Open Source Intelligence Investigation Course

Plan lawful online investigations, resolve entities, verify digital content, preserve evidence, and report findings with a traceable case method.
Open Source Intelligence Investigation Course

At a glance

Duration
5 days
Format
Classroom
Cities
London, Jakarta, Istanbul, Prague, Tashkent, Rome and more
Next session
12 – 16 October 2026, London
Average fee
5,800 €

Overview

Open Source Intelligence Investigation and Verification Course is a five-day intermediate-to-advanced course for investigators, intelligence analysts, compliance and fraud teams, security functions, journalists, and researchers, who leave with an auditable OSINT Case File. The course connects lawful investigation planning, open-source discovery, entity resolution, web and social evidence, geolocation, chronology, content verification, collection integrity, analytical assessment, and reporting. Agile Leaders Training Center delivers practical open source intelligence investigation training.

Who Should Attend

  • Investigation functions responsible for lawful online inquiries and evidence documentation
  • Intelligence functions responsible for source discovery, assessment, and analytical reporting
  • Compliance and fraud functions responsible for due diligence, alerts, and case escalation
  • Corporate security functions responsible for threat, incident, and integrity inquiries
  • Journalism and research functions responsible for verifying public claims and digital content
  • Assurance functions responsible for reviewing investigation methods and records

The course assumes participants already conduct research, investigations, due diligence, or evidence review and leaves out hacking, credential abuse, malware, covert access, and jurisdiction-specific legal advice.

Departments and Industries

The course supports departments that conduct lawful online investigations and assess publicly available information across public-interest and commercial settings.

  • Investigation, intelligence, security, and fraud departments
  • Compliance, due diligence, risk, and internal-audit functions
  • Newsrooms, research organizations, and civil-society teams
  • Financial services, insurance, and professional-services organizations
  • Technology, telecommunications, logistics, and platform businesses
  • Legal support, corporate affairs, and reputation-risk functions

Learning Objectives

By the end of this course, participants will be able to:

  • Apply a lawful OSINT investigation cycle
  • Use search, archive, and source-discovery methods
  • Build identity, entity, and relationship assessments
  • Analyze imagery, location, chronology, and online claims
  • Evaluate source reliability, evidence integrity, and analytical confidence
  • Build an auditable OSINT Case File

Course Agenda

Day 1: Investigation Scope and Controls

  • OSINT Investigation Cycle and Decision Map
  • Question, Hypothesis, and Collection Plan
  • Lawful Source and Ethical Boundary Checklist
  • Investigator Safety and Exposure Risk Register
  • Case Log and Audit Trail Standard

Day 2: Discovery and Entity Resolution

  • Advanced Search Operator Query Matrix
  • Web Archive and Change Timeline Method
  • Public Record and Domain Evidence Register
  • Identity Attribute and Alias Resolution Grid
  • Entity Relationship and Network Mapping Canvas

Day 3: Content Verification and Location

  • Source Provenance and Reliability Assessment
  • Reverse Image and Video Search Workflow
  • Visual Landmark and Geolocation Evidence Sheet
  • Timestamp, Shadow, and Chronology Analysis
  • Claim Corroboration and Contradiction Matrix

Day 4: Evidence and Analytical Reporting

  • Digital Collection and Preservation Record
  • Metadata Relevance and Limitation Checklist
  • Evidence Integrity and Handling Log
  • Competing Hypotheses Analysis Table
  • Confidence Statement and Intelligence Report Template

Day 5: OSINT Investigation Practice

  • Suggested Exercise: Investigation Plan and Safety Review
  • Suggested Exercise: Search, Archive, and Entity Resolution
  • Suggested Exercise: Image, Location, and Chronology Verification
  • Suggested Exercise: Evidence and Confidence Assessment
  • Capstone Exercise: Auditable OSINT Case File

Practical Exercises

The course uses suggested activities to connect investigation questions, public sources, verification evidence, and defensible findings.

