminal/criminal-mlnsa/kleptocracy-asset-recovery-initiative ⚠️ — used leaked bank records, SEC filings, real-estate records from NYC registry and shell-company filings from BVI/Seychelles.
• Boston Marathon bombing misidentification (2013). The cautionary counter-example: Reddit/Twitter crowd-sleuths wrongly identified missing student Sunil Tripathi as a suspect; he was later found dead by suicide. Teaching case on confirmation bias in OSINT.
• January 6 Capitol riot (2021). Sedition Hunters (https://seditionhunters.org) and the FBI used Parler video metadata and facial matches to identify >1,400 suspects.

Digital Landscape

Brazil had 187.9 million internet users at the start of 2024 (86.6% penetration) per DataReportal's Digital 2024: Brazil. WhatsApp is the dominant communication layer — roughly 147–148 million users, ~93% of internet users send messages online — making it the primary OSINT surface. Google dominates search; YouTube is the second social platform after WhatsApp.

Intelligence Agency & OSINT Tradecraft

• Main agency: Agência Brasileira de Inteligência (ABIN), subordinated to the Institutional Security Cabinet (GSI/PR). Public site: https://www.gov.br/abin/en
• OSINT unit / tradecraft: ABIN does not publicly advertise a dedicated OSINT directorate. Its Desafios de Inteligência – Edição 2026 public report describes OSINT as a collection discipline integrated into its Obtaining (Obtenção) area, but no named OSINT unit is publicly attributed. The Brazilian intelligence community (SISBIN) coordinates civilian + military intelligence; ABIN is the central body.
• Publicly attributable tradecraft: None specifically attributable beyond ABIN's public acknowledgement that it collects open-source information as part of its mandate. The most mature Brazilian OSINT tradecraft is practised by investigative journalists (Agência Pública, Piauí) and civil-society investigators, not by ABIN.

Government Sources (Verified URLs)

Court records: Jusbrasil (https://www.jusbrasil.com.br/consulta-processual) and Escavador (https://www.escavador.com) are the two principal case-law aggregators; both index CNJ-connected tribunals. The official CNJ platform is https://www.cnj.jus.br.

Property registry: Brazil has no unified federal property registry; each Cartório de Registro de Imóveis (notary office) keeps its own records.

Local Sources & Press

• Quality press: Folha de S.Paulo (https://www1.folha.uol.com.br), O Globo (https://oglobo.globo.com), Estadão (https://www.estadao.com.br), Valor Econômico (https://valor.globo.com).
• Investigative / non-profit: Agência Pública (https://apublica.org), Agência Lupa (https://piaui.folha.uol.com.br/lupa/ fact-checking), The Intercept Brasil (https://theintercept.com/brasil/), Instituto Socioambiental (https://www.socioambiental.org).
• Open-data portals: dados.gov.br (federal open data), TSE Eleições (https://divulgacandcontas.tse.jus.br) for electoral/campaign finance.

Country-Specific OSINT Tools

• Jusbrasil & Escavador — case-law search (the closest Brazilian equivalent to US PACER).
• Consulta CNPJ Receita — corporate registry lookup (free; CAPTCHA-protected).
• CNPJ.biz / ReceitaAWS — community wrappers over the Receita Federal CNPJ API.
• TSE DivulgaCandContas — campaign finance & candidate asset declarations.
• OSINT-Tools-Brazil (GitHub: bgmello/OSINT-Tools-Brazil) — community-curated list.
• OSINT Brasil blog (https://osintbrasil.blogspot.com) — practitioner write-ups.

Legal Considerations

• Data protection: LGPD — Lei Geral de Proteção de Dados, Law 13.709/2018, in force since 18 Sep 2020. Enforced by ANPD (https://www.gov.br/anpd).
• Access to information: Lei de Acesso à Informação (LAI), Law 12.527/2011 — every citizen can request government records; FalaBR (https://falabr.cgu.gov.br) is the central portal.
• SLAPP risk: No dedicated anti-SLAPP statute; journalists face criminal defamation suits under the Código Penal (arts. 138–145).
• Internet regulation: Marco Civil da Internet (Law 12.965/2014) governs intermediary liability and data retention.

Notable Cases

• Operação Lava Jato (Operation Car Wash) — 2014–2021 anti-corruption task force led by the Curitiba federal court (Judge Sérgio Moro) and the Ministério Público Federal. Convictions included former president Lula (later annulled by STF in 2021), Odebrecht/Novonor executives, and Petrobras directors. OSINT tradecraft was light; the case was built on plea bargains (delação premiada) and leaks. Verified URLs: https://en.wikipedia.org/wiki/Operation_Car_Wash · https://apublica.org/especial/vaza-jato (the "Vaza Jato" leak archive).

Digital Landscape

Mexico has ~96 million internet users (~75% penetration per DataReportal Digital 2024 Mexico). WhatsApp is the dominant communication channel; Facebook, Instagram, X (Twitter) and TikTok follow. Google holds >90% search share. Internet penetration is highly uneven — urban vs rural gap is significant.

Intelligence Agency & OSINT Tradecraft

• Main agency: Centro de Investigación y Seguridad Nacional (CISEN) was replaced in December 2018 by the Centro Nacional de Inteligencia (CNI) under the Secretariat of Security and Citizen Protection (SSPC). Public reference: https://www.gob.mx/sspc/cni
• OSINT unit / tradecraft: No publicly attributed OSINT directorate. Mexican intelligence is widely regarded as under-resourced on technical collection; the public-record consensus is that Mexico "lacks a robust external intelligence capability" comparable to its partners in the region.
• Verified URLs:
  • https://en.wikipedia.org/wiki/Centro_de_Investigación_y_Seguridad_Nacional
  • https://www.gob.mx/sspc

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Proceso, Animal Político, Latinus, Emeequis, Reforma, El Universal, Milenio.
• Investigative / non-profit: MexicanLeaks (https://mexicanleaks.mx), Quinto Elemento Lab, Article 19 México (https://article19.org/offices/mexico-office).
• OSINT community: OSINT Español, OSINT México communities on Telegram/Discord.

Country-Specific OSINT Tools

• INEGI DENUE — Directorio Estadístico Nacional de Unidades Económicas (business directory).
• SAT RFC lookup — tax ID verification.
• MexicanLeaks — anonymous leak submission platform.
• Plataforma Digital Nacional — asset declarations of public officials, sanctioned entities.
• Article 19 México — attacks on journalists tracker.

Legal Considerations

• Data protection: LFPDPPP — Ley Federal de Protección de Datos Personales en Posesión de los Particulares (2010), reformed in 2025 for the private sector. ARCO rights (Acceso, Rectificación, Cancelación, Oposición). INAI is the authority (when in operation — INAI was paralysed for months in 2024-2025 due to lack of commissioners).
• Access to information: Ley General de Transparencia y Acceso a la Información Pública (2015).
• SLAPP risk: High. Mexico is one of the most dangerous countries for journalists (Article 19, CPJ). Criminal defamation suits are used to silence investigators.
• OPSEC: Critical. Investigating cartels or political corruption carries physical risk.

Notable Cases

• Ayotzinapa case (2014). 43 student teachers from the Ayotzinapa Rural Teachers' College disappeared in Iguala, Guerrero. The official "Historical Truth" (Verdad Histórica) was challenged by the GIEI (Grupo Interdisciplinario de Expertos Personas) report, which used OSINT (satellite imagery, phone records, geolocation of security forces) to contradict the government narrative. Verified URLs: https://en.wikipedia.org/wiki/2014_Iguala_mass_kidnapping · https://gieicom.org/informes/.
• MexicanLeaks investigations — multiple investigations into political corruption published through the platform.

Digital Landscape

Argentina has ~37 million internet users (~83% penetration per DataReportal Digital 2024 Argentina). WhatsApp is the dominant messaging channel; Facebook, Instagram and X (Twitter) follow. Google holds >90% search share.

Intelligence Agency & OSINT Tradecraft

• Main agency: Historically SIDE / Secretaría de Inteligencia del Estado; renamed AFI (Agencia Federal de Inteligencia) by Law 27.126 in 2015. In July 2024, President Javier Milei dissolved AFI by decree and re-created it as the Secretaría de Estado de Inteligencia (SIDE) under direct presidential authority.
• OSINT unit / tradecraft: No publicly attributed OSINT directorate. Argentine intelligence is widely regarded as under-resourced on technical collection.
• Verified URLs:
  • https://en.wikipedia.org/wiki/Secretariat_of_Intelligence
  • https://www.batimes.com.ar/news/argentina/milei-overhauls-argentinas-side-intelligence-services-by-decree.phtml

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: La Nación, Clarín, Página/12, Infobae, Perfil.
• Investigative / non-profit: Chequeado (https://chequeado.com, fact-checking), Revista Anfibia (https://revistaanfibia.com), Centro de Implementación de Políticas Públicas para la Equidad y el Crecimiento (CIPPEC).
• OSINT community: Hacks/Hackers Buenos Aires.

