Regional OSINT

Lead civilian foreign-intelligence agency: Central Intelligence Agency (CIA) — https://www.cia.gov ✅

Lead signals-intelligence agency: National Security Agency (NSA) — https://www.nsa.gov

Federal law-enforcement & domestic intel: Federal Bureau of Investigation (FBI) — https://www.fbi.gov

ODNI Intelligence Community Open Source Strategy 2024-2026 — https://www.dni.gov/files/ODNI/documents/IC_OSINT_Strategy.pdf ⚠️ 403 to bots, downloadable in any browser. This is the first public IC document that formally elevates OSINT to a first-tier INT alongside HUMINT/SIGINT/GEOINT/MASINT.

Main agency: Agência Brasileira de Inteligência (ABIN), subordinated to the Institutional Security Cabinet (GSI/PR). Public site: https://www.gov.br/abin/en

Main agency: Centro de Investigación y Seguridad Nacional (CISEN) was replaced in December 2018 by the Centro Nacional de Inteligencia (CNI) under the Secretariat of Security and Citizen Protection (SSPC). Public reference: https://www.gob.mx/sspc/cni

https://en.wikipedia.org/wiki/Centro_de_Investigación_y_Seguridad_Nacional

https://www.gob.mx/sspc

https://en.wikipedia.org/wiki/Secretariat_of_Intelligence

https://www.batimes.com.ar/news/argentina/milei-overhauls-argentinas-side-intelligence-services-by-decree.phtml

Main civilian agency: Canadian Security Intelligence Service (CSIS) — https://www.csis-scrs.gc.ca

Signals intelligence agency: Communications Security Establishment (CSE) — https://www.cse-cst.gc.ca

https://www.csis-scrs.gc.ca/en/operations.php

https://www.cse-cst.gc.ca/en/who-we-are/mandate

Lead foreign-intelligence agency: Secret Intelligence Service (SIS / "MI6") — https://www.sis.gov.uk ⚠️ 403 to bots, live in browser.

Lead signals-intelligence & cyber agency: Government Communications Headquarters (GCHQ) — https://www.gchq.gov.uk ✅. Includes the National Cyber Security Centre (NCSC) — https://www.ncsc.gov.uk ✅.

Domestic security service: Security Service (MI5) — https://mi5.gov.uk.

GCHQ's legal basis is the Investigatory Powers Act 2016 ("Snooper's Charter"); bulk personal datasets and bulk interception warrants are reviewed by the Investigatory Powers Commissioner's Office (IPCO) — public reports at https://ipco.org.uk.

NCSC publishes the Early Warning service (free to UK organisations) which is OSINT + sinkhole data — https://www.ncsc.gov.uk/section/services/early-warning.

Foreign intelligence agency: Bundesnachrichtendienst (BND) — https://www.bnd.bund.de

Domestic intelligence agency (Verfassungsschutz): Bundesamt für Verfassungsschutz (BfV) — https://www.verfassungsschutz.de

Military intelligence: Militärischer Abschirmdienst (MAD) — https://www.bmvg.de/de/organisation/mad

BND's legal basis is the BND-Gesetz (BND Act, 2020) — https://www.gesetze-im-internet.de/bndg/, which explicitly regulates OSINT collection.

BfV publishes *Verfassungsschutzbericht* annually (https://www.verfassungsschutz.de/de/oeffentlichkeitsarbeit/publikationen/publikationsarchiv) — uses OSINT to map extremism.

Federal Office for Information Security (BSI) — https://www.bsi.bund.de — publishes threat reports based on OSINT.

External intelligence agency: Direction Générale de la Sécurité Extérieure (DGSE) — https://www.dgse.gouv.fr ✅

Internal intelligence agency: Direction Générale de la Sécurité Intérieure (DGSI) — https://www.dgsi.gouv.fr

OSINT unit / tradecraft: No publicly named OSINT directorate. DGSE and DGSI acknowledge OSINT as part of their collection disciplines in annual public reports to Parliament (https://www.assemblee-nationale.fr/dyn/15/rapplets).

