Protected learning content
Checking learner access…
Confirming your learner account and course enrolment.
- Course purpose
- Safety and authorisation boundary
- Capability outcome
- Learning method
- Module 1 - OSINT as an intelligence discipline
- Practical Lab 1 - Build an OSINT collection plan
- Module 2 - Search-engine reconnaissance and source planning
- Module 3 - Recon-ng architecture and workspaces
- Practical Lab 2 - Initialise and document a Recon-ng workspace
- Module 4 - Recon-ng marketplace, modules and options
- Practical Lab 3 - Run a passive Recon-ng module safely
- Module 5 - Shodan fundamentals
- Module 6 - Shodan query design and interpretation
- Practical Lab 4 - Interpret synthetic Shodan results
- Module 7 - Correlation across DNS, certificates, repositories and service indexes
- Practical Lab 5 - Build an evidence correlation matrix
- Module 8 - Reporting, provenance and evidence quality
- Module 9 - Data protection, privacy and professional conduct
- Module 10 - Building a repeatable OSINT playbook
- Practical Lab 6 - Companion browser lab: OSINT Reconnaissance Workbench
- Capstone - External attack-surface OSINT intelligence brief
- Official reference set
- Tool-maintenance note