Information collected from publicly available sources such as websites, social media, public records, forums, and leaked datasets. OSINT can generate leads and context but must be validated; investigators document sources, capture methods, and time of collection.