Loi 2015-1556 (anti-terrorist intelligence law) — https://www.legifrance.gouv.fr/eli/loi/2015/11/30/DEFX1414385L/jo/texte — explicitly regulates OSINT collection by French intelligence.

CNCTR (Commission Nationale de Contrôle des Techniques de Renseignement) — https://www.cncctr.fr — public oversight reports on intelligence techniques including OSINT.

National intelligence agency: Centro Nacional de Inteligencia (CNI) — https://www.cni.es/en ✅

OSINT unit / tradecraft: CNI acknowledges OSINT as part of its collection disciplines. The public *Ley 11/1995* (https://www.boe.es/buscar/act.php?id=BOE-A-1995-22306) regulates intelligence activity including OSINT.

CCN-CERT (Centro Criptológico Nacional) — https://www.ccn-cert.cni.es/en/ — public cybersecurity incidents and threat reports based on OSINT.

INCIBE (Instituto Nacional de Ciberseguridad) — https://www.incibe.es — public threat intel.

External intelligence agency: Agenzia Informazioni e Sicurezza Esterna (AISE) — https://www.sicurezzanazionale.gov.it ✅

OSINT unit / tradecraft: AISE and AISI acknowledge OSINT collection. The annual *Relazione al Parlamento* (https://www.sicurezzanazionale.gov.it/pubblicazioni/relazione-annuale-al-parlamento) is public and references OSINT analysis.

Legge 124/2007 (Intelligence reform) — https://www.normattiva.it/uri-res/N2Ls?urn:nir:stato:legge:2007-08-03;124 — regulates intelligence activity.

ACN (Agenzia per la Cybersicurezza Nazionale) — https://www.acn.gov.it — public cybersecurity agency with OSINT-based threat reports.

External intelligence agency: Agencja Wywiadu (AW) — https://www.aw.gov.pl

Internal intelligence agency: Agencja Bezpieczeństwa Wewnętrznego (ABW) — https://www.abw.gov.pl

OSINT unit / tradecraft: AW and ABW acknowledge OSINT collection. The annual *Raport o stanie bezpieczeństwa* (https://www.bbn.gov.pl) references OSINT analysis.

Ustawa o Agencji Wywiadu (2002) — https://isap.sejm.gov.pl/isap.nsf/DocDetails.xsp?id=WDU2002065118 — regulates intelligence activity including OSINT.

NASK ARIA (Cybersecurity Response) — https://www.nask.pl/en — public threat reports based on OSINT.

External intelligence agency: Sluzhba Vneshney Razvedki (SVR) — https://www.svr.gov.ru

Military intelligence: Glavnoye Upravleniye General'nogo Shtaba (GRU) — https://structure.mil.ru/structure/forces/hq/general.htm

Domestic security service: Federal'naya Sluzhba Bezopasnosti (FSB) — https://www.fsb.ru

CSIS Russia Shadow War analysis — https://www.csis.org/analysis/russias-shadow-war-against-west ✅ — documents Russian intelligence tradecraft including OSINT use.

CheckFirst investigation on GRU Information Operations Troops — https://checkfirst.network/unveiling-grus-information-operations-troops-with-osint-and-medals — uses OSINT to map GRU units through medal analysis.

Bellingcat Russia investigations — https://www.bellingcat.com/category/regions/europe/russia/ — multiple investigations using Russian probiv databases.

External intelligence agency: Sluzhba Zovnishn'oyi Rozvidky (SZRU) — https://szru.gov.ua

Military intelligence: HUR (Holovne Upravlinnya Rozvidky) — https://www.gur.gov.ua

Molfar — Ukrainian OSINT agency (https://molfar.com).

Ukraine's National Agency for Corruption Prevention (NACP) maintains a public "International Sponsors of War" list (https://war-sanctions.gur.gov.ua) using OSINT to identify companies supporting Russia.

