OSINT Foundation Masterclass

20% Discount Exclusively for IIA Belgium Members!

OSINT Foundation Masterclass

Build a strong foundation for professional OSINT investigations

The OSINT Foundation Masterclass is an intensive five-day training programme that introduces participants to the core principles of professional Open Source Intelligence (OSINT) investigations.

The focus is not only on tools, but primarily on the right mindset, methodology and investigative discipline. Participants learn how to research open sources in a structured, secure and reproducible way, and how to transform collected information into reliable intelligence.

To ensure a highly interactive and practice-oriented learning experience, each training is limited to a maximum of 12 participants and is delivered throughout by two internationally recognised OSINT experts and trainers, each bringing more than 20 years of professional experience.

After completing this training, participants will have a solid foundation for conducting OSINT investigations in professional, security-sensitive and operational environments.

What will you learn?

After completing the training, participants will be able to:

• conduct OSINT investigations in a structured and methodological way;
• handle information and research data securely;
• apply Operational Security (OPSEC) during investigations;
• identify digital exposure and risks to investigators;
• critically assess and verify information;
• recognise disinformation, misinformation and manipulated content;
• work according to the principles of the Intelligence Cycle;
• define Essential Elements of Information (EEIs);
• assess sources and information using methodologies such as NATO Admiralty Scoring;
• investigate different selectors such as domains, email addresses, usernames, phone numbers and images;
• document investigative steps so that results are reproducible and auditable;
• transform research findings into clear intelligence reporting.

Programme

Day 1 – Physical Security & Information Handling

The first day establishes the foundations for conducting intelligence investigations in a safe and professional manner.

Topics include:

• Physical security and access control
• Information classification
• Traffic Light Protocol (TLP)
• Need-to-know and compartmentation
• Secure communication and data handling
• Chain of custody
• Practical exercises on classification and information handling

Outcome: Participants develop the operational discipline required for professional intelligence work.

Day 2 – Operational Security (OPSEC)

The second day focuses on protecting both the investigator and the investigation.

Topics include:

• The five steps of the OPSEC cycle
• Threat modelling and risk management
• Protecting connections, devices and digital identities
• Analysing personal digital footprints
• Social media exposure
• Persona management
• OPSEC measures and resilience

Outcome: Participants develop a personal OPSEC Action Plan and learn how to better protect themselves, their organisation and their investigations.

Day 3 – Information & Critical Interpretation

The third day focuses on assessing, validating and verifying information.

Topics include:

• What OSINT is and what it is not
• Surface web, deep web and dark web
• Information verification methods
• Disinformation, misinformation and malinformation
• The SIFT methodology
• AI-generated content
• Deepfakes and synthetic media

Outcome: Participants learn how to distinguish reliable information from noise, manipulation and unreliable sources.

Day 4 – Intelligence Cycle & Methodology

On the fourth day, OSINT is placed within a broader intelligence methodology.

Topics include:

• The Intelligence Cycle
• Essential Elements of Information (EEIs)
• Introduction to the Berkeley Protocol
• NATO Admiralty source assessment
• BLUF – Bottom Line Up Front
• Intelligence reporting
• Collaboration within intelligence processes
• Practical country study exercise

Outcome: Participants learn how raw information can be transformed into actionable intelligence that supports decision-making.

Day 5 – Structured Research Workflow

The final day brings together the different elements of the training into a structured investigative workflow.

Topics include:

• Selector-based investigation methodology
• Domain and URL investigations
• Email investigations
• Name and username investigations
• Phone number investigations
• Reverse image investigations
• Research logging
• Documentation of investigative steps
• End-to-end practical OSINT exercise

Outcome: Participants build a complete and reproducible investigative workflow that can be applied immediately in a professional environment.

Why choose this training?

Limited group size, expert guidance

Each edition is limited to a maximum of 12 participants, allowing for intensive interaction, individual guidance and hands-on exercises. The entire five-day programme is delivered by two internationally recognised experts and trainers with more than 20 years of professional experience. This ensures that participants benefit not only from theoretical knowledge, but also from extensive operational and real-world expertise.

Methodology before tools

OSINT tools and platforms are constantly changing. That is why the training focuses first and foremost on a methodology and investigative process that remains relevant even when technology evolves.

Operationally focused

The training is based on intelligence and investigative practices and is designed for use in professional and operational environments.

Reproducible and auditable investigations

Documentation, traceability, source assessment and evidence handling are integrated throughout the entire training programme.

Immediately applicable

Participants work with methodologies, workflows and templates that can be applied within their own organisation immediately after the training.

Foundation for further specialisation

The Foundation Masterclass provides a strong basis for further development in OSINT, threat intelligence and intelligence analysis and connects directly to the OSINT Practitioner and OSINT Advanced Masterclasses.

Who is this training for?

This training is relevant for professionals working in environments where open-source research, intelligence gathering or information verification plays an important role, including:

• Defence, law enforcement and public safety professionals
• Security and intelligence professionals
• Cybersecurity and threat intelligence analysts
• Fraud and integrity investigators
• Private investigators
• Internal audit and compliance professionals
• Professionals conducting due diligence or background research
• Other roles where structured open-source investigations are required