LIVE OR DIE BY YOUR KEYWORDS
Regardless of the mission, resources available, and OSINT tools, more than anything a successful investigation will frequently boil down to whether or not the appropriate keywords are found and utilised. Even if we know where our adversary resides, they can be nearly impossible to find if we do not also know how they speak.
There is a tendency among OSINT practitioners to rely on the adage “you must have the haystack first to find the needle,” and operate under the impression that the most important challenge is ingesting unmanageable volumes of data-failing to understand what they now have created is a surplus of noise, without the ability to sift through to the signal. Ultimately, keyword choice can be the difference between digging through that haystack piece by piece, hoping your fingers feel metal, or having a high-powered electromagnet that can quickly sift through that haystack and any others you are presented with.
Perhaps just as importantly, the generation of keywords is not a one-off. OSINT practitioners must actively engage in social listening, and adapting as slang and jargon change.
- Understand that not everyone is going to do you a favor and speak English
- Highlight the importance of slang, jargon, symbology, and even emojis
- Reinforce the need to not only find communities of interest, but practice social listening to remain engaged