Bellingcat Ukraine — https://www.bellingcat.com/tag/ukraine/ — extensive OSINT investigations.

Civilian intelligence agency: Ministry of State Security (MSS) — https://www.gov.cn

Military intelligence: The PLA Strategic Support Force (SSF) was disbanded in April 2024 and replaced by the Information Support Force (ISF) — verified by IISS: https://www.iiss.org/online-analysis/online-analysis/2024/05/chinas-new-information-support-force ⚠️ 403, and CNA: https://www.cna.org/our-media/indepth/2024/08/chinese-information-support-force. The ISF consolidates cyber, electronic warf

Recorded Future research on Chinese AI military intelligence — https://www.recordedfuture.com/research/artificial-eyes-generative-ai-chinas-military-intelligence — documents PLA use of generative AI for intelligence.

US DoD Annual Report on Military and Security Developments Involving the PRC (2024) — https://media.defense.gov/2024/dec/18/2003615520/-1/-1/0/military-and-security-developments-involving-the-peoples-republic-of-china-2024.pdf — public report on Chinese military capabilities including cyber.

Cabinet Intelligence and Research Office (CIRO) — https://www.cas.go.jp/jp/gaiyou/jimu/jyouhoutyousa/en/index.html ✅ — Japan's primary intelligence coordinating body.

Public Security Intelligence Agency (PSIA) — https://www.moj.go.jp/ENGLISH/information/psia.html (URL returned 404 in our verification; the actual PSIA English page is at https://www.moj.go.jp/psia/).

NEW: Japan announced in July 2026 the creation of its first centralised intelligence agency — https://www.aljazeera.com/news/2026/7/13/what-is-japans-new-intelligence-agency-and-why-is-tokyo-building-it

OSINT unit / tradecraft: CIRO has an OSINT section. Japan's intelligence apparatus is being re-engineered (https://thediplomat.com/2026/06/japan-is-re-engineering-its-intelligence-apparatus).

External intelligence agency: The Mossad (HaMossad leModi'in uleTafkidim Meyuchadim) — https://www.mossad.gov.il/eng ✅.

Internal security service: Shabak / Israel Security Agency (ISA) — https://www.shabak.gov.il.

Bellingcat Israel/Palestine investigations — https://www.bellingcat.com/category/regions/mena/israel-palestine/ — demonstrate OSINT methodology applied to the region.

Civilian intelligence agency: Ministry of Intelligence (MOIS, Vezarat-e Ettela'at) — https://www.mois.ir (intermittently accessible).

FalconFeeds.io Iran cyber operatives report — https://falconfeeds.io/blogs/iran-cyber-operatives-irgc-mois-state-attribution-2026 — documents Iranian cyber operators.

Iran International on Charming Kitten — https://content.iranintl.com/secret-spy-unit-leads-irans-intel-gathering-for-surveillance-deadly-plots/ — exposes Iranian surveillance unit.

OSINT Industries webinar on Iran attribution — https://www.osint.industries/webinar/unmasking-irans-cyber-fronts-an-osint-guide-to-irgc-attribution.

Main intelligence agency: General Intelligence Presidency (GIP, Ri'asat al-Istikhbarat al-'Amma) — no public English website. URL: https://www.gip.gov.sa (intermittent).

Saudi Arabia's use of Pegasus spyware (NSO Group) against dissidents is documented by Citizen Lab (https://citizenlab.ca/tag/saudi-arabia/).

The 2018 Jamal Khashoggi assassination used OSINT to identify the Saudi hit team (Bellingcat investigation, https://www.bellingcat.com/news/mena/2018/10/24/the-mystery-of-the-first-saudi-hit-team-flight-to-istanbul/).

Main intelligence agency: Millî İstihbarat Teşkilatı (MIT, National Intelligence Organization) — https://www.mit.gov.tr ⚠️ Timeout.