  • Suggested activity: convert a case question into hypotheses, collection priorities, ethical limits, and a traceable case log.
  • Suggested activity: resolve aliases and entities across public web, archive, domain, and social evidence.
  • Suggested activity: test imagery, location, time, provenance, and contradictory claims before reaching a finding.
  • Suggested activity: assemble collected evidence, alternative explanations, confidence judgments, and reporting records into the capstone file.

FAQs

Who suits open source intelligence investigation training, and what does it assume?

Open source intelligence investigation training suits professionals who already conduct research, casework, due diligence, verification, or evidence review and need a repeatable lawful online investigation method.

How does OSINT investigation training differ from digital forensics training?

OSINT investigation training works with lawfully accessible public information, while digital forensics training focuses on acquiring and examining devices, systems, or stored data under separate technical and legal controls.

How is source reliability evaluated in an OSINT investigation?

Source reliability is evaluated through provenance, access path, independence, consistency, corroboration, motive, context, technical limitations, and the distinction between what the source shows and what the analyst infers.

How do geolocation and chronology support online investigation verification?

Geolocation and chronology test where and when content was created by comparing landmarks, terrain, shadows, weather, transport, archived pages, timestamps, and independent reference material.

What makes an OSINT Case File auditable?

An OSINT Case File is auditable when it records questions, searches, sources, collection times, preserved items, verification steps, analytical alternatives, confidence judgments, limitations, and reporting decisions.

Conclusion

Participants take back an auditable OSINT Case File containing plans, search records, entity maps, verification sheets, preserved evidence, hypothesis tests, confidence statements, and findings. The file changes scattered online material into a traceable investigation record. It supports reviewable decisions, transparent limitations, and consistent reporting.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Showing 21-40 of 74 events
Image Location Dates Duration Mode Price Actions
Doha Doha Week 02, 2027
17 – 21 January 2027
5 Days Onsite €5,500
Tbilisi Tbilisi Week 04, 2027
25 – 29 January 2027
5 Days Onsite €5,000
Manama Manama Week 04, 2027
31 January – 4 February 2027
5 Days Onsite €4,700
Paris Paris Week 05, 2027
1 – 5 February 2027
5 Days Onsite €5,700
Cape town Cape town Week 05, 2027
7 – 11 February 2027
5 Days Onsite €4,500
Amsterdam Amsterdam Week 06, 2027
8 – 12 February 2027
5 Days Onsite €5,700
Muscat Muscat Week 06, 2027
14 – 18 February 2027
5 Days Onsite €5,700
Dubai Dubai Week 07, 2027
15 – 19 February 2027
5 Days Onsite €4,500
Kuala Lumpur Kuala Lumpur Week 08, 2027
22 – 26 February 2027
5 Days Onsite €5,200
Nice Nice Week 08, 2027
22 – 26 February 2027
5 Days Onsite €5,700
Milan Milan Week 09, 2027
1 – 5 March 2027
5 Days Onsite €5,700
Zanzibar Zanzibar Week 09, 2027
7 – 11 March 2027
5 Days Onsite €5,500
Abu Dhabi Abu Dhabi Week 11, 2027
15 – 19 March 2027
5 Days Onsite €4,700
Baku Baku Week 12, 2027
22 – 26 March 2027
5 Days Onsite €5,000
Munich Munich Week 13, 2027
29 March – 2 April 2027
5 Days Onsite €5,700
Amsterdam Amsterdam Week 14, 2027
5 – 9 April 2027
5 Days Onsite €5,700
Montreux Montreux Week 14, 2027
5 – 9 April 2027
5 Days Onsite €7,500
Rome Rome Week 15, 2027
12 – 16 April 2027
5 Days Onsite €5,700
Kuala Lumpur Kuala Lumpur Week 16, 2027
19 – 23 April 2027
5 Days Onsite €5,200
New York New York Week 16, 2027
19 – 23 April 2027
5 Days Onsite €12,000

Frequently asked questions

What does this course cover?

OverviewOpen Source Intelligence Investigation and Verification Course is a five-day intermediate-to-advanced course for investigators, intelligence analysts, compliance and fraud teams, security functions, journalists, and researchers, who leave with an auditable OSINT Case File. The course connects lawful investigation planning, open-source discovery, e…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

This course by city