Dragos Threat Intelligence - OSINT Primer at RSAC Security Conference

This Dragos OSINT primer outlines how open-source information can be leveraged during the reconnaissance phase against ICS targets, cataloging common sources (social media, job postings, vendor and government sites, search tools like VirusTotal), presenting case studies of adversary activity against energy and industrial organizations, and providing a Risk and Vulnerability Matrix to assess OSINT value. The report concludes with actionable defender recommendations—conduct regular OSINT assessments, limit public exposure of vendor/partner data and sensitive documents, implement authentication controls and multifactor authentication, and document OSINT value to adversaries—to reduce attacker targeting and operational effectiveness.