MIT's legal basis is Law No. 2937 on the State Intelligence Services and the National Intelligence Organization (https://www.mevzuat.gov.tr/mevzuatmetin/1.5.2937.pdf).

Domestic security agency: Australian Security Intelligence Organisation (ASIO) — https://www.asio.gov.au

External intelligence agency: Australian Secret Intelligence Service (ASIS) — https://www.asis.gov.au

Signals intelligence: Australian Signals Directorate (ASD) — https://www.asd.gov.au

Intelligence coordination: Office of National Intelligence (ONI) — https://www.ni.gov.au — includes the Open Source Centre (OSC) which coordinates OSINT across the Australian Intelligence Community.

Intelligence Services Act 2001 — https://www.legislation.gov.au/Details/C2018C00384 — regulates Australian intelligence agencies including OSINT collection.

ASD's Annual Cyber Threat Report — https://www.cyber.gov.au/about-us/reports-and-statistics/asds-annual-cyber-threat-report — uses OSINT alongside classified sources.

Corporate filings (10-K, 10-Q, 13D, S-1), ⚠️ 403 bot-block, live in browser

Federal court records, ✅ 200

Sanctions / PEP screening, ✅ 200

Federal open data portal, ✅ 200

FOIA portal & requester info, ✅ 200

Presidential docs, rules, notices, ✅ 200

Federal case statistics & finder, ✅ 200

Federal contractor registry + exclusions, ✅ 200

Campaign finance data, ✅ 200

Business registry lookup

Registration/situation certificate

Federal official gazette

Print house & gazette archive

Federal procurement contracts

CEIS (sanctioned companies), public spending

Tax authority, RFC lookup, e.factura

Federal official gazette

DENUE business directory, census, statistics

Federal public procurement

Transparency / FOIA portal

Asset declarations, sanctions

National educational institutions registry

National official gazette

Tax authority, CUIT lookup

National corporate registry

National statistics

Justice open data

Electoral roll lookup

Federal corporate registry

Federal open data portal

Official gazette

Anti-spam compliance

National security oversight reports

UK companies registry (free, full, historical), ✅ 200

UK official public record, ✅ 200

Property ownership, ✅ 200

UK open data portal, ✅ 200

Hansard, committee reports, ✅ 200

Historical records, ✅ 200

UK PSC register, ⚠️ 403, live in browser

Federal business registry, ✅ 200

Federal gazette (annual financial statements), ✅ 200

UBO register (implementing EU AMLD), ✅ 200

Federal open data portal, ✅ 200

Federal statistics office, ✅ 200

Parliamentary records (DIP), ✅ 200

Commercial court registry, ✅ 200

Free corporate data aggregator, ⚠️ 403, live in browser

French open data portal, ✅ 200

Official legal gazette, ✅ 200

National statistics, ✅ 200

Bulletin officiel des annonces civiles et commerciales, ✅ 200

Commercial registry bulletin, ✅ 200

State official gazette, ✅ 200

Spanish open data portal, ✅ 200

Central commercial registry, ⚠️ requires login

Data protection authority, ✅ 200

Parliamentary records, ✅ 200

National business registry, ✅ 200

Official gazette, ✅ 200

Social security, ✅ 200

National statistics, ✅ 200

Data protection authority, ✅ 200

Italian open data portal, ✅ 200

National court registry, ✅ 200

Business search, ✅ 200

Open data portal, ✅ 200

Official journal of laws, ✅ 200

Data protection authority, ✅ 200

Parliamentary records, ✅ 200

Federal Tax Service, ✅ 200

Russian business registry, ⚠️ 307 redirect

Official legal portal, ⚠️ Timeout

Federal statistics, ✅ 200

Presidential administration, ✅ 200

Comprehensive business registry aggregator

Ministry of Justice registry

Public procurement (gold standard transparency)

