Programme Overview
Day 1 – Dorking & Search Strategy
- Search methodology and audit-proof search planning
- Search engine indexing and ranking principles
- Advanced Google Dorking techniques
- Alternative search engines and reverse image searching
- Geospatial and database research
- Audio, video and AI-assisted search techniques
- Search journal creation and documentation
Outcome: Participants learn how to build reproducible search strategies and maintain a defensible audit trail throughout the collection process.
Day 2 – Validation & Pivot
- Multi-source validation principles
- Source independence and verification criteria
- Cross-platform and temporal validation techniques
- Multi-INT fundamentals
- Structured pivoting methodologies
- Evidence preservation and Berkeley Protocol principles
- Validation and pivot exercises
Outcome: Participants learn how to distinguish signal from noise and build evidence-backed findings that can withstand scrutiny.
Day 3 – CCIRM: Decomposing Complex Problems
- Collection Coordination & Intelligence Requirements Management (CCIRM)
- Essential Elements of Information (EEIs)
- Collection planning and tasking
- Digital landscape assessment
- Tool validation methodologies
- Scope management and decision logging
- Development of a complete investigation plan
Outcome: Participants learn how to transform broad client requirements into structured intelligence collection plans with clear priorities and measurable outcomes.
Day 4 – Multi-INT Investigation Exercise
- Real-world case briefing
- Team-based investigation planning
- Multi-INT collection and documentation
- Role allocation and operational coordination
- Validation and pivoting under time pressure
- Analysis and synthesis of findings
- BLUF report creation and presentation
Outcome: Participants execute a complete investigation cycle under operational conditions and produce professional intelligence deliverables.
Day 5 – Reporting & Intelligence Impact
- Intelligence reporting methodologies
- Berkeley Protocol reporting standards
- Confidence assessment and confidence language
- Executive, legal and operational reporting formats
- Intelligence visualisation techniques
- Briefing preparation and delivery
- Final reporting and presentation exercise
Outcome: Participants learn how to convert investigative findings into decision-ready intelligence products tailored to different stakeholder audiences.
Prerequisites
Participation in the OSINT Practitioner Masterclass requires successful completion of the OSINT Foundation Masterclass or equivalent demonstrable knowledge and experience in:
- Operational Security (OPSEC)
- Information evaluation and source verification
- Intelligence Cycle methodology
- NATO Admiralty source assessment
- Structured OSINT workflows and documentation discipline
- Basic intelligence reporting principles
The Practitioner programme builds directly upon the methodologies, frameworks and deliverables developed during the Foundation level. Participants are expected to already understand these concepts, as they are applied throughout the course and are not re-taught. This prerequisite structure ensures a strong learning progression from Learning to Think (Foundation) to Learning to Execute (Practitioner).