Country-Specific OSINT Tools

• Chequeado — Argentina's leading fact-checking organisation.
• AFIP / ARCA CUIT lookup — tax ID verification.
• IGJ Sociedades — corporate registry lookup.
• Atlas ID — forensic identification system (national registry).

Legal Considerations

• Data protection: Ley 25.326 (2000), regulated by AAIP (https://www.argentina.gob.ar/aaip). Argentina has EU adequacy status.
• Access to information: Ley 27.275 (2016) — comprehensive FOIA law.
• SLAPP risk: Moderate. Journalists face criminal defamation suits.

Notable Cases

• Cuadernos de las coimas (Notebooks of the bribes, 2018). Chauffeur Oscar Centeno's notebooks documented bribes from public-works contractors to Kirchner-era officials. Investigation led by journalist Diego Cabot (La Nación) and Cynthia García (C5N). Verified URL: https://en.wikipedia.org/wiki/Cuadernos_de_las_coimas.

Digital Landscape

Canada has ~36 million internet users (~94% penetration). Google dominates search; Facebook, X, Instagram, Reddit and LinkedIn are the main social platforms. WhatsApp and iMessage dominate messaging. Local tech-OSINT ecosystem is concentrated in Toronto, Montreal and Vancouver.

Intelligence Agency & OSINT Tradecraft

• Main civilian agency: Canadian Security Intelligence Service (CSIS) — https://www.csis-scrs.gc.ca
• Signals intelligence agency: Communications Security Establishment (CSE) — https://www.cse-cst.gc.ca
• Foreign intelligence assessment: Office of the Intelligence Commissioner and Global Affairs Canada's Intelligence Assessment Division.
• OSINT unit / tradecraft: CSIS and CSE both maintain OSINT collection capabilities but do not publicly advertise dedicated OSINT directorates. CSIS publicly acknowledges OSINT as a collection discipline in its annual reports.
• Verified URLs:
  • https://www.csis-scrs.gc.ca/en/operations.php
  • https://www.cse-cst.gc.ca/en/who-we-are/mandate

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: CBC, Toronto Star, The Globe and Mail, La Presse (French), National Post.
• Investigative / non-profit: CBC Investigates, Toronto Star Investigative, Discourse Media, The Pointer.
• OSINT community: Canadian OSINT community on LinkedIn, SecTor conference.

Country-Specific OSINT Tools

• Open Canada — open data aggregator.
• Lobby Canada — federal lobbying registry.
• CASL Registry — anti-spam compliance lookup.
• Provincial corporate registries — each province maintains its own (e.g. Ontario https://www.ontario.ca/page/search-and-buy-business-name-and-incorporation-information).

Legal Considerations

• Data protection: PIPEDA — Personal Information Protection and Electronic Documents Act (2000). Provincial equivalents (Quebec Law 25, BC PIPA, Alberta PIPA).
• Access to information: Access to Information Act (1985) — federal FOIA.
• SLAPP risk: Ontario has anti-SLAPP protections (Anti-SLAPP Act 2015). Other provinces vary.
• OPSEC: Strong press protections. Source shield recognised by courts.

Notable Cases

• NSICOP reports (2019-2024). The National Security and Intelligence Committee of Parliamentarians has published multiple reports on intelligence community activities, including the 2024 report on foreign interference in Canadian elections.
• Hogue Commission (2024). Public inquiry into foreign interference in Canadian electoral processes, led by Justice Marie-Josée Hogue.

Digital Landscape

Internet penetration ~98% (Ofcom 2024); 5G nationwide; gigabit-fibre rollout ~80% by 2025. Google (~90%), Bing and DuckDuckGo dominate search. WhatsApp is dominant (~80% of UK smartphone users), with iMessage, Signal (journalists) and Telegram. London is Europe's largest LinkedIn market. The UK has a concentrated tech-OSINT ecosystem including Darktrace, BAE Systems Applied Intelligence, Cellebrite UK, DeepMind (now Google DeepMind) and Recorded Future UK.

Intelligence Agency & OSINT Tradecraft

• Lead foreign-intelligence agency: Secret Intelligence Service (SIS / "MI6") — https://www.sis.gov.uk ⚠️ 403 to bots, live in browser.
• Lead signals-intelligence & cyber agency: Government Communications Headquarters (GCHQ) — https://www.gchq.gov.uk ✅. Includes the National Cyber Security Centre (NCSC) — https://www.ncsc.gov.uk ✅.
• Domestic security service: Security Service (MI5) — https://mi5.gov.uk.
• Military intelligence: Defence Intelligence (DI) sits under the Ministry of Defence.
• OSINT dedicated unit: GCHQ Open Source Intelligence Hub (OSI Hub) — publicly referenced in the 2023 GCHQ annual report and in the 2024 Intelligence and Security Committee report. Less publicly visible than CIA OSE. NCSC uses OSINT for threat-intel (weekly threat reports).
• Publicly verifiable tradecraft points:
  • GCHQ's legal basis is the Investigatory Powers Act 2016 ("Snooper's Charter"); bulk personal datasets and bulk interception warrants are reviewed by the Investigatory Powers Commissioner's Office (IPCO) — public reports at https://ipco.org.uk.
  • NCSC publishes the Early Warning service (free to UK organisations) which is OSINT + sinkhole data — https://www.ncsc.gov.uk/section/services/early-warning.
  • GCHQ published "Pioneers, a UK strategy for AI" (2024) openly — first IC in Five Eyes to do so.
• What is NOT verified (myth-busting):
  • "GCHQ reads every email in the UK" — actual programs target external traffic under RIPA/IPA warrants; bulk domestic collection requires specific authorization.
  • JTRIG (Joint Threat Research Intelligence Group) — existence disclosed by Snowden; specific operations remain classified. Do not attribute specific operations without source.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: The Guardian, BBC News, Reuters, Financial Times, The Times, The Telegraph, The Independent.
• Investigative NGOs: Bureau of Investigative Journalism (https://www.thebureauinvestigates.com), OpenDemocracy, Finance Uncovered.
• OSINT community: Bellingcat (Amsterdam-HQ since 2018, originally UK-founded), CIISec (Chartered Institute of Information Security), OSINT Curious UK chapter.

Country-Specific OSINT Tools

• Companies House API — free, comprehensive UK corporate registry with full historical filings.
• OpenOwnership Register — UK PSC (Person with Significant Control) register.
• OpenSanctions UK datasets — UK OFSI sanctions, Consolidated List.
• Hansard API — parliamentary debates (https://hansard.parliament.uk).
• DueDil — UK corporate intelligence aggregator (commercial).
• Wayback Machine UK Government snapshot archive — via UK Web Archive (https://www.webarchive.org.uk).

Legal Considerations

• Data protection: UK GDPR (post-Brexit, retained EU GDPR) + Data Protection Act 2018. Regulated by ICO (https://ico.org.uk).
• Access to information: Freedom of Information Act 2000 (https://www.legislation.gov.uk/ukpga/2000/36/contents).
• Investigatory Powers Act 2016 — regulates bulk interception and equipment interference.
• Official Secrets Act 1989 — protects state secrets; relevant for investigators handling leaked UK gov material.
• SLAPP risk: UK has a libel tourism problem; Defamation Act 2013 added a "serious harm" threshold. UK recently published an anti-SLAPP bill proposal in 2024.

Notable Cases

• Skripal poisoning (2018). Bellingcat identified Salisbury suspects "Petrov" and "Boshirov" as GRU officers Anatoliy Chepiga and Alexander Mishkin using Russian leaked databases (probiv). URLs: https://www.bellingcat.com/news/europe/2018/10/09/full-report-skripal-poisoning-suspect-dr-alexander-mishkin-hero-russia/ · https://www.bellingcat.com/news/europe/2018/09/20/skripal-suspects-confirmed-gru-operatives-prior-european-operations-disclosed/
• Cambridge Analytica / Facebook data breach (2018). Investigation led by The Guardian / Observer (Carole Cadwalladr) and The New York Times.
• Panama Papers / Pandora Papers — UK persons featured prominently; ICIJ investigations.

Digital Landscape

Internet penetration ~93% (Bitkom 2024). Google dominates search; alternative privacy-focused search engines (Ecosia, Metager) have notable market share. WhatsApp is the dominant messaging app; Telegram is notably stronger in Germany than in other Western European countries (used by political fringe, anti-vax, Reichsbürger). X and LinkedIn are the main professional networks.

