Accelerating Federal Investigations with OSINT Insights
The 2021 Intelligence Authorization Act requested that the Director of National Intelligence assess the intelligence community’s plans and strategies for the use of open-source intelligence, or intelligence gleaned from the analysis of publicly and commercially available information (PAI/CAI).[1]
To comply with this request, many federal agencies now strive to collect PAI and CAI. But collection itself is insufficient. PAI and CAI aren’t intelligence. They’re datasets. Turning PAI and CAI into insight requires an AI-powered risk intelligence platform.
The investigative landscape
Federal investigations are undertaken by a huge number of professionals working in a broad array of agencies, such as the Secret Service scrutinizing threats against the President, FEMA determining where to deploy resources after a hurricane, and every law enforcement and counterterrorism organization in between. These include the Department of Homeland Security, the Department of War, the Drug Enforcement Agency, the FBI, CIA, U.S. Customs and Border Protection, the Bureau of Alcohol, Tobacco, Firearms and Explosives, and the U.S. Marshals Service.
Across the board, near-real time situational awareness, threat awareness, and targeted investigative capabilities are needed to help federal investigators disrupt criminal activities, apprehend offenders, and protect the public.
What is PAI/CAI?
PAI and CAI are information sets accessible by the public, either for free or for purchase. The amount of PAI and CAI available for study is almost unimaginably vast. Here’s a sampling of what it includes:
- Articles, images, and videos appearing on both established news sites and blog sites
- Social media posts, including videos and short-form posts
- Consumer information
- Crime and court records
- Satellite imagery
- Web-cam feeds and traffic-cam imagery
- Top-web and dark-web sites and chat rooms
- Top-web and dark-web marketplaces
- Business incorporation information
- Vehicle records
Learn the basics
How a risk intelligence platform can help
A risk intelligence platform is specialized software that closes the visibility gaps among disparate and siloed datasets and systems. These platforms provide actionable threat awareness by detecting emerging geopolitical threats, unmasking malicious actors, identifying compromised vendors, and providing other types of intelligence. They do this by searching and monitoring publicly and commercially available datasets and analyzing the results.
OSINT solution use cases
Improving intelligence for counterterrorism and other investigations
In many instances, counterterrorism investigators and analysts begin their work by enhancing their understanding of a situation or individual. Consider troubled conditions in the Mideast as an example.
Hezbollah is a Lebanese Shi'ite Muslim organization, unfriendly to Israel, with close religious and strategic ties to Iran. The U.S. State Department has designated Hezbollah a terrorist organization.[2] The Israel-Hamas war led Hezbollah and Israel to engage in strikes and counterstrikes, despite a declared ceasefire.
Understanding this, intelligence investigators trying to predict likely future events in the Mideast may choose to start by studying recent events. They can begin by searching for keywords such as “Hezbollah,” “Naim Qassem” (the name of Hezbollah’s secretary general), and “Israel.” Hundreds of thousands of documents posted over the last 30 days may be returned — culled from everything from social media platforms to mainstream and niche news sites.
Flooded by results, investigators may choose to limit what’s returned by data source, author, or other parameters. For example, if analysts want a deeper, objective dive into Hezbollah’s role in the Mideast, they can filter returns by mainstream news sources. From there, analysts will obtain up-to-date information about the conflict. Counterterrorism professionals may also learn more about Hezbollah’s relationship with anti-Israeli forces, particularly the Houthi movement in Yemen.
Conversely, if investigators want insight into what Hezbollah members themselves think, they may choose to search social media posts for keywords aligning with that organization.
