Course
My OSINT Training
Micah Hoffman and Griffin Glynn
Modular, practitioner-built video courses priced per topic, with three free ones. The best value for self-paced learners who know which skill they need next.
After leaving SANS, Micah Hoffman built My OSINT Training with Griffin Glynn: a catalogue of around thirty short video courses on specific skills, from username and email searching to Facebook without an account, Obsidian for documentation, breach data, and sock puppets. You buy a course or a bundle and get a year of access.
Worth it if
- You know the skill you are missing and want to buy just that
- You want the person who wrote the original SANS OSINT course, without the SANS price
- You keep notes in Obsidian or want to, and want a course on documentation
- You are a team lead who wants a shared library with updates included
Skip it if
- You need a recognised certification; none is offered
- You want a single sequenced curriculum with a cohort
- You are a complete beginner with no budget; do the free introduction and the free programs first
What is inside
- 01
Free courses
Introduction to OSINT, about two hours; Using OSINT Bookmarklets; and Careers Using OSINT Skills, interviews with people doing the job.
- 02
Identifier searching
Username, email, people, phone and address, reverse image, file metadata, and image analysis.
- 03
Platforms
Several Facebook courses, including private profiles and searching without an account; Instagram, Snapchat, X, Threads, Tinder, and a Stolen Camera Finder walkthrough.
- 04
Infrastructure and data
Domains and IP addresses, website investigations, breach data in investigations, and the dark web basics.
- 05
Workflow and OpSec
Building an investigation platform, documentation with Obsidian, sock puppets, operational security, Python OSINT tools, and AI in OSINT.
- 06
Bundles
A core bundle taught by the founders, and a full-library bundle that includes future courses and a seat at a live event.
What you will be able to do
- Run a username or email through a repeatable process and document it
- Search Facebook and Instagram with and without research accounts, and know the risks of each
- Set up a documentation system that survives a long case
- Use breach data in an investigation and say what it does and does not prove
How current it is
The catalogue is maintained: a dedicated 2025 updates course exists and the library bundle promises future additions. Platform-specific courses, especially the Facebook ones, are the most exposed to drift and the most likely to be refreshed.
- Updated
- Catalogue maintained; a 2025 updates course exists
- Maintained
- Actively maintained
How to get the most from it
- 01
Take the free introduction first
Two hours, no cost. It shows the teaching style and tells you whether the paid courses will suit you.
- 02
Buy one course for the case in front of you
If you are stuck on a username pivot, buy that. Bundles make sense only once you have finished two or three singles.
- 03
Run each demonstration on your own test subject
Use one of your own old accounts. Repeat the exact steps, then vary them.
Strengths
- Taught by the people who defined much of modern OSINT training
- Pay for exactly the skill you need
- Three genuinely useful free courses
Limitations
- No certification
- One year of access per purchase
- No cohort or structured sequence unless you build one yourself
Pair it with
- ReadCourseFreeBeginner
OSINT Dojo
The free structure to decide which paid module you actually need.
- ReadBookPaidIntermediate
OSINT Techniques
The manual that covers the same desk in print, for reference between courses.
- ReadCoursePaidIntermediate
SANS SEC497: Practical Open-Source Intelligence
What the founder used to teach at SANS, if an employer will pay for the six-day version.
FAQ
Questions, answered
Is this the old SANS SEC487 course?
No, but it is by its author. Micah Hoffman wrote SEC487 and left SANS in 2022; SANS retired SEC487 and now teaches SEC497 by a different author. My OSINT Training is where Hoffman's teaching continued.
Do I get a certificate?
The catalogue does not mention one. Buy for the skill, and keep your own record of what you completed.
Which bundle should I pick?
Neither, at first. Finish the free introduction and buy one single. If you then want more than three singles, the core bundle pays for itself; the full library makes sense for teams.
Learned the method? Practise it on real data
The resources above teach the craft. When you want to run real lookups across breach, people, domain, and crypto sources without opening a dozen vendor accounts, that is what SearchIn is for.
- Free account, no card
- Credits never expire
- Refund unused balance in 7 days