Skill: osint-automation-frameworks
Time: ~60 minutes setup + first run

Goal

Automate passive footprinting of a domain or entity inside a controlled environment.

Steps

1. Install SpiderFoot locally or on an org VM — never against personal targets without policy.
2. Create a new scan; choose passive modules first.
3. Seed with domain name or company name from public records.
4. Review findings as leads; manually verify high-impact items.
5. Export JSON/CSV for your evidence log.
6. Purge scan data per retention policy.

Pitfalls

• Active modules can touch targets — legal review first.
• False positives from shared infrastructure.

Next steps

• Tutorial — DNS and WHOIS basics for manual confirmation