Open data portal

Parliamentary records

National business registry, ⚠️ 521 — slow, may require China-based access

Credit information portal, ⚠️ 412

Stock exchange filings, ⚠️ Timeout

Stock exchange filings, ⚠️ Timeout

Court judgments (limited), ⚠️ Timeout

Tax authority, ⚠️ 403, live in browser

Corporate registry (commercial), ⚠️ Timeout

Legal portal, ✅ 200

Statistics portal, ✅ 200

Patent registry, ✅ 200

Corporate registry, ✅ 200

Court decisions, official publications, ✅ 200

Government open data, ✅ 200

Land registry, ⚠️ Timeout

Central bank, ✅ 200

Parliamentary records, ⚠️ Timeout

Corporate registry, ⚠️ Timeout

Official gazette, ⚠️ Timeout

Open data portal, ✅ 200

Central bank, ⚠️ Timeout

Business registry, ⚠️ Timeout

Official gazette, ✅ 200

Open data portal, ⚠️ Timeout

Open data portal, ⚠️ Timeout

Stock exchange, ⚠️ Timeout

Business registry, ⚠️ Timeout

Government services portal, ✅ 200

Chamber of commerce, ✅ 200

Official gazette, ✅ 200

Statistics institute, ✅ 200

Australian Business Register, ✅ 200

Business registry, ✅ 200

Government open data, ✅ 200

Legislation database, ✅ 200

Investigative NGOs: ProPublica (Pulitzer-winning nonprofit), International Consortium of Investigative Journalists (ICIJ) — https://www.icij.org ✅, Center for Public Integrity, OpenSecrets (https://www.opensecrets.org ⚠️ 403, live in browser), LittleSis (https://littlesis.org ✅).

Quality press: Folha de S.Paulo (https://www1.folha.uol.com.br), O Globo (https://oglobo.globo.com), Estadão (https://www.estadao.com.br), Valor Econômico (https://valor.globo.com).

Investigative / non-profit: Agência Pública (https://apublica.org), Agência Lupa (https://piaui.folha.uol.com.br/lupa/ fact-checking), The Intercept Brasil (https://theintercept.com/brasil/), Instituto Socioambiental (https://www.socioambiental.org).

Open-data portals: dados.gov.br (federal open data), TSE Eleições (https://divulgacandcontas.tse.jus.br) for electoral/campaign finance.

Investigative / non-profit: Chequeado (https://chequeado.com, fact-checking), Revista Anfibia (https://revistaanfibia.com), Centro de Implementación de Políticas Públicas para la Equidad y el Crecimiento (CIPPEC).

Investigative NGOs: Bureau of Investigative Journalism (https://www.thebureauinvestigates.com), OpenDemocracy, Finance Uncovered.

Investigative NGOs: Correctiv (https://correctiv.org/en ✅), Netzpolitik.org, Frag Den Staat (https://fragdenstaat.de, FOIA platform), OCCRP Germany partner.

Investigative NGOs: Mediapart (https://www.mediapart.fr/en/english ✅), StreetPress, Disclose (https://disclose.ngo).

OSINT community: OSINT-FR community (Discord), CFM News (https://cfmnews.fr).

Investigative NGOs: Civio (https://civio.es/en/ ✅), eldiario.es, Newtral (fact-checking), Maldita (fact-checking).

Investigative NGOs: IRPI (Investigative Reporting Project Italy, https://irpimedia.irpi.eu/en/ ✅), La Notizia (Fact-checking), FrontiereCriminali.

Quality press: Gazeta Wyborcza (https://wyborcza.pl ✅), Rzeczpospolita, Dziennik Gazeta Prawna, Polityka, OKO.press (https://oko.press ✅, investigative), Onet.

Investigative NGOs: OKO.press, Fundacja Batorego (https://www.batory.org.pl), ICPC Poland.

OSINT community: Sekurak (https://sekurak.pl), OSINT Polska (Telegram), 9wind's OSINT Poland GitHub (https://github.com/9wind/OSINT-Poland ✅).

