GIAC (SANS)GIAC Open Source Intelligence (GOSI)
The GIAC Open Source Intelligence (GOSI) certification validates a practitioner's strong foundation in OSINT methodologies and frameworks. It signals your capability to provide actionable intelligence by efficiently collecting, processing, and analyzing vital information in a constantly changing field. GOSI holders are well-versed in data collection, reporting, and analysis of targets, making them valuable assets for incident response, investigations, and security operations.
286 practice questions · Updated 2026-07-30
2Domains
6Objectives
46Concepts
286Questions
GOSI Curriculum
Every domain, objective, and concept the GOSI exam measures.
- Define OSINT Methodology
- Identify OSINT Sources
- Apply the Intelligence Cycle
- Ensure Legal and Ethical Compliance
- Validate and Corroborate Information
- Structure OSINT Reporting
- Privacy Fundamentals
- Operational Security (OPSEC) Principles
- Threat Modeling for OSINT
- Anonymity Techniques
- Data Exposure Risks
- Secure Communication Practices
- Legal and Ethical Boundaries
- Search Strategy Formulation
- Boolean and Advanced Search Operators
- Source Selection and Evaluation
- Data Collection Methods
- Data Processing and Normalization
- Data Storage and Organization
- Legal and Ethical Considerations
- Open Source Identity Resolution
- Social Media Profiling
- People Search Engines and Directories
- Username and Handle Correlation
- Email and Phone Number Investigation
- Geolocation and Movement Tracking
- Relationship and Network Mapping
- Image and Media Analysis
- Historical Data and Archival Research
- Privacy and Counter-OSINT Awareness
- Business Entity Identification
- Corporate Registry Research
- Domain and Web Infrastructure Mapping
- Financial and Payment Footprint Analysis
- Supply Chain and Partnership Tracing
- Physical Location and Facility Investigation
- Social Media and Online Presence Profiling
- Business Relationship Network Analysis
- Network Data Collection
- Infrastructure Mapping
- DNS Analysis
- WHOIS and Registration Data Analysis
- IP Address and Hosting Investigation
- Subdomain Enumeration
- Technology and Service Fingerprinting
- Correlation and Visualization
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GOSI, so none is invented.