Individual digital traces can seem insignificant
Connecting accounts, contacts, photos, domains and locations can reveal relationships and recurring patterns.
[ Information from public sources ]
One clue does not tell you much. Connect the clues correctly and the whole story emerges.
OSINT is more than searching Google. It is a systematic process of collecting, verifying, connecting and documenting publicly available information. The course combines methodology, a secure working environment, human and technical sources, and the creation of defensible findings.
[ Public information in context ]
The information is public. Its meaning only emerges in the right context.
A valuable result comes from a methodical approach, source verification and the ability to explain how the analyst reached a conclusion, rather than the number of links collected.
A public source is not necessarily trustworthy
Currency, origin, bias and the author's motivation determine whether the information can be used.
Unprotected research exposes the analyst
Searches, accounts, devices and network traces can alert the subject or compromise the investigation.
Undocumented findings cannot be defended
Without records of sources, timing, methodology and confidence levels, conclusions are difficult to verify or pass on.
[ Course outcomes ]
Participants will be able to conduct an OSINT investigation safely, from the initial brief to a professional report.
01
Design a safe approach
Click to learn more →01
Define the objective, legal and ethical boundaries, working identity and an environment suited to the investigation's risks.
← Back02
Find and connect information
Click to learn more →02
Use human, social, visual and technical sources and assemble them into a structured whole.
← Back03
Verify sources and conclusions
Click to learn more →03
Assess the credibility, reliability, bias and confidence level of individual findings.
← Back04
Prepare an OSINT report
Click to learn more →04
Document the methodology, sources, relationship graph, limitations and conclusions in a format that supports further decision-making.
← Back[ Audience ]
For teams that need to find information, verify it and defend their conclusions
The course is designed for specialist roles. A basic understanding of the internet, networks and security is helpful; we adapt the difficulty to the group.
[ Suitable for, among others ]
- IT and security specialists
- SOC and incident response teams
- Penetration testers and ethical hackers
- Analysts and investigators
- Fraud, compliance and risk teams
- Investigative and security professionals
[ Course content ]
From a secure working environment to graph analysis and a professional report
The complete version covers all twelve modules. We build a shorter course from selected topics based on the roles, cases and sources the team works with.
01Methodology, ethics and the legal framework
- The OSINT process and defining the investigation's objective
- Ethical and legal boundaries of OSINT in the Czech Republic
- Source credibility, reliability and bias
02Digital identity, anonymity and a secure environment
- Protecting the analyst and separating identities
- Secure workflows and working environment
- The limits of anonymity and risk management
03Tools, frameworks and sock puppets
- Selecting and validating OSINT tools
- Frameworks and environment hardening
- Ethical management of working identities
04Footprinting individuals and organizations
- The digital footprint of a person or organization
- Connecting identifiers, relationships and activities
- Systematic documentation of findings
05SOCMINT investigations and analysis
- Public profiles, communities and relationship networks
- Timelines, content and interactions
- Verifying identity and context
06Visual OSINT
- IMINT, EXIF and metadata
- Reverse image search and tracing origins
- Verifying location, time and authenticity
07Advanced searching
- Formulating queries and using operators
- Google dorking and alternative search engines
- Archived and specialist sources
08Technical OSINT
- Domains, DNS, IP addresses and infrastructure
- Historical data and links between services
- Evaluating technical traces
09Website mapping and fingerprinting
- Website structure and technologies
- TLS certificates and related infrastructure
- Fingerprinting without unauthorized access
10Data leaks and digital identifiers
- Breach databases and publicly available leaks
- Messaging apps and searches using email addresses or other identifiers
- Safe and lawful handling of findings
11The dark web, TOR and cryptocurrencies
- Navigating TOR and marketplaces
- Safely observing publicly available sources
- The basics of tracing cryptocurrency flows
12Automation, graph analysis and reporting
- Automating repetitive tasks
- Documentation and relationship graphs
- Creating a professional OSINT report
[ Course format ]
Methodology, live demonstrations and your own investigations in a safe environment
Participants take away more than a list of tools. They practice the entire analytical process and learn how to document results transparently.