Independent press (in exile): Meduza (https://meduza.io ✅, Riga-based), Novaya Gazeta Europe (https://novayagazeta.eu), The Moscow Times (https://www.themoscowtimes.com).

Investigative NGOs: OCCRP Russian partners, Bellingcat Russia desk, Agentstvo (https://agentstvo.net).

Investigative NGOs: Bihus.Info (https://bihus.info), Nashi Groshi, Slidstvo.Info.

Independent / diaspora: China Digital Times (https://chinadigitaltimes.net), The China Project (formerly SupChina, https://thechinaproject.com, ceased operations 2024), ChinaFile (https://www.chinafile.com).

Investigative NGOs: ASPI Australian Strategic Policy Institute (https://www.aspi.org.au) — Xinjiang Data Project documenting detention camps (https://xjdp.aspi.org.au).

Investigative NGOs: FactCheck Center (https://factcheckcenter.jp), FactCheck Initiative Japan (FIJ).

Quality press (English): Haaretz (https://www.haaretz.com), Jerusalem Post (https://www.jpost.com), Times of Israel (https://www.timesofisrael.com), Ynet News (https://www.ynetnews.com).

Investigative NGOs: +972 Magazine (https://972mag.com, independent), B'Tselem (https://www.btselem.org, human rights), Breaking the Defense (veterans' testimonies).

Independent (in exile): Iran International (https://iranintl.com ✅), Radio Farda (https://en.radiofarda.org), IranWire (https://iranwire.com), BBC Persian, Voice of America Persian.

Investigative NGOs: Center for Human Rights in Iran (CHRI, https://www.iranhumanrights.org), Iran Human Rights (IHR, https://iranhr.net).

Investigative NGOs: ALQST (https://alqst.org, human rights), Democracy for the Arab World Now (DAWN, https://dawnmena.org).

Quality press (independent/opposition): Sözcü, Cumhuriyet, BirGün, Diken, T24, Artı Gerçek (https://artigercek.com).

Investigative NGOs: P24 (Platform for Independent Journalism, https://p24.com.tr), Stockholm Center for Freedom (https://stockholmcf.org, exile), Nordic Monitor (https://nordicmonitor.com, exile).

Quality press: ABC (Australian Broadcasting Corporation, https://www.abc.net.au ✅), The Guardian Australia (https://www.theguardian.com/au), Sydney Morning Herald (https://www.smh.com.au), The Age, The Australian.

CourtListener (Free Law Project) — https://www.courtlistener.com ✅ — PACER alternative for federal appellate/district opinions and the RECAP archive.

OpenCorporates US state data — https://opencorporates.com — pulls from 50+ state SOS feeds.

OpenSanctions US datasets — https://www.opensanctions.org/datasets/ ✅ — FBI Most Wanted, OFAC SDN, BIS Denied Persons, SAM exclusions.

Sayari — https://sayari.com ⚠️ — commercial, strong on corporate-network construction.

Maltego — https://www.maltego.com ✅ — graph-based link analysis.

Recorded Future — https://www.recordedfuture.com ⚠️ — commercial threat intel.

OSINT Industries — https://osint.industries — email/username → linked accounts.

OSINT Brasil blog (https://osintbrasil.blogspot.com) — practitioner write-ups.

Provincial corporate registries — each province maintains its own (e.g. Ontario https://www.ontario.ca/page/search-and-buy-business-name-and-incorporation-information).

Hansard API — parliamentary debates (https://hansard.parliament.uk).

Wayback Machine UK Government snapshot archive — via UK Web Archive (https://www.webarchive.org.uk).

Frag Den Staat — FOIA platform (https://fragdenstaat.de) — sends and tracks freedom-of-information requests.

INSEE Sirene database — official business directory (https://www.sirene.fr).

OSINT Poland GitHub (https://github.com/9wind/OSINT-Poland) — curated list of Polish OSINT resources.

RuPEP (Russian Political Exposed Persons) — https://rupep.ru ⚠️ Timeout — database of Russian elites and PEPs.