Intelligence Agency & OSINT Tradecraft

• Foreign intelligence agency: Bundesnachrichtendienst (BND) — https://www.bnd.bund.de
• Domestic intelligence agency (Verfassungsschutz): Bundesamt für Verfassungsschutz (BfV) — https://www.verfassungsschutz.de
• Military intelligence: Militärischer Abschirmdienst (MAD) — https://www.bmvg.de/de/organisation/mad
• OSINT unit / tradecraft: BND has an OSINT branch (Open Source Intelligence), but its work is classified. The BfV publishes the annual Verfassungsschutzbericht (Constitutional Protection Report) which uses OSINT analysis of extremism and disinformation.
• Publicly verifiable tradecraft points:
  • BND's legal basis is the BND-Gesetz (BND Act, 2020) — https://www.gesetze-im-internet.de/bndg/, which explicitly regulates OSINT collection.
  • BfV publishes Verfassungsschutzbericht annually (https://www.verfassungsschutz.de/de/oeffentlichkeitsarbeit/publikationen/publikationsarchiv) — uses OSINT to map extremism.
  • Federal Office for Information Security (BSI) — https://www.bsi.bund.de — publishes threat reports based on OSINT.
• What is NOT verified: Specific BND OSINT operations are not publicly attributed. Avoid claims about "BND sockpuppets" without source.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Süddeutsche Zeitung, Frankfurter Allgemeine Zeitung (FAZ), Die Zeit, Der Spiegel, Die Welt, Handelsblatt, Tagesschau (public broadcaster ARD), ZDF heute.
• Investigative NGOs: Correctiv (https://correctiv.org/en ✅), Netzpolitik.org, Frag Den Staat (https://fragdenstaat.de, FOIA platform), OCCRP Germany partner.
• OSINT community: OSINT Deutsch (Telegram), IntelTechniques Germany, BSI Cyber-Sicherheitskonferenz.

Country-Specific OSINT Tools

• Unternehmensregister — official federal business registry (paid for full filings, free for basic info).
• Bundesanzeiger — federal gazette with annual financial statements of all German companies.
• Transparenzregister — UBO register (implementing EU 4th AMLD).
• Frag Den Staat — FOIA platform (https://fragdenstaat.de) — sends and tracks freedom-of-information requests.
• Correctiv Research Hub — investigative OSINT tools and methodology.
• Netzpolitik.org — digital rights and surveillance investigative site.

Legal Considerations

• Data protection: GDPR (DSGVO in German) + Bundesdatenschutzgesetz (BDSG). Regulated by BfDI (https://www.bfdi.bund.de).
• Access to information: Informationsfreiheitsgesetz (IFG, 2005) — federal FOIA. Each state (Land) has its own IFG.
• Stasi files: The BStU (Federal Commissioner for the Stasi Records, now BStU archives at Bundesarchiv) holds millions of records of the former East German secret police — accessible to researchers and individuals.
• Network Enforcement Act (NetzDG, 2017) — requires social platforms to remove "manifestly illegal" content within 24h.
• SLAPP risk: No specific anti-SLAPP law, but criminal defamation is rarely used against journalists.

Notable Cases

• Wirecard scandal (2020). Financial fraud at Wirecard AG, exposed by Financial Times (Dan McCrum) using OSINT on Asian phantom operations. Correctiv contributed with follow-up investigations. URLs: https://en.wikipedia.org/wiki/Wirecard_scandal · https://correctiv.org/en/latest-stories/wirecard/
• Cum-Ex Files (2018). Cross-border tax fraud scheme exposed by Correctiv and partners. URL: https://correctiv.org/en/latest-stories/cum-ex-files/
• NSU (National Socialist Underground, 2011). Neo-Nazi terror cell; investigation heavily criticised for intelligence failures.

Digital Landscape

Internet penetration ~85% (ARCEP 2024). Google dominates search; Qwant is the French-made privacy-focused alternative. WhatsApp, iMessage, and Signal (used by journalists) dominate messaging. X, LinkedIn, Facebook, Instagram are the main social platforms. France has a strong domestic tech ecosystem (Dassault Systèmes, Thales, Mistral AI).

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: Direction Générale de la Sécurité Extérieure (DGSE) — https://www.dgse.gouv.fr ✅
• Internal intelligence agency: Direction Générale de la Sécurité Intérieure (DGSI) — https://www.dgsi.gouv.fr
• Military intelligence: Direction du Renseignement et de la Sécurité de la Défense (DRSD) and Direction du Renseignement Militaire (DRM).
• OSINT unit / tradecraft: No publicly named OSINT directorate. DGSE and DGSI acknowledge OSINT as part of their collection disciplines in annual public reports to Parliament (https://www.assemblee-nationale.fr/dyn/15/rapplets).
• Publicly verifiable tradecraft points:
  • Loi 2015-1556 (anti-terrorist intelligence law) — https://www.legifrance.gouv.fr/eli/loi/2015/11/30/DEFX1414385L/jo/texte — explicitly regulates OSINT collection by French intelligence.
  • CNCTR (Commission Nationale de Contrôle des Techniques de Renseignement) — https://www.cncctr.fr — public oversight reports on intelligence techniques including OSINT.
• What is NOT verified: "DGSE runs suitcase nuclear devices" — this is fiction (referenced in films like La French) and not attributable.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Le Monde, Le Figaro, Libération, Les Echos, Le Parisien, L'Equipe, Mediapart (investigative).
• Investigative NGOs: Mediapart (https://www.mediapart.fr/en/english ✅), StreetPress, Disclose (https://disclose.ngo).
• OSINT community: OSINT-FR community (Discord), CFM News (https://cfmnews.fr).

Country-Specific OSINT Tools

• Pappers — free corporate data aggregator (uses Infogreffe data).
• Infogreffe — official commercial court registry.
• BODACC — official bulletin of civil and commercial announcements.
• Légifrance — official legal database (laws, decrees, jurisprudence).
• data.gouv.fr — French open data portal.
• INSEE Sirene database — official business directory (https://www.sirene.fr).

Legal Considerations

• Data protection: GDPR + Loi Informatique et Libertés (1978, modified 2018). Regulated by CNIL (https://www.cnil.fr/en ✅).
• Access to information: Loi CADA (1978) — French FOIA.
• Secret défense: Classified defense information protected by law; relevant for investigators handling leaked French intel material.
• SLAPP risk: France has strong defamation laws; recent reform is moving toward anti-SLAPP protections.
• Loi Sécurité Globale (2021) — restricts publication of police officer images (controversial).

Notable Cases

• Cahuzac case (2013). Budget Minister Jérôme Cahuzac was exposed for hiding money in Swiss bank accounts. Investigation led by Mediapart (Fabrice Arfi). URL: https://en.wikipedia.org/wiki/Jérôme_Cahuzac
• CatalanGate (2022). Citizen Lab investigation into Pegasus spyware infections of Catalan politicians and civil society. URL: https://citizenlab.ca/2022/04/catalangate/
• Panama Papers / Pandora Papers — French persons featured prominently; ICIJ investigations.

Digital Landscape

Internet penetration ~93% (ONTSI 2024). Google dominates search. WhatsApp is the dominant messaging app; Telegram has high penetration (used by political groups). X, LinkedIn, Instagram are the main social platforms. Spain has active OSINT and hacking communities (DragonJAR, OSINT Español).

Intelligence Agency & OSINT Tradecraft

• National intelligence agency: Centro Nacional de Inteligencia (CNI) — https://www.cni.es/en ✅
• Defence intelligence centre: Centro de Inteligencia de las Fuerzas Armadas (CIFAS).
• OSINT unit / tradecraft: CNI acknowledges OSINT as part of its collection disciplines. The public Ley 11/1995 (https://www.boe.es/buscar/act.php?id=BOE-A-1995-22306) regulates intelligence activity including OSINT.
• Publicly verifiable tradecraft points:
  • CCN-CERT (Centro Criptológico Nacional) — https://www.ccn-cert.cni.es/en/ — public cybersecurity incidents and threat reports based on OSINT.
  • INCIBE (Instituto Nacional de Ciberseguridad) — https://www.incibe.es — public threat intel.
• What is NOT verified: "CNI runs mass surveillance" — the Catalangate Citizen Lab report documented Pegasus infections but did not attribute them directly to CNI; CNI's director Pablo Melgar was asked about this in parliamentary committee and neither confirmed nor denied.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: El País, El Mundo, La Vanguardia, ABC, La Razón, El Confidencial, El Diario.
• Investigative NGOs: Civio (https://civio.es/en/ ✅), eldiario.es, Newtral (fact-checking), Maldita (fact-checking).
• OSINT community: OSINT Español (Telegram/Discord), DragonJAR community.

