{"id":9607,"date":"2025-11-21T11:29:53","date_gmt":"2025-11-21T09:29:53","guid":{"rendered":"https:\/\/the-s-unit.nl\/?p=9607"},"modified":"2026-03-11T12:13:38","modified_gmt":"2026-03-11T10:13:38","slug":"waarom-osint-niet-alleen-voor-techneuten-is","status":"publish","type":"post","link":"https:\/\/the-s-unit.nl\/en\/waarom-osint-niet-alleen-voor-techneuten-is\/","title":{"rendered":"Why OSINT isn\u2019t just for tech experts"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Why OSINT (Open Source Intelligence) isn\u2019t just for tech experts<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

If you know where to look, information is everywhere. Company data, code snippets, email addresses and network details can all be found online without much effort. \"Yet many organizations underestimate how sensitive this publicly available information can be,\" says Bas, Ethical Hacker at The S-Unit. In this blog, he explains why OSINT is a vital part of cyber resilience and why it matters far beyond the IT department.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

OSINT looks like hacking, but it is actually digital detective work<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
What exactly is OSINT?
<\/strong><\/h5>

OSINT stands for Open Source Intelligence, which means collecting and analyzing information from publicly accessible sources. These can include social media profiles, websites, domain certificates or even Google Images. \"With OSINT, we map out what is already known about an organization and how attackers could misuse that information,\u201d Bas explains.<\/p>

In reality, it has much more in common with investigative work. Because it is so accessible, OSINT has become increasingly important in cybersecurity. The more you understand what is publicly visible about you, the better you can protect yourself.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n\t\t\n\t\t
\n\n\t\t\t\n\t\t\t\t
\n\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t<\/svg>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t
\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\tAttackers can prepare everything in silence\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t\n\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\n\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t<\/svg>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Attacking or defending?<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Attackers can gather an enormous amount of information anonymously and without any interaction. With OSINT techniques, you don\u2019t need to break into a system to identify weak spots. That makes OSINT the perfect preparation for an attack.<\/p>

For organizations, OSINT is valuable for gaining insight and preventing risks. As a defender, OSINT makes you more aware of your digital footprint: what are we sharing online, which patterns are visible and where do potential risks arise? With those insights, you can set clear guidelines, avoid unnecessary exposure and strengthen your security.<\/p>

\"The skills used by attackers and defenders are largely the same; the difference lies in how you apply them,\" explains Bas.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Everyone shares information online <\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Everyone within an organization occasionally shares sensitive information online. Think of a newsletter that is published publicly, internal collaborations that accidentally become visible outside the organization, or personal profiles that reveal more than you might expect.<\/p>

\u201cPeople in technical roles are more often trained in sharing information securely, but across the organization this still happens far too little,\u201d says Bas.<\/p>

Recruitment processes, for example, are well-known weak links. Attackers try to gain access through HR or new employees. Not because they are careless, but because they are not trained to look at information in that way.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

From data to action <\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

OSINT is never a goal in itself. Its value lies in what you do with the information you uncover.<\/p>