Investigate like an analyst
Eight guided investigations built on real techniques: you analyze real-looking evidence (certificates, headers, DNS, Shodan results…), answer at each step and get a detailed correction.
Reconnaissance of a target company
Map Veltara Logistics’ exposure using open sources only, the way an attacker would before a campaign.
Investigating a phishing email
A “payslip” email was reported by several employees. Analyze the headers, the link and the infrastructure to trace it back to the attacker.
Geolocating a photo
A photo posted without a caption must be geolocated and dated. Use every visual clue, the way Bellingcat investigators or GeoGuessr players do.
Digital footprint of a username
One of your company’s API keys leaked on GitHub from an unknown account. Link that username to a person, separating solid evidence from false positives.
Fact-checking a viral claim
A dramatic flood photo, presented as taken “this morning in Lyon”, is shared thousands of times. Check the source, the image, the date and the spread.
Analyzing a claimed data breach
An actor claims on a forum to have stolen an insurer’s customer database. Assess the data’s authenticity, freshness and origin before the crisis escalates.
Mapping malicious infrastructure
Starting from a single phishing domain, pivot on the IP, certificates, favicon and registration data to uncover the rest of the attacker’s infrastructure.
Detecting a coordinated campaign
A hashtag hostile to a company trends within hours. Analyze accounts, content and timing to decide whether it is spontaneous anger or a coordinated operation.
All data is fictional. In real life, OSINT is practiced within a legal framework: a mandate, proportionality and respect for privacy.
Ready to put it into practice?
CyberXTEL is our free platform to train hands-on: certifications, CTFs and a dedicated cyber awareness space.