Advanced OSINT Gathering and Analysis
Advanced OSINT training in Toronto for investigators who already collect competently and now need depth. Eight weeks on sustained dark web access, cryptocurrency tracing, multi-source pivoting and the analysis of coordinated disinformation.
The written product carries the same weight as the collection. You practise structured analytic techniques and produce intelligence reports with sourcing, confidence and alternative hypotheses stated in a form a decision maker can challenge.
- Duration
- 8 weeks
- Format
- Live online, instructor-led
- Prerequisites
- Practical Open Source Intelligence
- Class size
- Capped at 12 learners
What you will be able to do
- Operate on dark web sources without exposing your identity or employer
- Trace a cryptocurrency transaction chain through mixers and exchanges
- Pivot across infrastructure, identity and financial data to link entities
- Identify coordinated inauthentic behaviour and evidence the coordination
- Apply structured analytic techniques to challenge your own conclusions
- Produce an intelligence report that states confidence and sourcing precisely
- Build and maintain research personas that survive extended use
- Brief findings to a legal or executive audience without overstating them
Course outline
6 modules
- Layered identity separation and research infrastructure
- Long lived persona maintenance and backstory building
- Detecting counter surveillance and honeypots
- Working across jurisdictions and legal exposure
- Failure planning: what to do when a persona is burned
What you need before you start
- Practical Open Source Intelligence or equivalent investigative experience
- A dedicated machine or virtual machine for research work
- Clear understanding of your own legal and organizational limits
- Experience writing findings for someone else to act on
Who this course is for
- Experienced OSINT and corporate investigators
- Threat intelligence analysts tracking named actors
- Fraud and financial crime investigators following crypto
- Trust and safety teams working on coordinated abuse
- Analysts responsible for written intelligence products
Questions about this course
More in cyber defence
Entry-levelSecurity Essentials: Network, Endpoint and Cloud
A ten week security essentials course in Toronto covering network, endpoint, cloud, identity and cryptography foundations for new defenders.
10 weeks · live online
Contact for pricingView outline
CoreSOC Analyst Training Program
SOC analyst training in Toronto covering alert triage, log analysis, SIEM workflows, escalation and the tradecraft that holds up on a busy queue.
10 weeks · live online
Contact for pricingView outline
CorePractical Open Source Intelligence
Practical OSINT training in Toronto: build sock puppets, geolocate imagery, mine corporate records and turn findings into a written analytic product.
6 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.