ShadowDragon training teaches investigators how to reduce manual effort by applying proven OSINT methodologies and efficient workflows. Learn how to move from initial questions to actionable insight without unnecessary steps or wasted time.
Training emphasizes critical thinking, validation techniques, and correlation strategies that help reduce false positives and strengthen investigative conclusions. Investigators learn how to assess data quality and apply findings responsibly.
Our training supports investigators at every stage, from foundational OSINT concepts to advanced investigative workflows. Courses are designed to be applicable beyond ShadowDragon tools, ensuring skills remain valuable across platforms and investigations.
Instructor-Led | 1 Hour
This foundational course introduces open source intelligence concepts and investigative fundamentals. Participants learn the importance of operating within Publicly Available Information (PAI), identify common OSINT sources, and understand the scope and limitations of data collection using ShadowDragon tools.
Instructor-Led | 1 Hour
This course focuses on strengthening analytical thinking in OSINT investigations. Participants learn how to question assumptions, evaluate and validate information, interpret data objectively, consider alternative explanations, and develop effective research questions as investigations evolve.
Instructor-Led | 1 Hour
This session teaches how to build and apply regular expressions (REGEX) using Lucene to support effective alert creation within Horizon Monitor®. Participants learn how pattern matching improves monitoring accuracy and investigative efficiency.
Instructor-Led | 1.5 Hours
Focused on operational security, this course teaches investigators how to recognize and manage digital fingerprints during online investigations. Participants learn best practices for attribution management and apply techniques through practical exercises.
Instructor-Led | 2 Hours
This course teaches how to use Google effectively for OSINT investigations. Participants learn search fundamentals, advanced operators, filtering techniques, and how to use search results and breadcrumbs to pivot investigations within SocialNet® and Horizon Monitor®.
Free | Self-Paced | On-Demand
Designed for new SocialNet users, this course provides a comprehensive introduction to core functionality and investigative workflows. Participants learn how to start investigations, navigate common entry points, and apply recommended methodologies from initial query through actionable insight.
Instructor-Led | Practical Applications
Building on SocialNet Foundations, this course introduces real-world use cases and instructor-guided workflows. Participants gain hands-on experience applying automated playbooks and receive access to the on-demand, self-paced course for continued learning.
Instructor-Led | 4 Hours
Designed for experienced analysts and investigators, this course focuses on advanced tools and investigative techniques through practical application. Participants sharpen their skills through guided research scenarios and Capture The Flag (CTF) exercises.
Instructor-Led | 6 Hours
This in-depth course explores advanced OSINT methodologies and investigative workflows using multiple starting points. Participants expand their understanding of publicly available data sources, leverage additional resources alongside SocialNet, and test their skills through advanced, variable-difficulty CTF exercises.
Instructor-Led | 3 Hours
This course introduces the fundamentals of Horizon Monitor®, including setting up targeted alerts, configuring data sources, and managing monitoring themes. Participants learn how to track subjects of interest and investigate alert activity through practical, real-world use cases.
On-Demand | Incident Response Focus
This session provides guided investigative support for incident response scenarios. Participants learn how to deploy MalNet® to rapidly investigate indicators such as source IP addresses, domains, and DNS data, correlate related IDS signatures, and compare findings against known malware samples.