Country-Specific OSINT Tools

• BORME — official commercial registry bulletin.
• Civio — civic tech and OSINT tools.
• Maldita — leading Spanish fact-checker.
• AEPD — Spanish data protection authority.
• INCIBE Cybersecurity — public threat intel.

Legal Considerations

• Data protection: GDPR + LOPDGDD (Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales, 2018). Regulated by AEPD.
• Access to information: Ley 19/2013 de transparencia.
• Ley Mordaza (Gag Law, 2015) — restricts photography of police officers (controversial).
• SLAPP risk: Criminal defamation suits are used against journalists.

Notable Cases

• CatalanGate (2022). Citizen Lab investigation documented Pegasus infections of 65+ Catalan politicians, civil society members, and European MPs. URL: https://citizenlab.ca/2022/04/catalangate/
• Pandora Papers (2021) — Spanish political figures exposed.

Digital Landscape

Internet penetration ~87% (AGCOM 2024). Google dominates search. WhatsApp is the dominant messaging app. X, LinkedIn, Instagram are the main social platforms. Italy has a strong cybersecurity and OSINT community (SANS Milan, Italian Cybersecurity Summit).

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: Agenzia Informazioni e Sicurezza Esterna (AISE) — https://www.sicurezzanazionale.gov.it ✅
• Internal intelligence agency: Agenzia Informazioni e Sicurezza Interna (AISI) — https://www.sicurezzanazionale.gov.it
• Coordinating body: Dipartimento delle Informazioni per la Sicurezza (DIS) — https://www.sicurezzanazionale.gov.it
• OSINT unit / tradecraft: AISE and AISI acknowledge OSINT collection. The annual Relazione al Parlamento (https://www.sicurezzanazionale.gov.it/pubblicazioni/relazione-annuale-al-parlamento) is public and references OSINT analysis.
• Publicly verifiable tradecraft points:
  • Legge 124/2007 (Intelligence reform) — https://www.normattiva.it/uri-res/N2Ls?urn:nir:stato:legge:2007-08-03;124 — regulates intelligence activity.
  • ACN (Agenzia per la Cybersicurezza Nazionale) — https://www.acn.gov.it — public cybersecurity agency with OSINT-based threat reports.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Corriere della Sera, La Repubblica, La Stampa, Il Sole 24 Ore, Il Fatto Quotidiano, Internazionale.
• Investigative NGOs: IRPI (Investigative Reporting Project Italy, https://irpimedia.irpi.eu/en/ ✅), La Notizia (Fact-checking), FrontiereCriminali.
• OSINT community: OSINT Italia community, Cybersecurity Italia Summit.

Country-Specific OSINT Tools

• Registro Imprese — national business registry (free for basic lookups, paid for full filings).
• IRPI — investigative reporting with OSINT methodology.
• Garante Privacy — data protection authority with public decisions.
• ACN Cybersecurity Alerts — public threat reports.

Legal Considerations

• Data protection: GDPR + Codice Privacy (Decreto Legislativo 196/2003, modified 2018). Regulated by Garante per la Protezione dei Dati Personali.
• Access to information: Decreto Legislativo 33/2013 (FOIA).
• SLAPP risk: Italy has criminal defamation with prison sentences; multiple SLAPP cases against journalists documented by EFJ.
• OPSEC: Anti-mafia investigations carry significant physical risk.

Notable Cases

• Mafia Capitale (2015). Investigation into Rome's criminal-political network, led by prosecutor Michele Prestipino. URLs: https://en.wikipedia.org/wiki/Mafia_Capitale
• IRPI investigations — cross-border crime and corruption investigations using OSINT. URL: https://irpimedia.irpi.eu/en/

Digital Landscape

Internet penetration ~88% (GUS 2024). Google dominates search; presearch.com has small share. WhatsApp and Messenger dominate messaging; Signal is growing among journalists and activists. X, LinkedIn, Facebook are the main social platforms. Poland has a strong cybersecurity and OSINT community (CyberSec community, NASK, Sekurak).

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: Agencja Wywiadu (AW) — https://www.aw.gov.pl
• Internal intelligence agency: Agencja Bezpieczeństwa Wewnętrznego (ABW) — https://www.abw.gov.pl
• Military intelligence: Służba Wywiadu Wojskowego (SWW) and Służba Kontrwywiadu Wojskowego (SKW).
• OSINT unit / tradecraft: AW and ABW acknowledge OSINT collection. The annual Raport o stanie bezpieczeństwa (https://www.bbn.gov.pl) references OSINT analysis.
• Publicly verifiable tradecraft points:
  • Ustawa o Agencji Wywiadu (2002) — https://isap.sejm.gov.pl/isap.nsf/DocDetails.xsp?id=WDU2002065118 — regulates intelligence activity including OSINT.
  • NASK ARIA (Cybersecurity Response) — https://www.nask.pl/en — public threat reports based on OSINT.
  • Sekurak — public OSINT and pentesting blog.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Gazeta Wyborcza (https://wyborcza.pl ✅), Rzeczpospolita, Dziennik Gazeta Prawna, Polityka, OKO.press (https://oko.press ✅, investigative), Onet.
• Investigative NGOs: OKO.press, Fundacja Batorego (https://www.batory.org.pl), ICPC Poland.
• OSINT community: Sekurak (https://sekurak.pl), OSINT Polska (Telegram), 9wind's OSINT Poland GitHub (https://github.com/9wind/OSINT-Poland ✅).

Country-Specific OSINT Tools

• eKRS — National Court Registry (free, comprehensive for Polish companies).
• Biznes.gov.pl — business search portal.
• OKO.press — investigative journalism with OSINT.
• Sekurak — OSINT and pentesting resources.
• OSINT Poland GitHub (https://github.com/9wind/OSINT-Poland) — curated list of Polish OSINT resources.

Legal Considerations

• Data protection: GDPR + Polish Data Protection Act (2018). Regulated by UODO (https://uodo.gov.pl/en).
• Access to information: Ustawa o dostępie do informacji publicznej (2001).
• SLAPP risk: Multiple SLAPP cases against journalists documented by OKO.press and EFJ.
• Hate speech laws: Strong regulations against defamation of religious and ethnic groups.

Notable Cases

• Visegrad Insight / Notes from Poland — investigations into rule-of-law backsliding using OSINT.
• Aleksandra Gajewska corruption case — OSINT used by OKO.press to expose political corruption.

Digital Landscape

Internet penetration ~88% (RUNet 2024). Yandex dominates search (~65% market share). VKontakte (VK) is the dominant social network; Odnoklassniki (OK) for older demographic. Telegram is the dominant messaging app (post-2022 blocking of Western platforms). X, Facebook and Instagram are blocked (since March 2022). LinkedIn has been blocked since 2016.

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: Sluzhba Vneshney Razvedki (SVR) — https://www.svr.gov.ru
• Military intelligence: Glavnoye Upravleniye General'nogo Shtaba (GRU) — https://structure.mil.ru/structure/forces/hq/general.htm
• Domestic security service: Federal'naya Sluzhba Bezopasnosti (FSB) — https://www.fsb.ru
• OSINT unit / tradecraft: Russian intelligence services use OSINT as part of their active measures and disinformation campaigns. The GRU's Unit 26165 (Fancy Bear / APT28) has been documented using OSINT to identify targets for spear-phishing and influence operations (Mueller Report, 2019; Bellingcat investigations).
• Publicly verifiable tradecraft points:
  • CSIS Russia Shadow War analysis — https://www.csis.org/analysis/russias-shadow-war-against-west ✅ — documents Russian intelligence tradecraft including OSINT use.
  • CheckFirst investigation on GRU Information Operations Troops — https://checkfirst.network/unveiling-grus-information-operations-troops-with-osint-and-medals — uses OSINT to map GRU units through medal analysis.
  • Bellingcat Russia investigations — https://www.bellingcat.com/category/regions/europe/russia/ — multiple investigations using Russian probiv databases.
• What is NOT verified (myth-busting):
  • "Every Russian troll is GRU" — many influence operations are conducted by private actors (IRA, Prigozhin's networks) with loose state coordination.
  • "Russian intelligence has perfect access to all Russian data" — Russian investigators also use grey-market probiv bots, suggesting they don't have direct access to all databases.

Government Sources (Verified URLs)

Local Sources & Press

• Independent press (in exile): Meduza (https://meduza.io ✅, Riga-based), Novaya Gazeta Europe (https://novayagazeta.eu), The Moscow Times (https://www.themoscowtimes.com).
• Investigative NGOs: OCCRP Russian partners, Bellingcat Russia desk, Agentstvo (https://agentstvo.net).
• OSINT community: Russian-speaking OSINT community on Telegram (pro-Ukrainian investigative channels: InformNapalm, Cyber Resistance,.peacekeeper).

