Open-source intelligence (OSINT) collects and analyzes information that is publicly available. It commonly supports reconnaissance by revealing details about a target for possible future attacks. section 11.2.1 section 11.6
Key points:
- OSINT does not necessarily use illicit techniques; its defining characteristic is the public availability of the information. section 11.2.1
- Reconnaissance uses gathered information to understand a target and support a later attack rather than directly attacking the target. section 11.2.1
- A WHOIS lookup can expose domain-owner email addresses, phone numbers, and physical addresses. section 11.2.1
WHOIS reconnaissance
An investigator performs a WHOIS lookup for a domain and analyzes the publicly listed ownership details, such as contact addresses and phone numbers, as reconnaissance information. section 11.2.1
