OSINT Cheat Sheet for Digital Investigations

OSINT (Open-Source Intelligence) involves collecting and analyzing information from publicly accessible sources to support digital investigations, security assessments, and research. The right tools can help investigators discover online accounts, examine digital footprints, analyze publicly available data, and connect information from different sources.

This OSINT cheat sheet brings together useful frameworks, tool collections, and resources for social media intelligence (SOCMINT) and people-related research. It is intended for cybersecurity professionals, researchers, journalists, and beginners learning structured investigation techniques.

Use these resources responsibly. Public availability does not automatically authorize the collection, redistribution, or use of personal information. Follow applicable laws, platform terms, and privacy requirements throughout an investigation.

Essential OSINT Frameworks and Collections

Start with curated directories to discover tools for different investigative tasks. These resources can help you select suitable methods instead of relying on a single search engine or application.

• OSINT Framework: An interactive directory that organizes open-source intelligence resources by investigation type.
• The Ultimate OSINT Collection: A collection of links to tools and resources for online research.
• OSINT Tools Collection: A GitHub repository containing a broad selection of OSINT tools and references.

SOCMINT and People-Related OSINT Tools

Social Media Intelligence (SOCMINT) focuses on information available through social networks and other online communities. The following resources support username discovery, public-profile research, and email or phone-number checks. Results can be incomplete or outdated, so verify findings before drawing conclusions.

People Search and Public Information

• Search.0t.rocks: A search resource for exploring publicly available information about people. Check the current service and its data sources before relying on results.
• That’sThem: A people-search service that may return publicly indexed contact and identity-related information, depending on the person and available records.
• Doxbin: A site associated with publishing personal information. Because it may contain exposed or non-consensually shared data, it should not be used to target, harass, or expose individuals.

Username and Social Profile Discovery

• Maigret: Searches supported websites for accounts associated with a supplied username.
• Sherlock: Checks multiple websites for profiles matching a username.
• PRUDE: A username and online-presence investigation project. Review its current documentation and supported sites before use.
• WhatsMyName: Helps investigate whether a username appears on supported online services.

Email and Phone-Number Research

• Buster: A project associated with discovering account-related information from email addresses and other identifiers. Verify current functionality and use only authorized data sources.
• Ignorant: Checks whether a phone number may be associated with supported online services. Availability and results depend on the services being checked.
• CrossLinked: Supports LinkedIn-related employee and profile discovery using publicly accessible information.
• Holehe: Checks whether an email address appears to be registered with supported online services. Results may be affected by service changes and anti-abuse protections.

Additional Profile Research

• Duolingo profile research: Publicly visible profile information may help confirm a username or account when relevant to an authorized investigation. Use the platform’s own search and privacy controls, as third-party tools and methods may become outdated.
• Tinder profile research: Treat dating-profile information as sensitive personal data. Do not attempt to bypass access controls, impersonate users, or collect private information without authorization.

Best Practices for OSINT Investigations

• Start with a clear investigative question and use only information relevant to it.
• Cross-check important findings with independent sources before treating them as facts.
• Record URLs, timestamps, and collection methods so results can be reviewed later.
• Distinguish confirmed information from assumptions and possible matches.
• Respect privacy, platform rules, and applicable laws. Avoid publishing sensitive personal information.

For more resources, explore our collection of open-source OSINT tools, which provides additional options for digital research and investigations.