OSINT book

OSINT Techniques

Michael Bazzell

The practical field manual most investigators mean when they say “the Bazzell book.” Current editions focus on self-hosted VMs, people and social search, breach and stealer data, and a repeatable investigation workflow — not theory for its own sake.

BookBeginner–IntermediatePeople searchSocial mediaOpSecDocumentation

Who it’s for

  • Private investigators and corporate investigators building a first real desk
  • Journalists and NGO researchers who need current platform techniques
  • SOC / CTI analysts who want hands-on collection, not only alert enrichment

What you get

  • Edition-length coverage of VMs, browsers, search, social platforms, and identifiers
  • Sections on leaks, breaches, stealer logs, and documentation habits
  • Companion digital files and VM build notes via the publisher (per IntelTechniques)

How to use it

  1. 01

    Build the environment first

    Follow the VM and browser chapters before you chase subjects. A clean desk beats a clever query on a contaminated machine.

  2. 02

    Work one identifier type at a time

    Email, username, phone, image — finish a pass before pivoting. The book’s strength is breadth; your job is sequence.

  3. 03

    Expect the UI to drift

    Platform menus change. Keep the methodology (document, corroborate, stop) and treat named UI steps as snapshots.

Strengths

  • Updated often enough to stay operationally useful
  • Covers the full modern stack: people, social, infra-adjacent, and breach data
  • Written for people who will run real cases, not only classroom demos

Watch out for

  • Tool URLs and platform steps age between editions
  • North America–heavy examples; adapt for other jurisdictions
  • Dense — skim for your case type, then deep-read what you will actually run

FAQ

Questions, answered

Is this the same as “Open Source Intelligence Techniques”?

Yes — marketing titles vary by edition. IntelTechniques currently lists it as OSINT Techniques. Same author, same lineage.

Do I need every edition?

No. Buy the latest you can afford, then follow the IntelTechniques blog for post-publication updates. Old editions are still useful for methodology.