01
Explaining the methodology
Click to learn more →01
Every technique starts with an objective, legal boundaries, a risk assessment and a documentation plan.
← Back02
Live demonstrations
Click to learn more →02
The instructor demonstrates selected sources, tools and verification methods using safe examples.
← Back03
Hands-on investigation
Click to learn more →03
Participants search, verify and connect publicly available information, individually and in teams.
← Back04
Documentation and reporting
Click to learn more →04
They turn findings into a structured deliverable with sources, confidence levels, limitations and recommendations.
← Back[ Practical information ]
A complete multi-day course, or a selection of modules based on your team's needs
We tailor the scope to participants' roles, expected deliverables, available time and the types of sources the organization works with.
- Format
- In person
- Complete version
- 3–4 days
- Shorter version
- Selected topics and duration by agreement
- Number of participants
- Recommended group size: 5–20 people
- Prerequisites
- A basic understanding of the internet, networks and security is helpful
- Price
- Priced individually according to scope
- Customisation
- Based on roles, cases, sources and required deliverables
- Wrap-up
- A practical deliverable, a professional OSINT report and discussion
[ Your trainer ]
Pavel „SPAJK“ Matějíček
Pavel “Spajk” Matějíček is a an ethical hacker, trainer and cybersecurity consultant at BOIT. He has worked in the field for more than 10 years, combining technical knowledge, digital footprint analysis and clear interpretation of security findings. He previously worked at ESET, where he contributed to education and awareness of cyber threats.
In his training, he is based on real situations, a methodical approach and hands-on work without unnecessary technical jargon. He shows participants not only the tools, but also how to verify sources, document conclusions and work lawfully and ethically.
[ Why BOIT ]
Tools alone are not enough. OSINT depends on methodology, verification and defensible results.
A systematic approach instead of random searching
From the brief to the report, we follow a consistent methodology that makes the process repeatable and verifiable.
A secure environment and protection for the analyst
We address working identities, devices and network traces as part of every more sensitive investigation.
Connecting human, visual and technical traces
We combine individual disciplines into a shared analytical picture rather than examining them in isolation.
A report that supports further decision-making
The deliverable separates facts, assumptions, confidence levels and limitations so another team can use it.
[ Client experiences ]
BOIT training combines expertise with practical, clear delivery
Pavel's cybersecurity training has the pace of an ice hockey game: fast, practical and full of involvement. Participants aren't spectators: they're active players. No boredom, just clear insights they can use straight away.
Accolade has worked with Pavel for several years. His proactive approach makes his training one of our most popular and best-attended sessions, engaging people across generations.
We've worked with BOIT on information security talks for a long time. Pavel combines excellent expertise with an entertaining style. In over 10 years of organising specialist events, BOIT has been one of our best partners. Highly recommended.
[ FAQ ]
What you need to know before booking
01Do participants have to attend the entire three- to four-day course?
No. The complete version covers the entire OSINT process, but you can select only the relevant modules to create a shorter course.
02What prior knowledge is required?
A basic understanding of the internet, networks and security is helpful. We adapt the difficulty to the group's experience.
03Is the course hands-on?
Yes. Teaching is complemented by live demonstrations, practical investigations, source verification, graph analysis and documentation.
04Does the course cover the dark web and data leaks?
Yes, within a safe, lawful and ethical framework. The course does not teach unauthorized access or misuse of collected data.
05Can the content be adapted to specific cases?
Yes. We tailor the modules and exercises to participants' roles, source types and the organization's required deliverables.
06What will participants take away?
An investigation methodology, experience with tools, an approach to source verification and the structure of a professional OSINT report.
07How much does the course cost?
We prepare an individual quote based on the number of days, selected modules, group size and extent of customization.