Country-Specific OSINT Tools

• RuPEP (Russian Political Exposed Persons) — https://rupep.ru ⚠️ Timeout — database of Russian elites and PEPs.
• Meduza — independent Russian-language news.
• Agentstvo — investigative journalism.
• InformNapalm — OSINT community documenting Russian military actions.
• Peacekeeper (Mirotvorets) — Ukrainian-run database of pro-Russian actors (controversial).
• Russian Telegram channels — main source for real-time OSINT on Russian military, political events.

Legal Considerations & OPSEC

• "Fake news" law (March 2022): Criminalises publication of "false information" about the Russian military, punishable by up to 15 years imprisonment. This affects any OSINT investigator publishing about Russian military actions.
• Foreign agent law: Individuals and organizations receiving foreign support must register as "foreign agents".
• VPN legality: VPNs are technically legal but providers must block sites on the Russian government's blacklist. Many VPN providers have left the Russian market.
• OPSEC: Investigators publishing about Russia from outside should use sock puppets, never real identities. Russian intelligence has a documented history of targeting diaspora investigators.

Notable Cases

• MH17 (2014). Bellingcat used open VK posts, satellite imagery, and geolocation to attribute the downing of MH17 to Russian forces. URL: https://www.bellingcat.com/app/uploads/2015/10/MH17-The-Open-Source-Evidence-EN.pdf ✅
• Skripal poisoning (2018). Bellingcat identified the GRU officers behind the Salisbury poisoning using Russian leaked databases. URL: https://www.bellingcat.com/news/europe/2018/10/09/full-report-skripal-poisoning-suspect-dr-alexander-mishkin-hero-russia/
• Navalny poisoning (2020). Bellingcat and The Insider identified an FSB team of chemical-weapons experts that had trailed Navalny. URL: https://www.bellingcat.com/news/2020/12/14/fsb-team-of-chemical-weapon-experts-implicated-in-alexey-navalny-novichok-poisoning/

Digital Landscape

Internet penetration ~80% (early 2024). Google dominates search. Telegram is the dominant messaging app (used by both military and civilians during the war). X, Facebook, Instagram, TikTok, YouTube are the main social platforms. Ukraine has developed a sophisticated OSINT ecosystem since 2014.

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: Sluzhba Zovnishn'oyi Rozvidky (SZRU) — https://szru.gov.ua
• Military intelligence: HUR (Holovne Upravlinnya Rozvidky) — https://www.gur.gov.ua
• OSINT unit / tradecraft: Ukraine has the most sophisticated open-source OSINT ecosystem of any country at war, centred on:
  • InformNapalm — volunteer OSINT community documenting Russian military equipment and personnel.
  • Cyber Resistance — Ukrainian hacktivist collective.
  • Molfar — Ukrainian OSINT agency (https://molfar.com).
  • State Emergency Service uses OSINT for damage assessment.
• Publicly verifiable tradecraft points:
  • Ukraine's National Agency for Corruption Prevention (NACP) maintains a public "International Sponsors of War" list (https://war-sanctions.gur.gov.ua) using OSINT to identify companies supporting Russia.
  • Bellingcat Ukraine — https://www.bellingcat.com/tag/ukraine/ — extensive OSINT investigations.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Ukrainska Pravda, Kyiv Independent, Suspilne, Babel, Levyi Bereg.
• Investigative NGOs: Bihus.Info (https://bihus.info), Nashi Groshi, Slidstvo.Info.

Country-Specific OSINT Tools

• YouControl — business registry aggregator (free for basic lookups).
• Prozorro — public procurement transparency (gold standard).
• EDR — Ministry of Justice registry.
• War Sanctions (war-sanctions.gur.gov.ua) — OSINT-based list of companies supporting Russian war.

Legal Considerations

• Martial law (ongoing since February 2022) — restricts access to certain geographic and military information.
• Data protection: Ukrainian Law on Personal Data Protection (2010, modified 2020).
• OPSEC: Investigators operating in or on Ukraine during wartime should follow Ukrainian government OSINT guidelines to avoid compromising military operations.

Notable Cases

• Bucha investigation (2022). Bellingcat and NYT used satellite imagery (Maxar) to confirm that civilian bodies were on Yablunska Street during Russian occupation. URLs: https://www.bellingcat.com/news/uk-and-europe/2022/05/23/bucha-cleaning-up-the-streets-and-the-evidence/ · https://www.nytimes.com/2022/04/04/world/europe/bucha-ukraine-bodies.html
• MH17 (2014). Joint investigation with Bellingcat using OSINT on Russian military equipment crossing the border.

Digital Landscape

Internet penetration ~73% (1.05 billion users, CNNIC 2024). The Great Firewall blocks Google, Facebook, X, WhatsApp, YouTube, Telegram and most Western platforms. Baidu is the dominant search engine (~70% market share). WeChat (Weixin) is the universal super-app; Weibo is the main microblog; Douyin (Chinese TikTok) dominates short video; Xiaohongshu (RED) is the lifestyle social platform; Bilibili is the youth video platform.

Intelligence Agency & OSINT Tradecraft

• Civilian intelligence agency: Ministry of State Security (MSS) — https://www.gov.cn
• Military intelligence: The PLA Strategic Support Force (SSF) was disbanded in April 2024 and replaced by the Information Support Force (ISF) — verified by IISS: https://www.iiss.org/online-analysis/online-analysis/2024/05/chinas-new-information-support-force ⚠️ 403, and CNA: https://www.cna.org/our-media/indepth/2024/08/chinese-information-support-force. The ISF consolidates cyber, electronic warfare, and information operations.
• OSINT unit / tradecraft: The MSS has a Cyber Bureau responsible for offensive cyber operations. The PLA ISF conducts intelligence collection through cyber means. Both use OSINT as part of targeting for espionage.
• Publicly verifiable tradecraft points:
  • Recorded Future research on Chinese AI military intelligence — https://www.recordedfuture.com/research/artificial-eyes-generative-ai-chinas-military-intelligence — documents PLA use of generative AI for intelligence.
  • US DoD Annual Report on Military and Security Developments Involving the PRC (2024) — https://media.defense.gov/2024/dec/18/2003615520/-1/-1/0/military-and-security-developments-involving-the-peoples-republic-of-china-2024.pdf — public report on Chinese military capabilities including cyber.
• What is NOT verified (myth-busting):
  • "China uses social credit score as mass surveillance tool" — the social credit system is real but fragmented across provinces; the dystopian version portrayed in Western media is exaggerated.
  • "Every Chinese student abroad is a spy" — this is a harmful stereotype; documented cases of student informants are rare.

Government Sources (Verified URLs)

Note: Most Chinese government portals are slow or block foreign IPs. Use China-based VPN (legality varies) or third-party commercial aggregators like Sayari, Sayari Graph, or ChinаFAQs.

Local Sources & Press

• Domestic (state-controlled): Xinhua, People's Daily, China Daily, Global Times, Caixin (most independent of major outlets).
• Independent / diaspora: China Digital Times (https://chinadigitaltimes.net), The China Project (formerly SupChina, https://thechinaproject.com, ceased operations 2024), ChinaFile (https://www.chinafile.com).
• Investigative NGOs: ASPI Australian Strategic Policy Institute (https://www.aspi.org.au) — Xinjiang Data Project documenting detention camps (https://xjdp.aspi.org.au).
• OSINT community: Chinese-speaking OSINT community is small due to censorship. GlobeTowns (Twitter/X), ChinaAnalysts.

Country-Specific OSINT Tools

• National Enterprise Credit Information Publicity System (gsxt.gov.cn) — official business registry (requires China-based access).
• ASPI Xinjiang Data Project — https://xjdp.aspi.org.au — database of detention camps.
• ChinaFile Documentary Center — https://www.chinafile.com/documentary-center — leaked documents and reports.
• China Digital Times — https://chinadigitaltimes.net — censored content archive.
• Sayari Graph (commercial) — corporate network analysis with strong China coverage.
• Shahit.biz (Xinjiang Victims Database) — https://shahit.biz/eng/ ✅ — database of detained Uyghurs and other minorities.

Legal Considerations & OPSEC

• Cybersecurity Law (2017) and Data Security Law (2021) — strict regulations on data handling, cross-border data transfer.
• Personal Information Protection Law (PIPL, 2021) — China's GDPR-equivalent.
• National Intelligence Law (2017) — requires Chinese organisations and citizens to "support, assist and cooperate with national intelligence efforts" — applies extraterritorially to Chinese nationals abroad.
• VPN legality: Personal VPN use is technically illegal but widely tolerated. Commercial VPN providers must register with the government; many Western VPNs are blocked.
• OPSEC for investigators: Do not investigate Chinese targets from within China. Use a non-Chinese VPN. Do not contact sources via WeChat (monitored). Use Signal or ProtonMail.

