During OSINT gathering, what is the MOST effective next step to build a comprehensive profile of the target organization?

• A. Extract metadata from publicly available documents on the organization's website.
• B. Review only job postings found in public forums.
• C. Analyze the organization's internal source code repositories.
• D. Monitor live network traffic from external observers.

Answer: (A)

Extracting metadata from publicly available documents on the organization's website is a powerful starting point because metadata hides in plain sight and can reveal a broad portrait of how the organization operates. Documents such as PDFs and Word files often embed information like author names, organizational affiliations, creation and modification dates, software used, document paths, project codes, and sometimes contact details. Moving through many documents can help you identify who is involved, what projects exist, what tools or platforms are in use, and how information flows through the organization. This creates a layered map of personnel, departments, and relationships without needing access to private systems.

Other options miss that breadth. Job postings can hint at current needs and skills but provide a narrower view focused on roles rather than the full operational footprint. Analyzing internal source code repositories would yield deep technical insight, but those sources are typically not publicly accessible and that data private to the organization; attempting to access them would step outside public-facing OSINT. Monitoring live network traffic from external observers isn’t something you can do as OSINT on a target without access to their network, and it also doesn’t build a broad, public profile of the organization.