Why Ad-Hoc OSINT Doesn't Scale: From analyst workflows to institutional intelligence

Summary: OSINT has moved from criminal investigations and national intelligence into corporate work such as internal investigations, fraud detection, KYC, third-party validation and due diligence, but it is still often run ad-hoc, with collection, evidence preservation and operational security depending on individual habits rather than standard practice. The article states that investigations are sometimes conducted directly from managed corporate devices, that analysts on the same case repeat the same searches without knowing it, and that only information deemed relevant at the moment reaches internal databases.
What's compelling: Analysts working the same case from managed corporate devices can expose both the investigation and the enterprise network, and the context they discard as insignificant is lost when a case closes or a person changes roles.

Read the original at The Hacker News ↗