OSINTverse

Course

My OSINT Training

Micah Hoffman and Griffin Glynn

Modular, practitioner-built video courses priced per topic, with three free ones. The best value for self-paced learners who know which skill they need next.

After leaving SANS, Micah Hoffman built My OSINT Training with Griffin Glynn: a catalogue of around thirty short video courses on specific skills, from username and email searching to Facebook without an account, Obsidian for documentation, breach data, and sock puppets. You buy a course or a bundle and get a year of access.

Free + paidAll levels
People searchSocial mediaBreach dataOpSecDomains & infrastructureFoundations

Worth it if

  • You know the skill you are missing and want to buy just that
  • You want the person who wrote the original SANS OSINT course, without the SANS price
  • You keep notes in Obsidian or want to, and want a course on documentation
  • You are a team lead who wants a shared library with updates included

Skip it if

  • You need a recognised certification; none is offered
  • You want a single sequenced curriculum with a cohort
  • You are a complete beginner with no budget; do the free introduction and the free programs first

What is inside

  1. 01

    Free courses

    Introduction to OSINT, about two hours; Using OSINT Bookmarklets; and Careers Using OSINT Skills, interviews with people doing the job.

  2. 02

    Identifier searching

    Username, email, people, phone and address, reverse image, file metadata, and image analysis.

  3. 03

    Platforms

    Several Facebook courses, including private profiles and searching without an account; Instagram, Snapchat, X, Threads, Tinder, and a Stolen Camera Finder walkthrough.

  4. 04

    Infrastructure and data

    Domains and IP addresses, website investigations, breach data in investigations, and the dark web basics.

  5. 05

    Workflow and OpSec

    Building an investigation platform, documentation with Obsidian, sock puppets, operational security, Python OSINT tools, and AI in OSINT.

  6. 06

    Bundles

    A core bundle taught by the founders, and a full-library bundle that includes future courses and a seat at a live event.

What you will be able to do

  • Run a username or email through a repeatable process and document it
  • Search Facebook and Instagram with and without research accounts, and know the risks of each
  • Set up a documentation system that survives a long case
  • Use breach data in an investigation and say what it does and does not prove

How current it is

The catalogue is maintained: a dedicated 2025 updates course exists and the library bundle promises future additions. Platform-specific courses, especially the Facebook ones, are the most exposed to drift and the most likely to be refreshed.

Updated
Catalogue maintained; a 2025 updates course exists
Maintained
Actively maintained

How to get the most from it

  1. 01

    Take the free introduction first

    Two hours, no cost. It shows the teaching style and tells you whether the paid courses will suit you.

  2. 02

    Buy one course for the case in front of you

    If you are stuck on a username pivot, buy that. Bundles make sense only once you have finished two or three singles.

  3. 03

    Run each demonstration on your own test subject

    Use one of your own old accounts. Repeat the exact steps, then vary them.

Strengths

  • Taught by the people who defined much of modern OSINT training
  • Pay for exactly the skill you need
  • Three genuinely useful free courses

Limitations

  • No certification
  • One year of access per purchase
  • No cohort or structured sequence unless you build one yourself

Pair it with

FAQ

Questions, answered

Is this the old SANS SEC487 course?

No, but it is by its author. Micah Hoffman wrote SEC487 and left SANS in 2022; SANS retired SEC487 and now teaches SEC497 by a different author. My OSINT Training is where Hoffman's teaching continued.

Do I get a certificate?

The catalogue does not mention one. Buy for the skill, and keep your own record of what you completed.

Which bundle should I pick?

Neither, at first. Finish the free introduction and buy one single. If you then want more than three singles, the core bundle pays for itself; the full library makes sense for teams.

Learned the method? Practise it on real data

The resources above teach the craft. When you want to run real lookups across breach, people, domain, and crypto sources without opening a dozen vendor accounts, that is what SearchIn is for.

  • Free account, no card
  • Credits never expire
  • Refund unused balance in 7 days