ASPI Xinjiang Data Project — https://xjdp.aspi.org.au — database of detention camps.

Shahit.biz (Xinjiang Victims Database) — https://shahit.biz/eng/ ✅ — database of detained Uyghurs and other minorities.

Open Politics — https://openpolitics.au/search — Australian political donations and interests.

Ryerson Index — http://ryersonindex.org/search.php — death notices index.

Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030 — https://www.law.cornell.edu/uscode/text/18/1030 ✅. Post-*Van Buren v. United States* (2021) the Supreme Court narrowed "exceeds authorised access" but ToS-violation scraping with a login remains risky.

Data protection: LGPD — *Lei Geral de Proteção de Dados*, Law 13.709/2018, in force since 18 Sep 2020. Enforced by ANPD (https://www.gov.br/anpd).

Access to information: *Lei de Acesso à Informação* (LAI), Law 12.527/2011 — every citizen can request government records; FalaBR (https://falabr.cgu.gov.br) is the central portal.

Data protection: Ley 25.326 (2000), regulated by AAIP (https://www.argentina.gob.ar/aaip). Argentina has EU adequacy status.

Data protection: UK GDPR (post-Brexit, retained EU GDPR) + Data Protection Act 2018. Regulated by ICO (https://ico.org.uk).

Access to information: Freedom of Information Act 2000 (https://www.legislation.gov.uk/ukpga/2000/36/contents).

Data protection: GDPR (DSGVO in German) + Bundesdatenschutzgesetz (BDSG). Regulated by BfDI (https://www.bfdi.bund.de).

Data protection: GDPR + Loi Informatique et Libertés (1978, modified 2018). Regulated by CNIL (https://www.cnil.fr/en ✅).

MH17 (2014, Netherlands-led but Bellingcat-driven). Bellingcat used open VK posts, satellite imagery, geolocation of a Buk TELAR transport and matched social-media timestamps to attribute the downing of MH17 to Russian forces. Methodology PDF: https://www.bellingcat.com/app/uploads/2015/10/MH17-The-Open-Source-Evidence-EN.pdf ✅. The case is the textbook example of OSINT-as-evidence (used by the JI

January 6 Capitol riot (2021). Sedition Hunters (https://seditionhunters.org) and the FBI used Parler video metadata and facial matches to identify >1,400 suspects.

Ayotzinapa case (2014). 43 student teachers from the Ayotzinapa Rural Teachers' College disappeared in Iguala, Guerrero. The official "Historical Truth" (Verdad Histórica) was challenged by the GIEI (Grupo Interdisciplinario de Expertos Personas) report, which used OSINT (satellite imagery, phone records, geolocation of security forces) to contradict the government narrative. Verified URLs: https:

Cuadernos de las coimas (Notebooks of the bribes, 2018). Chauffeur Oscar Centeno's notebooks documented bribes from public-works contractors to Kirchner-era officials. Investigation led by journalist Diego Cabot (La Nación) and Cynthia García (C5N). Verified URL: https://en.wikipedia.org/wiki/Cuadernos_de_las_coimas.

Wirecard scandal (2020). Financial fraud at Wirecard AG, exposed by Financial Times (Dan McCrum) using OSINT on Asian phantom operations. Correctiv contributed with follow-up investigations. URLs: https://en.wikipedia.org/wiki/Wirecard_scandal · https://correctiv.org/en/latest-stories/wirecard/

Cum-Ex Files (2018). Cross-border tax fraud scheme exposed by Correctiv and partners. URL: https://correctiv.org/en/latest-stories/cum-ex-files/

Cahuzac case (2013). Budget Minister Jérôme Cahuzac was exposed for hiding money in Swiss bank accounts. Investigation led by Mediapart (Fabrice Arfi). URL: https://en.wikipedia.org/wiki/Jérôme_Cahuzac