Counterterrorism is just one example of a use case for a risk intelligence solution. Here are others:
- Striving to curb illegal immigration, analysts can better understand the gang violence in countries such as El Salvador, Honduras, and Guatemala that propels many to migrate to the United States.[3]
- Officials can learn more about the conditions in China, Mexico, and other countries that engender the manufacture of illegal drugs and drug precursors that are fueling the United States’ fentanyl epidemic.[4]
- The rise in organized retail theft, particularly theft that targets retailers’ claims and appeasement policies, now costs stores between $21 billion and $35 billion annually.[5] Law enforcement agents charged with investigating this type of crime may choose to start their work by learning more about which retailers are most vulnerable, which criminal organizations are most active, and where in the country organized retail theft is most prevalent.
Spotting red-flag keywords to curb crime
An agent wants to catch human traffickers transporting victims to the United States. She knows that traffickers often lure victims through deceptive advertising. Online, traffickers target people living in underdeveloped regions with ads for suspiciously well-paying jobs, often in other countries.
These ads appear on surface web social media sites, message boards, and in online comments. Traffickers also communicate on similar but harder-to-reach deep web forums, discussion groups, and marketplaces.
Of course, no ad reads “Human trafficker seeks victims.” So how do investigators separate legitimate recruitment efforts from potential trafficking attempts? Increasingly, they use AI-powered risk intelligence solutions to search for words known to be associated with fake recruitment ads. The promise of “daily payments” for example, is often used by traffickers to lure job seekers. Daily payouts run counter to typical business practices, but the promise of fast pay may tempt people living in poverty.[6]
In their quest to curb human trafficking, investigators may also choose to examine the businesses that enslave trafficking victims. These businesses also advertise. Intelligence solutions can spot the use of overly sexualized language in ads for “day spas” or “massage therapy” businesses that indicate that the institution acts as a front for a prostitution ring that ensnares female trafficking victims.
Similar investigations can be undertaken in a variety of scenarios, such as:
- Illicit international trade is now estimated to cost legitimate businesses trillions annually.[7] Legitimate corporations are harmed when knockoffs flood the market. The rise in black-market trade also deprives governments of tax revenue; supports the exploitation of children and other vulnerable people employed to manufacture illicit goods; and endangers buyers who purchase defective products. To combat illicit trade, investigators may search for phrases such as “discount gift cards” which may indicate someone is trying to unload cards that have been stolen.
- Weapons trafficking brings military-grade firearms, explosive, landmines, grenades, and other weapons into the United States. Agents can find traffickers using advertising keywords known to be associated with arms dealing. “Big fireworks,” and “high yield” for example, may be used by individuals or organizations trafficking bombs.
Uncovering terrorist chatter
Terrorists and other criminals communicate on mainstream social media sites. Hamas used a popular messaging app as one of its primary communications platforms. Some Hamas-dedicated channels had hundreds of thousands of users and contained calls to action for Hamas members.[8]
More often, terrorists choose to communicate via harder-to-reach message boards, forums, and marketplaces on the dark web. Because the nature of tools used to access the dark web ensure anonymity, these sites are a hotbed of illegal and terrorist activity. Still, they are accessible via the right intelligence solutions.
Counterterrorism professionals can use capabilities, including AI, natural language processing, and semantic understanding, to monitor dark web sites, uncover terrorist chatter, and detect early signs of terrorist threats. Investigators may also be able to access videos or other media that contain geolocation information in their metadata, providing insight into a group’s physical location.
Similar capabilities can be used to find chatter among:
Organized retail theft ring members seeking to offload stolen goods
- Arms dealers trying to sell weapons
- Drug dealers
- Human traffickers
- Purveyors of counterfeit goods
Learn more about tools for federal investigations
Finding a potential criminal online is one thing. Tying an online identity to an actual person is another. Here, too, risk intelligence solutions can help.
An agent concerned with the sale of methamphetamine may start his investigation by searching social media for red-flag keywords. These may include “ice,” “cotton candy,” or “rocket fuel.”[9] On a social media platform, he finds someone with the screen name BestPurity1990 using these key words in his posts.
