OSINT Signal Synthesis under Uncertainty

Intermediate

Learn to correlate intelligence signals when sources conflict and evidence is incomplete.

45 min Lab: playbook 4 objectives 3 evidence types
osint intelligence uncertainty correlation
45
Minutes
4
Objectives
3
Evidence Types
4
Success Criteria

Case Narrative

OSINT Signal Synthesis under Uncertainty πŸ”—

Scenario πŸ”—

You are investigating a suspicious domain suspicious-domain.example that has been
flagged in multiple threat intelligence feeds. However, the sources provide
conflicting information:

  • WHOIS data: Recently registered (high risk)
  • Social signals: References in legitimate security discussions (low risk)
  • Technical indicators: Mixed SSL certificate patterns (medium risk)
  • Behavioral analysis: Unusual DNS resolution patterns (high risk)

Your Challenge πŸ”—

Synthesize these conflicting signals into a coherent risk assessment.
You must:

  1. Evaluate source reliability - Not all intelligence sources are equal
  2. Identify signal conflicts - Where do sources disagree and why?
  3. Weight evidence appropriately - Some indicators are more reliable than others
  4. Make decisions under uncertainty - You won’t have perfect information
  5. Document confidence levels - Track how certain you are about each conclusion

What You’ll Learn πŸ”—

  • How to handle conflicting intelligence signals
  • Techniques for source reliability assessment
  • Confidence tracking and uncertainty management
  • Evidence synthesis methodologies
  • Decision-making under incomplete information

Success Criteria πŸ”—

  • Identify at least 3 signal conflicts
  • Provide confidence scores for each major conclusion
  • Demonstrate evidence-based reasoning
  • Reach a defensible final assessment

Learning Objectives

1
Master conflicting signal analysis
2
Develop confidence tracking skills
3
Practice evidence-based reasoning
4
Learn uncertainty management techniques

Required Evidence

Signal Correlation Not collected yet
Confidence Assessment Not collected yet
Source Reliability Not collected yet

Case Details

Difficulty
Intermediate
Duration
45 min
Lab Type
playbook
Slug
osint-signal-synthesis

Prerequisites

No prerequisites - open to all

Success Criteria

Evidence Quality Threshold 0.7
Final Assessment Required Required
Min Confidence Entries 5
Min Conflicts Identified 3

Tags

osint intelligence uncertainty correlation