CatalanGate (2022). Citizen Lab investigation into Pegasus spyware infections of Catalan politicians and civil society. URL: https://citizenlab.ca/2022/04/catalangate/

Mafia Capitale (2015). Investigation into Rome's criminal-political network, led by prosecutor Michele Prestipino. URLs: https://en.wikipedia.org/wiki/Mafia_Capitale

Navalny poisoning (2020). Bellingcat and The Insider identified an FSB team of chemical-weapons experts that had trailed Navalny. URL: https://www.bellingcat.com/news/2020/12/14/fsb-team-of-chemical-weapon-experts-implicated-in-alexey-navalny-novichok-poisoning/

Bucha investigation (2022). Bellingcat and NYT used satellite imagery (Maxar) to confirm that civilian bodies were on Yablunska Street during Russian occupation. URLs: https://www.bellingcat.com/news/uk-and-europe/2022/05/23/bucha-cleaning-up-the-streets-and-the-evidence/ · https://www.nytimes.com/2022/04/04/world/europe/bucha-ukraine-bodies.html

Pegasus Project (2021) — Forbidden Stories and Amnesty International investigation into NSO Group's Pegasus spyware. URL: https://forbiddenstories.org/about-the-pegasus-project/

Main intelligence agency: Reconnaissance General Bureau (RGB), under the Korean People's Army. URL: https://en.wikipedia.org/wiki/Reconnaissance_General_Bureau (Wikipedia, official RGB page is not publicly accessible).

HRNK report on RGB — https://www.hrnk.org/documentations/the-reconnaissance-general-bureau-the-kim-regimes-precious-treasured-sword — documents RGB structure and operations.

38 North OSINT interview — https://www.38north.org/2024/12/open-source-intelligence-and-north-korea-an-interview-with-uk-air-vice-marshal-ret-sean-corbetten — interview on OSINT use for DPRK monitoring.

Korea Herald on RGB expansion — https://www.koreaherald.com/article/10805054.

US-Korea Institute analysis, ⚠️ 403, live in browser

DPRK-focused news and analysis, ✅ 200

Premium DPRK analysis (paid), ✅ 200

DPRK economy watch, ⚠️ 403, live in browser

External: NK News, 38 North, Daily NK (https://www.dailynk.com), Korea Herald, Yonhap (South Korean news agency).

Defector organisations: Daily NK (sources inside DPRK), North Korea Strategy Center (https://nksc.co.kr).

OSINT community: CSIS Beyond Parallel (https://beyondparallel.csis.org), Center for Strategic and International Studies Korea Chair.

Sony Pictures hack (2014). FBI attributed to North Korea's Bureau 121 (Lazarus Group). URL: https://www.fbi.gov/news/pressrel/press-releases/update-on-sony-investigation

DPRK IT worker fraud (2024-2025). DOJ indictments of DPRK IT workers using fake identities to obtain remote work at US companies. URL: https://www.fbi.gov/wanted/cyber/overview-of-dprk-it-worker-fraud-schemes

Main agency: National Intelligence Service (NIS) — https://www.nis.go.kr/ENG/main/main.do (URL returned 404 in our verification; official NIS site is at https://www.nis.go.kr, mostly Korean-language).

Asia Society report on ROK intelligence — https://asiasociety.org/korea/risks-intelligence-failure-rok-and-why-it-matters — documents intelligence reform efforts.

OSINT landscape in South Korea (Lukio blog) — https://osintteam.blog/overview-of-the-osint-landscape-in-south-korea-61b699276339 ✅ — comprehensive overview of OSINT tools for Korean sources.

Tax authority, business registration, ⚠️ Timeout

Open data portal, ⚠️ Timeout

Business credit information, ⚠️ Timeout

Financial Supervisory Service disclosures, ⚠️ Timeout

Business news (English), ✅ 200

Investigative NGOs: Newstapa (https://www.newstapa.com), News Cokeba, SisaIN.

OSINT community: OSINT Korea community, Lukio blog (https://osintteam.blog).