OSINTverse

Book

Deep Dive: Exploring the Real-world Value of Open Source Intelligence

Rae L. Baker, Wiley

The best methodology-first primer: intelligence cycle, OpSec, ethics, and bias before any tools, then unusual breadth into maritime, aviation, infrastructure, finance, and crypto. Dense, and worth it.

Deep Dive is the book to read when the manuals have taught you techniques and nobody has taught you how to think. Part one covers what OSINT is, the intelligence cycle, the adversarial mindset, and operational security. Part two walks through subject intelligence, social media, business, transportation, critical infrastructure, financial intelligence, cryptocurrency, and NFTs. Micah Hoffman wrote the foreword; the author co-founded Kase Scenarios.

PaidBeginner
FoundationsAnalysis & reportingOpSecPeople searchSocial mediaCryptoDomains & infrastructure

Worth it if

  • You are new to the field and want the why before the how
  • You collect well and your reports still read like a list of findings
  • You work near ships, aircraft, railways, utilities, or financial crime and want OSINT for those domains
  • You onboard new analysts and need one book to hand them

Skip it if

  • You want a tool-by-tool reference or a VM build guide; that is a different book
  • You need the latest platform-specific steps; this book is deliberately about method

What is inside

  1. 01

    Part I: Foundational OSINT

    What OSINT is, a brief history, critical thinking, mental health and bias, ethics; the intelligence cycle with planning, collection, pivoting, gap analysis, documentation, analysis, reporting, and feedback; the adversarial mindset; operational security with threat modelling, VPNs, privacy browsers, Tor and its cousins, virtual machines, and mobile emulators.

  2. 02

    Subject and social media intelligence

    Digital footprint, pattern of life, names and naming conventions, usernames, email, phone numbers, public records; social media collection, correlation, group monitoring, image and video geolocation, verification, misinformation, bots, altered content, and a puppy-scam walkthrough.

  3. 03

    Business, transportation, and infrastructure

    Organisational intelligence; maritime, railway, aircraft, and automotive tracking; critical infrastructure and industrial systems.

  4. 04

    Financial, crypto, and NFTs

    Financial intelligence, cryptocurrency, non-fungible tokens, and a closing chapter on what is next.

What you will be able to do

  • Plan a collection effort around a question instead of a tool
  • Run the intelligence cycle, including the step most people skip: feedback
  • Threat-model your own OpSec before an investigation starts
  • Investigate a vessel, an aircraft, or a company from open sources

How current it is

Published in 2023 and methodology-heavy, so it ages more slowly than any manual. The NFT chapter and some platform specifics already feel dated; the intelligence cycle, OpSec, and domain chapters do not.

Updated
First edition, May 2023
Maintained
Updated now and then

How to get the most from it

  1. 01

    Read Part I in one go

    The first four chapters are the frame for everything else. Do not skip to the domain chapters.

  2. 02

    Apply the cycle to one small case

    Pick a trivial question and run every stage, including a one-paragraph report and a feedback note. The habit is the point.

  3. 03

    Dip into domain chapters as cases demand

    Maritime or aviation chapters are reference material. Read them when a case needs them.

Strengths

  • Teaches method, ethics, and bias up front
  • Domains other OSINT books ignore
  • Written by a practitioner who also builds training scenarios

Limitations

  • Dense; some readers find it a tough read
  • Not a tool reference
  • One reviewer objects to the political slant of some examples

Pair it with

FAQ

Questions, answered

Is this a beginner book?

Yes, in the sense that it assumes nothing. It is not light. Readers describe it as foundational to intermediate and dense in places.

Does it cover tools?

It names tools where they illustrate a method, but it is not a tool catalogue. Pair it with a manual if you want that.

Learned the method? Practise it on real data

The resources above teach the craft. When you want to run real lookups across breach, people, domain, and crypto sources without opening a dozen vendor accounts, that is what SearchIn is for.

  • Free account, no card
  • Credits never expire
  • Refund unused balance in 7 days