Definitions
Information that is not copied, stored or saved
What is Research?
MA Tier 0, MA Tier 1, and MA Tier 2
What are the 3 MA Tier level?
PIRs and EEIs
What are two types of requirements?
Intelligence Requirements, Approved Collection Plan, Risk Assessment
What are three validated documents you need to conduct OSINT?
Internet phonebook
What is a DSN?
The production of intelligence based on PAI
What is OSINT?
OSINT Collectors should always start at this MA Tier level
What is MA Tier 0
The 5 things collectors need to conduct OSINT.
What are Mission, Authorities, Intelligence Requriment, Approved Collection Plan, and approved Risk Assessment
This U.S. Intelligence Community committee helps coordinate how agencies collect, share, and use publicly available information for intelligence purposes.
What is the National Open Source Committee?
.org, .net, .com
What are examples of Top-Level Domains (TDLs)?
Three ways PAI can be identified
What is via observation, purchase or request
Two types of media.
What is Traditional Media and New Media?
To become an OSINT collector, a collector must have this certificaiton
What is an OBC Certificaiton
What Army Directive governs Army OSINT Activites
Army Directive 2016-37: U.S. Army Open-Source Intelligence Activities
.cn, .fr, .ru
What are examples of Country Specific Top Level Domains (ccTLD)?
When information is collected, exploited and disseminated in order to answer an intelligence requirement
When does PAI become OSINT
Examples of One to Many media types.
What is newspaper, radio, white papers, news etc
Do Not download references to OSINT while in SILO!, Do Not share passwords for access to the tools, Do Not create any accounts within your managed attribution tool, etc.
What are No No Timmys?
This term describes a network of everyday physical devices, such as appliances, vehicles, and industrial machines, that use sensors and software to connect to the internet, exchange data, and operate with limited human input.
What is the Internet of Things, or IoT?
1) Cyber threats
2) Risk to mission,
3) Risk to personal identity information of the collector
4) Risk to civil liberties/privacy of US person
5) Risks to legal liabilities
6) Risk to psychological harm to collector
What are 6 hazard areas to manage risk?
May I? (Am I within my mission and authorities?)
Should I? (Talk to your intelligence oversight officer, local legal counsel)
Can I? (Do I have the tools and resources?)
What is the thought process to obtain legal advice?
This protocol uses TLS (SSL) to encrypt requests and responses.
What is HTTPS?