Notable Cases

• ASPI Xinjiang Data Project (2020). Mapped 380+ detention camps in Xinjiang using satellite imagery, government procurement documents, and leaked construction bids. URL: https://xjdp.aspi.org.au
• Pegasus Project (2021). Forbidden Stories and Amnesty International investigation documented use of Pegasus spyware against Uyghur activists.

North Korea (DPRK)

Digital Landscape

Internet penetration <1% of the population. The country uses Kwangmyong, a closed intranet, instead of the global internet. Mobile phones (~6 million subscribers on Koryolink) are restricted to domestic calls and Kwangmyong. Foreign diplomats and elites have limited internet access.

Intelligence Agency & OSINT Tradecraft

• Main intelligence agency: Reconnaissance General Bureau (RGB), under the Korean People's Army. URL: https://en.wikipedia.org/wiki/Reconnaissance_General_Bureau (Wikipedia, official RGB page is not publicly accessible).
• Cyber operations: Bureau 121, the cyber warfare unit, operates from North Korea and overseas (notably from China, Malaysia, and other countries with DPRK diplomatic presence).
• OSINT unit / tradecraft: DPRK uses OSINT for foreign intelligence collection, primarily through Bureau 35 (foreign intelligence gathering).
• Publicly verifiable tradecraft points:
  • HRNK report on RGB — https://www.hrnk.org/documentations/the-reconnaissance-general-bureau-the-kim-regimes-precious-treasured-sword — documents RGB structure and operations.
  • 38 North OSINT interview — https://www.38north.org/2024/12/open-source-intelligence-and-north-korea-an-interview-with-uk-air-vice-marshal-ret-sean-corbetten — interview on OSINT use for DPRK monitoring.
• Korea Herald on RGB expansion — https://www.koreaherald.com/article/10805054.

Government Sources (Verified URLs)

North Korea has no publicly accessible government databases. All OSINT on DPRK uses external sources:

Local Sources & Press

• External: NK News, 38 North, Daily NK (https://www.dailynk.com), Korea Herald, Yonhap (South Korean news agency).
• Defector organisations: Daily NK (sources inside DPRK), North Korea Strategy Center (https://nksc.co.kr).
• OSINT community: CSIS Beyond Parallel (https://beyondparallel.csis.org), Center for Strategic and International Studies Korea Chair.

Country-Specific OSINT Tools

• 38 North — satellite imagery analysis of DPRK facilities.
• NK News — comprehensive news aggregator.
• Daily NK — sources inside DPRK.
• CSIS Beyond Parallel — satellite imagery and analysis.
• OpenSanctions DPRK datasets — UN sanctions list.

Legal & OPSEC Considerations

• Sanctions: North Korea is under comprehensive UN, US, EU sanctions. Any interaction with DPRK entities may violate sanctions.
• OPSEC: DPRK intelligence actively targets researchers, defectors, and journalists investigating the regime. Avoid contact with DPRK-affiliated entities.

Notable Cases

• Sony Pictures hack (2014). FBI attributed to North Korea's Bureau 121 (Lazarus Group). URL: https://www.fbi.gov/news/pressrel/press-releases/update-on-sony-investigation
• WannaCry ransomware (2017). Attributed to Lazarus Group by Google, Microsoft, and US government.
• DPRK IT worker fraud (2024-2025). DOJ indictments of DPRK IT workers using fake identities to obtain remote work at US companies. URL: https://www.fbi.gov/wanted/cyber/overview-of-dprk-it-worker-fraud-schemes

South Korea (ROK)

Digital Landscape

Internet penetration ~98% (KISA 2024). Naver (~70% market share) and Daum/Kakao dominate search over Google. KakaoTalk is the universal messaging app (~95% of smartphone users). X, Instagram, YouTube, Facebook are the main social platforms. South Korea has one of the world's most advanced OSINT ecosystems.

Intelligence Agency & OSINT Tradecraft

• Main agency: National Intelligence Service (NIS) — https://www.nis.go.kr/ENG/main/main.do (URL returned 404 in our verification; official NIS site is at https://www.nis.go.kr, mostly Korean-language).
• Defence intelligence: Defence Intelligence Agency (국군정보사령부, KDIA).
• OSINT unit / tradecraft: NIS acknowledges OSINT collection; the public NIS Act regulates intelligence activity. The South Korean government has a sophisticated OSINT capability focused on DPRK monitoring.
• Publicly verifiable tradecraft points:
  • Asia Society report on ROK intelligence — https://asiasociety.org/korea/risks-intelligence-failure-rok-and-why-it-matters — documents intelligence reform efforts.
  • OSINT landscape in South Korea (Lukio blog) — https://osintteam.blog/overview-of-the-osint-landscape-in-south-korea-61b699276339 ✅ — comprehensive overview of OSINT tools for Korean sources.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Hankyoreh, Chosun Ilbo, JoongAng Ilbo, Dong-a Ilbo, Korea Herald, Yonhap (news agency), Korea Joongang Daily (English).
• Investigative NGOs: Newstapa (https://www.newstapa.com), News Cokeba, SisaIN.
• OSINT community: OSINT Korea community, Lukio blog (https://osintteam.blog).

Country-Specific OSINT Tools

• Hometax — tax authority business registration lookup.
• NICE — business credit information.
• DART — financial supervisory disclosures.
• YouthBoBo (유스보보) — people search engine.
• KakaoTalk account lookup — phone number to KakaoTalk account matching (grey-market).

Legal Considerations

• Personal Information Protection Act (PIPA, 2011) — strict data protection law, stronger than GDPR in some aspects.
• Access to information: Official Information Disclosure Act (1998).
• National Security Law (1948) — restricts content promoting North Korea; criminalises praise of DPRK.
• SLAPP risk: Criminal defamation suits are common against journalists.

Notable Cases

• 2016 Park Geun-hye scandal. Investigation led by JTBC journalist Seo Won-choi, using leaked tablet computer contents. URL: https://en.wikipedia.org/wiki/2016_South_Korean_political_scandal

Digital Landscape

Internet penetration ~93% (MIC 2024). Google (~75%) and Yahoo! Japan (~25%) dominate search. LINE is the dominant messaging app (~85 million users). X (Twitter) is unusually popular in Japan (~60 million users); Facebook, Instagram, TikTok are major platforms. Japan has a strong cybersecurity community and is building up its intelligence apparatus.

Intelligence Agency & OSINT Tradecraft

• Cabinet Intelligence and Research Office (CIRO) — https://www.cas.go.jp/jp/gaiyou/jimu/jyouhoutyousa/en/index.html ✅ — Japan's primary intelligence coordinating body.
• Public Security Intelligence Agency (PSIA) — https://www.moj.go.jp/ENGLISH/information/psia.html (URL returned 404 in our verification; the actual PSIA English page is at https://www.moj.go.jp/psia/).
• Defence intelligence: Defence Intelligence Headquarters (DIH / 調査部).
• NEW: Japan announced in July 2026 the creation of its first centralised intelligence agency — https://www.aljazeera.com/news/2026/7/13/what-is-japans-new-intelligence-agency-and-why-is-tokyo-building-it
• OSINT unit / tradecraft: CIRO has an OSINT section. Japan's intelligence apparatus is being re-engineered (https://thediplomat.com/2026/06/japan-is-re-engineering-its-intelligence-apparatus).
• Publicly verifiable tradecraft points:
  • The 2022 National Security Strategy explicitly elevated intelligence reform.
  • CIRO public information — https://www.cas.go.jp/jp/gaiyou/jimu/jyouhoutyousa/en/index.html ✅ — public-facing CIRO information.

Government Sources (Verified URLs)

Note: Japan's corporate registry (法務局, Hōmukyoku) is not freely accessible online — it requires physical visit or proxy request. Commercial aggregators like Teikoku Databank, TDB, and Tokyo Shoko Research (TSR) provide business information for a fee.

Local Sources & Press

• Quality press: Yomiuri Shimbun, Asahi Shimbun, Mainichi Shimbun, Nihon Keizai Shimbun (Nikkei), NHK (public broadcaster), Japan Times (English), Kyodo News (news agency).
• Investigative NGOs: FactCheck Center (https://factcheckcenter.jp), FactCheck Initiative Japan (FIJ).
• OSINT community: Japan OSINT community (Twitter/X, Discord), Japan Cybersecurity Conference.

Country-Specific OSINT Tools

• Teikoku Databank — commercial corporate information database.
• Tokyo Shoko Research (TSR) — commercial business information.
• JPO (Japan Patent Office) — patent search.
• e-Stat — official government statistics portal.
• LINE account lookup — phone number to LINE account matching (grey-market, similar to Kakao).
• FactCheck Center — Japanese fact-checking organisation.

