Your cart is empty.
Keep shopping
OSINT: Open Source Intelligence, Google Dorks, 780+ Tools
Role Play
12,119 students
OSINT: Open Source Intelligence, Google Dorks, 780+ Tools
Investigate people online: advanced OSINT, online investigation, Boolean search, X-Ray queries, 148 OSINT services
Last updated 10/2026
English
English [Auto],
What you'll learn
- Take away 780+ tools in 140 downloadable resources: lecture presentations plus kits, calculators, registers and guides
- See 148 OSINT services and apps on screen, from a quick look to a detailed demo: Shodan, Hunter, Epieos, PimEyes, SpiderFoot and more
- Get our top working files: cleared sourcing library, incident playbook, risk register, agent attack surface map
- Set up a research environment: browser, extensions and a search workflow that respects ethics and the law
- Write Google Dorks, Boolean and X-Ray queries with ready search strings and operator tables
- Find people by username, photo, email and phone number and verify the contacts you find
- Use AI assistants for search: 54 ready prompts for queries, screening and research
- Automate research with scrapers, bookmarklets and browser tools
- Apply OSINT to recruiting: LinkedIn, social media, advanced sourcing and executive search
- Learn with Mike, the #1 HR instructor on Udemy: 1,800,000+ enrollments, 170,000 students, about 200 books on Amazon
Explore related topics
Course content
15 sections • 79 lectures • 47h 43m total length
Requirements
- No prior OSINT experience required: every method comes with a search string, checklist or template you can copy
- Nothing to buy for the course itself: presentations and working files are attached to the lectures
- Some services shown in the course have their own free plans, trials or paid plans
- Use the methods only on public information and within the law of your country
- English at intermediate level or above
Description
This course contains the use of artificial intelligence.
783 tools for open source intelligence in one course: 586 ready-to-use files, templates, checklists, search strings and prompts, 148 OSINT services and apps shown on screen, plus 49 models and methods.
Open a lecture, see the service, take the search string, run it today.
Why a simple search finds so little
Most information about people and companies is public. It sits in profiles, documents, registers and archives, and an ordinary query never reaches it. People type a name into a search engine, look at the first page and stop. The difference between that and a result is method: the right operator, the right service and a way to check what you found.
What changes after this course
You search with a system. You prepare the browser and the tools. You write queries with operators that open what a simple search hides. You know which service finds a person by username, which by photo and which by email, and how to verify a contact. You hand the routine to AI assistants and scrapers. And you do it ethically, on public data only.
What is inside: 783 tools, counted file by file
You do not have to take this number on trust. Open any lecture and read its description: every tool and every service inside is listed there by name.
- 140 downloadable resources: the lecture presentations plus 55 standalone working files (kits, calculators, registers, builders, guides, libraries and workbooks)
- 148 OSINT services and apps shown on screen, from a quick look to a detailed demo: Shodan, Hunter, Epieos, PimEyes, SpiderFoot, Intelligence X, WhatsMyName, RocketReach
- 531 ready-to-use tools inside the presentations:
- 232 templates and sample documents: Google Dorks queries, LinkedIn X-ray search queries, resume website search queries, contact search queries
- 73 checklists: OSINT workstation preparation, security discovery, fake LinkedIn profile warning signs, candidate profile analysis
- 67 step-by-step procedures and workflows: OSINT investigation, corporate email inference, Gravatar identity search, username profile discovery
- 54 question lists and conversation scripts: recruiting search hypotheses, vendor discovery administrator interview, candidate persona questionnaire
- 54 ready AI prompts: front-end developer X-ray search, tech recruiter Boolean search, candidate sourcing channels, LinkedIn profile extraction
- 24 scorecards, rubrics and scoring matrices: LinkedIn advanced search operators, risk assessment matrix, data classification scheme
- 11 search string sets
- 10 formulas and metric sets: sourcing and screening KPIs, recruitment funnel conversion metrics, security metrics dashboard
- 6 other working tools: Google advanced search operators, GitHub candidate search operators, security standard selection decision tree
- 49 models and methods explained with examples: open-source intelligence, web scraping, trust boundary mapping
Where the tools are
- OSINT core (4 sections, 80 tools). Foundations and ethics, search preparation, Google Dorks, Boolean and X-Ray operators, people search and contact discovery.
- OSINT for recruiting and sourcing (605 tools). AI recruiting with OSINT, sourcing automation, LinkedIn research, Claude for sourcing, social media, advanced sourcing techniques and executive search.
- Security (199 tools). Information security program leadership and agentic AI security and red teaming.
- Defense tech recruiting (94 tools). Security clearance, export control screening, cleared talent sourcing and hiring veterans.
Who is teaching
I am Mike, the #1 HR instructor on Udemy, with 1,800,000+ course enrollments from 170,000 students, and the author of about 200 books on Amazon. I built the people system at Preply as it became a unicorn and worked at Wargaming, iDeals and Alfa-Bank across 20 years in HR. I hold PHRi, SHRM-CP and HCI sHRBP certifications and represent HRCI in Eastern Europe.
I used OSINT before I knew the word. In 2006 at Alfa-Bank I was looking for marketing candidates, guessed which words would already be written somewhere online, and found a list of a bank's employees and a phone number. Later, at iDeals, my team used these techniques every day. I also test the tools on myself: I gave Shodan my own IP address and it showed the camera connected to my network. The methods in this course come from that practice.
How to use the course
Watch the first four sections in order to learn the core method. Then open the sections for your field: section and lecture titles show how many tools are inside, and each lecture description lists them by name, so you can go straight to the search string or service you need.
What is included
- 79 lectures across 15 sections, 47.5 hours
- 140 downloadable resources: lecture presentations and working files
- 783 tools across the lessons, including 148 services and apps shown on screen
- A 10-question practice test, a quiz and a role play
- Lifetime access to all materials
- Active instructor support in the Q&A section
- A Udemy Certificate of Completion
Where to start
Take one person or company you need to find information about this week. Open the Google Dorks lecture, copy a search string, replace the name and run it. Enrol now and start your first lesson today.
Who this course is for:
- Recruiters and sourcers who search for candidates and contacts in open sources
- Researchers, analysts and journalists who collect and verify public information
- Sales and marketing specialists who research companies and decision makers
- Security specialists who want to see what is visible about their company from outside
- Anyone who wants to search the open web beyond a simple query