Interested in this social media user, the analyst accesses his profile. There, he finds that the poster lists Cleveland as his hometown. Under “likes,” he lists “Cranking with my boys at Big Mel’s.” With a quick search, the analyst learns that Big Mel’s is a biker bar in Cleveland. The analyst then searches other social media sites for the name “Big Mel’s.” The search returns a lot of posts — Big Mel’s is a popular hangout. Narrowing the search with the words “cranking,” and “tweaking,” they find a handful of photographs tagging different social media users. One, John Smith of Cleveland, lists his email address as BestPurity1990@AmericasISP.com.
From the social media user’s profiles, the analyst learns that this John Smith is a white male in his mid-30s. He lists his occupation as “Sales rep at the best online pharmacy. Discreet, guaranteed shipping.” These are known code words used in drug sales. “Discreet shipping” is code for shipping methods that evade prying governmental eyes. And many illegal drugs are sold through “online pharmacies.” This information, combined with the “purity” brag in Smith’s screen name, indicates to the analyst that Smith may be a meth dealer. The agent decides to investigate John Smith more closely.
Knowing that Smith uses the same screen name for a variety of accounts, he decides to search some dark web marketplaces for “BestPurity1990.” On one of them, the agent finds someone using that screen name communicating with a poster who advertises bulk sales of acetone and pseudoephedrine. Both are methamphetamine precursors. The analyst determines that John Smith is likely a meth dealer and takes appropriate next steps.
Similar searches can be undertaken in a variety of scenarios, including among investigators seeking to:
- Stem the flow of counterfeit goods into the United States
- Limit arms trafficking
- Reduce human trafficking
- Curb organized theft rings
Improve public health and welfare with social media monitoring
Agents from disaster response and public health organizations can use a risk intelligence solution to track the course of epidemics, better deploy relief in times of disaster, and otherwise improve public health and welfare.
Social media monitoring capabilities help disaster response officials better understand natural disasters, such as flash floods, hurricanes, and wildfires. People often post about these events before calling emergency services. The best solutions monitor social media in near-real time. Analysts can quickly learn of these disasters, determine where need is greatest, and respond accordingly. Social media monitoring can merge with searches of data from weather monitoring agencies worldwide and other organizations to deepen analysts’ understanding of the event.
Additional use cases include public health. Investigators can use social media monitoring capabilities to chart the rise of epidemics and pandemics. Monitoring social media platforms can unveil early indicators of a potential outbreak — especially when strategic intelligence solutions collate illness-related hashtags and keywords.
Piercing criminal networks
Criminals — from terrorist cells to organized theft rings — often work in tandem. Piercing criminal networks is therefore an important component of many investigations.
Risk intelligence solutions can help map relationships among criminals. They can chart key connections among people, locations, and events. To do so, they examine hundreds or thousands of associations within a specific social network or discussion group, uncovering previously unknown or hidden relationships, and identifying those participants who wield the most influence. Once influencers are identified, users can delve deeper into those influencers’ online profiles, activities, and associates.
Why Babel Street?
Babel Street’s AI-powered Risk Intelligence Platform provides always-on monitoring of a vast array of PAI and CAI sources. These include more than a billion top-level domains, along with real-world interactions generated on chats, social media posts, online comments, and message boards. Babel Street understands more than 200 languages (including Arabic, Chinese, Russian, and other languages rendered in non-Latin scripts), and translates information found into the user’s language of choice.
These capabilities help federal investigators:
Detect chatter and activity indicative of terrorism, trafficking, and other crimes
Babel Street continuously monitor social media sites and the dark web for signs of terrorists, traffickers, manufacturers of counterfeit goods, and other criminals at work. It rapidly detects evidence of criminal activity appearing in written materials, videos, chat communities, and technical forums – even when this information is presented in coded language, regional dialects, slang, and even emojis.
These same capabilities can scan surface web social media sites for the type of insight needed to support the public in times of disaster: for posts indicating severe flooding, for example, or that may indicate someone planning a mass shooting.
