OSINT Report Writing

• Objective:
  • Hey, I was tasked to do X, Y, Z
• Findings:
  • This is what I found
• High level overview:
  • Did I find a name, username, emails, social media
• Technical findings:
  • Need to give them basically step by step that law enforcement could follow and end up with the same results
  • Pictures and details make it easier (imo)

https://academy.tcm-sec.com/courses/1214089/lectures/27235627

• While finding accounts and you’re not sure if they’re that person or not, take a note and figure out later.
  • If it’s not that person, then it does not belong on the report
  • no “we found this account but it ended up not being that person”
• If we can’t figure out, we can say “we don’t have enough information to rule out this account, but it’s possible it’s tied to this person”
• Basically what details you need to include for someone to reach the same information you reached and tie them all together to that person