Legal Considerations

• Act on the Protection of Personal Information (APPI, 2003, amended 2022) — Japan's data protection law. Regulated by Personal Information Protection Commission (PPC).
• Access to information: Act on Access to Information Held by Administrative Organs (1999).
• Specially Designated Secrets Act (2013) — criminalises leaking of national security secrets, including by journalists who report on them.
• SLAPP risk: Low. Defamation cases typically result in monetary damages.
• Note on corporate registries: Japan's corporate registry is notably less accessible than Western equivalents; physical presence or paid proxy is required for full access.

Notable Cases

• AUM Shinrikyo sarin attack (1995). Investigation used OSINT on the cult's publications to build understanding of the attack.
• 2024-2026 Japan intelligence reform — creation of new centralised agency is in response to changing regional security environment.

Digital Landscape

Internet penetration ~90% (Central Bureau of Statistics 2024). Google dominates search. WhatsApp is the dominant messaging app (~80% of smartphone users); Telegram has significant penetration. X, LinkedIn, Facebook, Instagram are the main social platforms. Israel has one of the world's most advanced cybersecurity and OSINT ecosystems (Check Point, NSO Group, Cellebrite, Cobwebs, Toka).

Intelligence Agency & OSINT Tradecraft

• External intelligence agency: The Mossad (HaMossad leModi'in uleTafkidim Meyuchadim) — https://www.mossad.gov.il/eng ✅.
• Internal security service: Shabak / Israel Security Agency (ISA) — https://www.shabak.gov.il.
• Signals intelligence: Unit 8200 (military intelligence unit under IDF).
• OSINT unit / tradecraft: Israel does not publicly detail OSINT directorates. Unit 8200 is widely understood to have sophisticated OSINT capabilities alongside SIGINT, but specific tradecraft is classified.
• Publicly verifiable tradecraft points:
  • Israel's intelligence community is the subject of extensive academic and journalistic coverage (Ronen Bergman's Rise and Kill First, 2018 — public source).
  • Bellingcat Israel/Palestine investigations — https://www.bellingcat.com/category/regions/mena/israel-palestine/ — demonstrate OSINT methodology applied to the region.
• What is NOT verified (myth-busting):
  • "Mossad taught the CIA everything" — this is myth; both agencies developed independently with periods of cooperation and competition.
  • "Unit 8200 produces all cybersecurity CEOs" — many Israeli cybersecurity founders are Unit 8200 alumni, but this is correlation not causation; many non-alumni are also successful.
  • Specific Mossad operations depicted in films (Munich, Operation Finale) are dramatised versions of real events; do not treat dramatisations as accurate tradecraft.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press (English): Haaretz (https://www.haaretz.com), Jerusalem Post (https://www.jpost.com), Times of Israel (https://www.timesofisrael.com), Ynet News (https://www.ynetnews.com).
• Quality press (Hebrew): Haaretz, Yedioth Ahronoth, Maariv, Israel Hayom.
• Investigative NGOs: +972 Magazine (https://972mag.com, independent), B'Tselem (https://www.btselem.org, human rights), Breaking the Defense (veterans' testimonies).
• OSINT community: IntelSky, FakeReporter (disinformation watchdog).

Country-Specific OSINT Tools

• Israel Companies Registrar (ica.justice.gov.il) — corporate registry.
• Nevo — comprehensive legal database.
• data.gov.il — government open data.
• FakeReporter — disinformation tracking.
• B'Tselem — human rights documentation.
• +972 Magazine — independent journalism.

Legal Considerations

• Privacy Protection Law (1981, amended 2017) — Israel's data protection law. Regulated by the Privacy Protection Authority (PPA).
• Freedom of Information Law (1998) — Israeli FOIA.
• Military censorship: Israel has a military censor with authority to review certain publications related to national security. Investigators should be aware of this if publishing on military affairs.
• Defamation: Strong defamation laws; criminal defamation is theoretically possible but rare.
• OPSEC: Israel is an active conflict zone; investigators should follow government safety guidelines.

Notable Cases

• Bellingcat Israel/Palestine investigations — multiple OSINT investigations into specific incidents in the Israel-Palestine conflict. URL: https://www.bellingcat.com/category/regions/mena/israel-palestine/
• Pegasus Project (2021) — Forbidden Stories and Amnesty International investigation into NSO Group's Pegasus spyware. URL: https://forbiddenstories.org/about-the-pegasus-project/

Digital Landscape

Internet penetration ~84% (StatCounter 2024), but the internet is heavily filtered and slowed. Google, WhatsApp, Instagram and Telegram are the main platforms but are subject to frequent throttling and blocking. Telegram is the primary source of news for many Iranians (~50 million users pre-2022 blocking; many now use VPN). Domestic platforms include Eitaa, Bale, and Soroush (state-promoted alternatives). The 2022 Mahsa Amini protests saw near-total internet blackouts.

Intelligence Agency & OSINT Tradecraft

• Civilian intelligence agency: Ministry of Intelligence (MOIS, Vezarat-e Ettela'at) — https://www.mois.ir (intermittently accessible).
• Revolutionary Guard intelligence: IRGC Intelligence Organization (سازمان اطلاعات سپاه) — increasingly powerful; parallel to MOIS.
• Cyber operations: IRGC Cyber Command conducts offensive cyber operations. Multiple APT groups attributed to Iran (APT33, APT34, APT35/Charming Kitten, APT39).
• OSINT unit / tradecraft: Iran uses OSINT for targeting dissidents abroad and monitoring domestic opposition. The IRGC has been documented using OSINT to identify protesters from social media posts.
• Publicly verifiable tradecraft points:
  • FalconFeeds.io Iran cyber operatives report — https://falconfeeds.io/blogs/iran-cyber-operatives-irgc-mois-state-attribution-2026 — documents Iranian cyber operators.
  • Iran International on Charming Kitten — https://content.iranintl.com/secret-spy-unit-leads-irans-intel-gathering-for-surveillance-deadly-plots/ — exposes Iranian surveillance unit.
  • OSINT Industries webinar on Iran attribution — https://www.osint.industries/webinar/unmasking-irans-cyber-fronts-an-osint-guide-to-irgc-attribution.
• What is NOT verified: Specific IRGC tradecraft details are largely speculative in open sources.

Government Sources (Verified URLs)

Note: Iranian government portals are intermittently accessible from outside Iran. Use Iranian diaspora sources for verification.

Local Sources & Press

• Independent (in exile): Iran International (https://iranintl.com ✅), Radio Farda (https://en.radiofarda.org), IranWire (https://iranwire.com), BBC Persian, Voice of America Persian.
• Domestic (state-controlled): IRNA, Tasnim, Fars News, ISNA.
• Investigative NGOs: Center for Human Rights in Iran (CHRI, https://www.iranhumanrights.org), Iran Human Rights (IHR, https://iranhr.net).
• OSINT community: Iran-discovery OSINT channels on Telegram, conflict OSINT communities.

Country-Specific OSINT Tools

• Iran International — exile news with OSINT investigations.
• IranWire — exile journalism.
• Iran Open Data — https://iranopendata.org — open data portal.
• Center for Human Rights in Iran — human rights documentation.
• Telegram channels — primary source for real-time OSINT on Iranian events.
• HackerTen — Iranian hacker community tracker.

Legal & OPSEC Considerations

• Computer Crimes Law (2009) — criminalises "spreading lies" online, posting content against the state.
• Press Law (1986) — restricts journalism; licenses required.
• No GDPR-equivalent: Iran has limited personal data protection.
• OPSEC: Iranian intelligence actively targets diaspora investigators and journalists. Documented cases of kidnapping and assassination plots. Use sock puppets, VPN, encrypted communications. Do not contact sources via Iranian platforms (monitored).
• Sanctions: Iran is under comprehensive US, EU sanctions. Any interaction with Iranian entities may violate sanctions.

Notable Cases

• Mahsa Amini protests (2022). Extensive OSINT documentation of protests and repression, despite internet blackouts. NGOs like HRANA and Iran Human Rights compiled casualty lists using OSINT.
• Charming Kitten exposure (2024). Iran International exposed the IRGC surveillance unit behind targeting of dissidents.

Digital Landscape

Internet penetration ~99% (CITC 2024, one of the highest in the world). Google dominates search. WhatsApp is the dominant messaging app; Snapchat is unusually popular (~20 million users). X (Twitter) is the main platform for political discourse. The Saudi government has invested heavily in Vision 2030 digital transformation.