Analyze crime networks
Babel Street can also help pierce criminal and terrorist networks. It maps relationships among social media users and charts key connections among people, locations, and events. Visualizations of these relationships are also provided.
Dismantle criminal plots
Babel Street also empowers analysts to find and dismantle criminal plots. Search capabilities help analysts infiltrate dark web forums, chatrooms, and other sites where criminals gather. There, they can uncover coalescing threats — pinpointing, for example, terrorists discussing potential targets, weapons sourcing, or maneuvers. Babel Street helps find human trafficking rings discussing the transport of victims or arms dealers talking about the delivery of weapons. Using this insight, investigators can counter or halt these activities.
Safeguard anonymity
Babel Street searches are anonymous and can occur within a protected virtual environment that enables intelligence professionals to access and analyze online sources without risking their organization's infrastructure or compromising their own identities. In addition, Babel Street’s hardened proxy network ensures in-country access to sites around the world. If an analyst accesses a Chinese site, he sees the information provided to Chinese nationals, rather than just the information China presents to the wider world.
Obtain graph-powered clarity
Graph-powered clarity is obtained through Babel Street’s knowledge graphs, which create visual representations of corporations, owners, subsidiaries, associated entities, and the relationships among them.
How will you use Babel Street Insights?
Let’s talk about how your organization can benefit from AI-powered data to mitigate risk and maximize your efficiency and decision-making.
Additional Resources
Data Sheet
Babel Street Secure Access
Product/feature brief for Secure Access
Data Sheet
Babel Street Insights
Benefits and features of Babel Street Insights for People Search, Document Search, and maximizing the use of publicly available information.
Data Sheet
Babel Street Insights Synthesis
The benefits and features of Synthesis for enhanced social network and relationship mapping
Data Sheet
Babel Street Insights AI
The benefits and features of Babel Street's generative AI capability that enhances document search.
Frequently asked questions
OSINT stands for open-source intelligence. It involves gathering and analyzing information from publicly available sources to support investigations, research, or decision-making.
Endnotes
1. United States Congress, “H.R. 133 – Consolidated Appropriations Act, 2021,” accessed December 2025, https://www.congress.gov/bill/116th-congress/house-bill/133/text/enr
2. National Counterterrorism Center, “Lebanese Hizballah,” September 2022, https://www.dni.gov/nctc/terrorist_groups/lebanese_hizballah.html
3. Bermeo, Sarah, “Violence drives immigration from Central America,” The Brookings Institution, June 2018,
https://www.brookings.edu/articles/violence-drives-immigration-from-central-america/
4. CDC, “US Overdose Death Decrease in 2023, First Time Since 2018,” May 2024,
https://www.cdc.gov/nchs/pressroom/nchs_press_releases/2024/20240515.htm
5. National Retail Federation and Appriss Retail, “2023 Consumer Returns in the Retail Industry,” December 2023, https://nrf.com/research/2023-consumer-returns-retail-industry
6. Argrigento, Lauren Ann, and Taylor, William Paul Jr., “Stuck in Traffick, A Contextual Analysis of Human Trafficking Advertisements,” accessed December 2025,
7. Global Initiative Against Transnational Organized Crime, “The Global Illicit Economy: Trajectories of Transnational Organized Crime,” March 2021, https://globalinitiative.net/wp-content/uploads/2021/03/The-Global-Illicit-Economy-GITOC-Low.pdf
8. Allyn, Bobby, “The Telegram app has been a key platform for Hamas. Now it's being restricted there,” NPR, October 2023, https://www.npr.org/2023/10/31/1208800238/the-telegram-app-has-been-a-key-platform-for-hamas-now-its-being-restricted-ther.
9. American Addiction Centers, “Meth Street Names, Nicknames and Slang Terms,” accessed December 2025.
Disclaimer:
All names, companies, and incidents portrayed in this document are fictitious. No identification with actual persons (living or deceased), places, companies, and products are intended or should be inferred.