Skip to content
TREN
← E-libraryGOSI · Study bookTürkçe oku

CSINT RESEARCH · Reading room

OSINT, step by step

Hear a claim. Ask a small question. Find the source. Then write what you know. This is how we will work in this book.

A map, a coastal photograph and a web record connected by pencil lines.
18 chapters · TR / EN · Diagrams & practiceAhmet Göker
Start with chapter 01

One chapter at a time

Read the idea. Follow the drawing. Try the small task before opening its answer. At the end, explain the idea in your own words. Technical terms stay in English; the sentences around them are short.

A note from the author

Why I wrote this book

I kept my own notes and a practice index for eight weeks while studying for GOSI. This book grew from that work. I wanted to keep the terms and explain each idea in small steps. A drawing, a short example and a question to try alone. I am writing for people who want to learn this way.

For me, one hard part of research is keeping the context. A picture can make me angry or afraid. A claim can fit what I believe. These are human feelings. But if I put my feelings or political views before evidence, I lose my way. I start trying to be right instead of trying to understand.

So I ask myself three questions: What do I see? What do I think it means? What do I still not know? I want to ask the same questions about claims I like and claims I do not like. For example, I must not say that a photo shows something which I only read elsewhere.

Sometimes the answer here will be short: this record is not enough. I think that is part of research too. My aim is to say clearly what I know and which source supports it.

Ahmet Göker · CSINT Research

Reading record

Only on this browser. These marks are not test results.

The book

From a question to a report

01 / How do we think?

  1. 01
    Write the question first

    Research starts with a question. Write what you want to know before you open many tabs.

  2. 02
    Separate source and claim

    A good source can still make a mistake.

  3. 03
    Prepare before searching

    Opening a page feels like a small action. It can still leave a trace.

02 / Find, save, check

  1. 04
    Make the search smaller

    A good query says what you need and where to look.

  2. 05
    Keep what you find

    A page may change tomorrow. Keep a record of what you saw today.

  3. 06
    Look at a photo three ways

    First say what you can see. Then check the file and the story around it.

  4. 07
    Where? When?

    Finding the place does not give you the date.

  5. 08
    Put the rows in order

    A table can look tidy and still give a wrong count.

03 / People and companies

  1. 09
    Separate account and person

    Two profiles may use the same name. Keep them as two records first.

  2. 10
    Find the record behind the brand

    A name on a sign may differ from the registered company name.

04 / Internet records

  1. 11
    Name, address and DNS

    A domain is a name. An IP is a network address. Neither is a person’s name.

  2. 12
    Read the name in the certificate

    A name in a record does not prove a working site exists there.

  3. 13
    Which name does email check?

    The visible sender name may differ from the technical sender details.

  4. 14
    Whose server? What evidence?

    Finding an IP may be easy. Linking it to the right company is a separate job.

05 / Finish the work

  1. 15
    Privacy and keys

    Hiding a connection and making a file safe are different jobs.

  2. 16
    Learn a tool by its job

    Ask three things: what goes in, what comes out, and what can be missing?

  3. 17
    Work with a small file

    Try three rows first. Then work with a larger file.

  4. 18
    Write what you know

    The reader looks for the answer first. Show its evidence and limits too.

About this book

This is an independent book for learning GOSI topics. It is not an official GIAC/SANS course book. The tasks were made for this book. They are not exam questions. Real records have their own source links. This book does not promise full exam coverage or a pass.

I used my study notes and the 28-page GOSI Exam Book to choose the topics. Explanations, drawings and exercises were written for this reading edition. This is a short first pass, not a line-by-line version of the PDF. The library, company and people in the small exercises are fictional. Sections marked Real record use credited public sources and media.

Technical references are linked beside the relevant chapters. Exam rules can change; check your own GIAC account. The short wording aims to help beginners. Technical terms still need study.

GIAC · GOSI ↗

Pages carry a source mark. Long text copies include the page address. These measures cannot fully stop copies or screenshots.

© 2026 Ahmet Göker · CSINT Research. All rights reserved for the original text and drawings. Except where the law allows, ask for permission before copying or publishing them again. You can share a link to this book. Other names and sources belong to their owners.