Intelligence Agency & OSINT Tradecraft

• Main intelligence agency: General Intelligence Presidency (GIP, Ri'asat al-Istikhbarat al-'Amma) — no public English website. URL: https://www.gip.gov.sa (intermittent).
• State Security: Presidency of State Security (PSS) — established 2017 to oversee counter-terrorism and domestic intelligence.
• Cyber operations: Saudi Arabia has built up cyber capabilities; the National Cybersecurity Authority (NCA) regulates and oversees cyber defence.
• OSINT unit / tradecraft: GIP uses OSINT for monitoring domestic and regional opposition. Specific tradecraft is classified.
• Publicly verifiable tradecraft points:
  • Saudi Arabia's use of Pegasus spyware (NSO Group) against dissidents is documented by Citizen Lab (https://citizenlab.ca/tag/saudi-arabia/).
  • The 2018 Jamal Khashoggi assassination used OSINT to identify the Saudi hit team (Bellingcat investigation, https://www.bellingcat.com/news/mena/2018/10/24/the-mystery-of-the-first-saudi-hit-team-flight-to-istanbul/).
• What is NOT verified: Specific GIP tradecraft details are not publicly available.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: Arab News, Asharq Al-Awsat, Al Arabiya, Al Hadath, Saudi Gazette.
• Investigative NGOs: ALQST (https://alqst.org, human rights), Democracy for the Arab World Now (DAWN, https://dawnmena.org).
• OSINT community: Limited due to political restrictions; most Saudi OSINT analysis is done by exile organisations.

Country-Specific OSINT Tools

• Ministry of Commerce business registry — corporate lookup.
• Umm Al-Qura — official gazette.
• Saudi Open Data Portal — government data.
• ALQST — human rights documentation.
• DAWN — advocacy and documentation.

Legal & OPSEC Considerations

• Anti-Cyber Crime Law (2007) — broad provisions criminalising "production, preparation, transmission, or storage of material impinging on public order, religious values, public morals, and privacy".
• Personal Data Protection Law (PDPL, 2021, amended 2023) — Saudi Arabia's data protection law. Regulated by SDAIA.
• Counter-Terrorism Law (2017) — broad provisions used against dissidents and investigators.
• OPSEC: Saudi Arabia has documented history of targeting dissidents abroad (Khashoggi case). Investigators should use sock puppets, VPN, encrypted communications. Avoid travel to Saudi Arabia if investigating sensitive topics.
• Defamation: Criminal defamation with prison sentences; blasphemy punishable by death.

Notable Cases

• Jamal Khashoggi assassination (2018). Bellingcat identified the Saudi hit team through flight manifests and passport photos. URL: https://www.bellingcat.com/news/mena/2018/10/24/the-mystery-of-the-first-saudi-hit-team-flight-to-istanbul/
• Pegasus surveillance (2019-2024). Citizen Lab documented Saudi use of Pegasus against dissidents. URL: https://citizenlab.ca/tag/saudi-arabia/

Digital Landscape

Internet penetration ~83% (BTK 2024). Google dominates search; Yandex has ~20% market share. WhatsApp is the dominant messaging app (~75% of smartphone users); Telegram is widely used. X (Twitter) is the primary political discourse platform (~16 million users); YouTube, Instagram, Facebook, TikTok are major platforms. Turkey has a vibrant but heavily pressured media ecosystem.

Intelligence Agency & OSINT Tradecraft

• Main intelligence agency: Millî İstihbarat Teşkilatı (MIT, National Intelligence Organization) — https://www.mit.gov.tr ⚠️ Timeout.
• Military intelligence: Intelligence Department of General Staff (now under Ministry of National Defence).
• OSINT unit / tradecraft: MIT has an OSINT branch. Turkish intelligence has been documented using OSINT to identify coup plotters, Kurdish activists, and Gülen movement members.
• Publicly verifiable tradecraft points:
  • MIT's legal basis is Law No. 2937 on the State Intelligence Services and the National Intelligence Organization (https://www.mevzuat.gov.tr/mevzuatmetin/1.5.2937.pdf).
  • Turkey has been documented using Pegasus spyware (Citizen Lab reports).
  • MIT informant leaks (2020-2022) — Nordic Monitor (https://nordicmonitor.com) published leaked MIT documents revealing OSINT-based targeting of dissidents abroad.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press (pro-government): Sabah, Daily Sabah (English), Yeni Şafak, Anadolu Agency (state news).
• Quality press (independent/opposition): Sözcü, Cumhuriyet, BirGün, Diken, T24, Artı Gerçek (https://artigercek.com).
• Investigative NGOs: P24 (Platform for Independent Journalism, https://p24.com.tr), Stockholm Center for Freedom (https://stockholmcf.org, exile), Nordic Monitor (https://nordicmonitor.com, exile).
• OSINT community: Limited due to political pressure; exile OSINT communities like SCF and Nordic Monitor fill the gap.

Country-Specific OSINT Tools

• MERSİS — Central Registry System for business lookup.
• e-Devlet — government services portal (requires Turkish ID).
• Trade Registry Gazette — official commercial announcements.
• Resmi Gazete — official gazette.
• Nordic Monitor — leaked MIT documents.
• Stockholm Center for Freedom — exile human rights documentation.

Legal & OPAC Considerations

• Personal Data Protection Law (KVKK, 2018) — Turkey's data protection law. Regulated by KVKK Authority.
• Law on the Right to Information (2003) — Turkish FOIA.
• Anti-Terror Law (1991) — broad provisions used against journalists and investigators.
• Disinformation law (October 2022) — criminalises "disinformation" with up to 3 years imprisonment.
• OPSEC: Turkey has documented history of targeting dissidents abroad (kidnappings of Gülenists). Investigators should use sock puppets, VPN, encrypted communications.
• SLAPP risk: High. Turkey is one of the world's largest jailers of journalists.

Notable Cases

• 2016 coup attempt investigation — MIT used OSINT to identify coup plotters; thousands were arrested based on this analysis.
• Nordic Monitor MIT leaks (2020-2022) — exposed MIT informant network and targeting of dissidents abroad. URL: https://nordicmonitor.com.

Digital Landscape

Internet penetration ~91% (ABS 2024). Google dominates search. WhatsApp, iMessage, Messenger dominate messaging. X, LinkedIn, Facebook, Instagram, Reddit are the main social platforms. Australia has a strong OSINT and intelligence studies community (ASPI, Australian National University, ANU National Security College).

Intelligence Agency & OSINT Tradecraft

• Domestic security agency: Australian Security Intelligence Organisation (ASIO) — https://www.asio.gov.au
• External intelligence agency: Australian Secret Intelligence Service (ASIS) — https://www.asis.gov.au
• Signals intelligence: Australian Signals Directorate (ASD) — https://www.asd.gov.au
• Intelligence coordination: Office of National Intelligence (ONI) — https://www.ni.gov.au — includes the Open Source Centre (OSC) which coordinates OSINT across the Australian Intelligence Community.
• OSINT unit / tradecraft: ONI's Open Source Centre is the publicly attributed Australian OSINT body. It was established in 2019 (modeled on CIA OSE).
• Publicly verifiable tradecraft points:
  • Intelligence Services Act 2001 — https://www.legislation.gov.au/Details/C2018C00384 — regulates Australian intelligence agencies including OSINT collection.
  • ASD's Annual Cyber Threat Report — https://www.cyber.gov.au/about-us/reports-and-statistics/asds-annual-cyber-threat-report — uses OSINT alongside classified sources.

Government Sources (Verified URLs)

Local Sources & Press

• Quality press: ABC (Australian Broadcasting Corporation, https://www.abc.net.au ✅), The Guardian Australia (https://www.theguardian.com/au), Sydney Morning Herald (https://www.smh.com.au), The Age, The Australian.
• Investigative NGOs: Australian Strategic Policy Institute (ASPI, https://www.aspi.org.au), International Consortium of Investigative Journalists (ICIJ, Australian involvement).
• OSINT community: ASPI, Australian National University National Security College, OSINT Australia community.

Country-Specific OSINT Tools

• ABN Lookup — free business registry lookup.
• ASIC Connect — corporate registry.
• Open Politics — https://openpolitics.au/search — Australian political donations and interests.
• Ryerson Index — http://ryersonindex.org/search.php — death notices index.
• ASPI Xinjiang Data Project — https://xjdp.aspi.org.au — Xinjiang detention camps database.

Legal Considerations

• Privacy Act 1988 — Australia's federal data protection law. Regulated by Office of the Australian Information Commissioner (OAIC).
• Freedom of Information Act 1982 — federal FOIA.
• Defamation law (reformed 2021) — added "serious harm" threshold; anti-SLAPP provisions in some states.
• OPSEC: Generally safe environment for investigators.

Notable Cases

• ASPI Xinjiang Data Project (2020). Mapped 380+ detention camps in Xinjiang using satellite imagery, government procurement documents, and leaked construction bids. URL: https://xjdp.aspi.org.au
• Australian SIGNT/OSINT investigation into MH17 — ASD contributed OSINT to the joint investigation.