Open-source intelligence is the fastest way to see a principal the way an adversary does. It is also easy to over-read, and during a crisis it fills with fakes. Where it helps, where it stops, and how to collect it responsibly.

An advance report earns its place when the detail lead can act on it at 0600 without making a phone call. What belongs in it, what doesn’t, and how to keep it current.