
Begin building your OSINT machine from scratch by installing Debian Linux in VirtualBox, adjusting BIOS settings, and adding essential tools, while understanding why a Debian-based template supports flexible, customizable investigations.
Meet your instructor Jeff, a seasoned IT veteran and ethical hacker. He brings over 20 years in open source intelligence and network security.
The course opens with a disclaimer on using free, open source tools and publicly available sources, urging lawful, ethical OSINT and law verification before investigations.
Maintain objectivity by recognizing and setting aside personal biases during OSINT investigations. Verify all evidence, stay open to unexpected results, and present the truth without letting bias shape conclusions.
Enable virtualization technology in the bios to run virtual machines; access the bios with f1 or f10 during boot, save changes, reboot, and install VirtualBox.
Install VirtualBox on a Windows host to run multiple operating systems on one computer and isolate investigations with snapshots. Learn installation steps and basic virtual machine creation for osint.
Learn to download Debian 64-bit ISO, create a Linux VM in VirtualBox, configure memory and dynamic storage, install Debian, and boot into KDE Plasma.
Resolve the full screen issue in a virtual machine by updating and upgrading the OS, installing the VirtualBox editions, and rebooting to enable full screen.
Use snapshots in VirtualBox to revert a machine to a pristine state between OSINT investigations, saving a pre-built baseline and restoring as needed.
Install pip 2 and pip 3, Python’s package managers linked to Python Package Index. Learn why Python 3 is preferred while keeping Python 2 for compatibility, and perform updates and installations.
Install Google Go, download the Go binary, set the path, and verify the installation by checking Go version. Follow along as the video shows terminal commands and copyable links.
Learn how to install git on Debian Linux, use root privileges, ensure the system is up to date, and clone GitHub repositories to install tools.
apt install snapd
Install and use AnonSurf to route all traffic through the Tor network, enabling anonymized osint workflows with DNS leak protection and dark web access on Debian-based systems.
Twint, a Python-based Twitter scraping tool, retrieves tweets from profiles without the Twitter API. It outputs to text or CSV and supports date and location filters for OSINT.
Install and run Sherlock to search a username across multiple sites, verify findings to avoid false positives, and explore how related accounts can reveal more information about a target.
Demonstrate installing metagoofil on a linux vm and using it to crawl a website for specific file types, downloading PDFs, Excel, and PowerPoint files for osint analysis.
Explore holehe, an OSINT tool that checks if an email is used on other sites, and learn how to install and run it from GitHub.
Analyze file metadata with the Mycroft osint tool on Debian-based systems to extract hashes, timestamps, and properties across documents, images, and archives for evidence preservation.
Install onion share to securely transfer files over the tor network, with encryption and relayed traffic, using drag-and-drop sharing on Linux, Windows, and OS X, plus a unique recipient URL.
apt-get install webhttrack
Install and use nmap and zenmap for network scanning, identify open ports and potential operating systems, and explore the graphical zenmap interface to simplify mapping on your osint machine.
Install Maltego community edition on Linux, verify the download with a hash, ensure Java is installed, run the application, and register for a free account to begin graph-based searches.
Install the Brave browser, a chromium-based tool with a built-in Tor private window for enhanced anonymity. Use private Tor browsing to mask your location and conduct OSINT investigations securely.
Compare the pros and cons of web tools and install tools for investigations, including reverse phone number searches, people searches, and data privacy considerations.
Master OSINT workflows by installing firefox addons like wayback machine, you block origin, https everywhere, netcraft, and shodan in a virtual machine to securely gather evidence and preserve pages.
Explore Intelligence X, a versatile OSINT search engine for domains, emails, IPs, and bitcoin addresses, then export intel from data dumps and breaches, with both free and paid options.
Explore free public records search systems dot net to locate names, aliases, locations, and relatives, and see how paid services like BeenVerified or Spokeo extend investigations.
Explore spy dialer for OSINT: perform reverse phone lookups, view phone details and voicemails, and combine with U.S. phone book, white pages, and Google searches.
Explore Have I Been Pwned to check if your email has been part of data breaches, view breached websites and compromised data, and use osint to uncover related accounts.
Learn how dehashed functions as a data breach search tool, allowing you to search emails or usernames across breaches, view breaches and hashes, and monitor assets under lawful guidelines.
Explore Spiderfoot, an OSINT web-based tool that crawls the internet for emails, domains, and other data, with a local web interface and configurable scans.
Explores the epieos osint tool for email lookups and social media linkage, showing how to search an email address and identify connected accounts, with an offline phone lookup.
Set auto start pages in chrome, chromium, brave, and firefox to open your essential OSINT sites on startup, using current pages or custom URLs for faster investigations.
Explore graynoise on viz.graynoise.io to analyze global network attacks and CVEs, tracking malicious, suspicious, and benign IP activity and specific exploits like CVE 2026-21962.
Explore facepair.com to compare two faces, as ai analyzes facial features like the nose and eyes and assesses likeness scores to determine how similar two people look.
Explore leaked domains and related databases on leaked, practice searching domains, emails, usernames, and other data, and note partial redactions and the need to verify results.
Explore meta osint, a GitHub search tool that organizes disinformation and hacking resources by category, highlighting sources like Snopes, PolitiFact, and Hoaxy.
Explore a web page downloader chrome extension to archive and save websites offline, download HTML, images, links, or assets (CSS, JavaScript, PDFs), and inspect site structure.
Build your own osint machine from the ground up using a customizable template of tools and configurations tailored to your investigations.
Closing the course, the instructor reflects on building an osint machine and demonstrates a tracker vm, encouraging customization, updates, and ongoing refinement of tools and passwords.
Learn how to build your own OSINT machine (VM) from scratch, using Mint Linux or other distros, and customize tools, templates, tor routing, and reporting scripts.
Load linux mint in a virtual machine, choosing the cinnamon edition and a nearby mirror, allocate memory and disk, then install mint and enable guest editions for full screen.
Customize Linux Mint by changing wallpaper and menu images, adding items, and moving applications. Change lock screen and Plymouth logo by editing backgrounds, resizing to 100 by 100 with pinta.
Explore a practical OSINT machine setup by detailing recommended apps and tools, from Tor browser and Brave to Data Miner, deep fake detectors, OSINT suites, and password managers.
In this course we will be building a OSINT machine from scratch using VirtualBox and Debian Linux. While there are at least a hand full of OSINT virtual machines that are prebuilt, having one that is tailored to our unique needs and is built and configured from the "ground up" by us will not only give us a deeper understanding of our new OS, but also streamlined to our own unique needs and preferences. We will be covering What Virtualbox and virtualization is, installing Virtualbox, installing Debian Linux, updating, basic commands, installing various OSINT tool and why, and more.
This course is not a OSINT Primer, we will not be going over the how's and why for OSINT in this course. If you are looking for learning OSINT I suggest checking out my OSINT: Open-Source Intelligence course.
Also if you are coming from my OSINT 1 or OSINT 2 course we are going to be installing largely the same software that we used in those courses to build this machine. I just want to make that clear so you can make a more informed decision about this course.
If you have any questions or problems please feel free to contact me, even if you didn't purchase this course or haven't started or even finished it. I am always happy to help if I can.
Also I have no direct affiliation with any site(s) , software, or groups/companies presented in this course.
Thank you for checking out this course and happy hunting!