Open-source intelligence · Washington, DC

Fractional OSINT,
on retainer.

Ongoing access to senior analysts. The depth of an in-house intelligence team, without standing one up.

What OSINT means on this practice

Open-source intelligence is built from publicly and commercially available information: corporate and court records, social media, breach data, geolocation and adtech data, and the historical record. Analysts connect those sources with social network analysis so a person, company, or network is visible as a set of relationships, not a list of links.

That is the same method used in project investigations and due diligence. The difference on a retainer is tempo. Collection requirements stay standing, and the brief comes back on a rhythm the client sets.

What a fractional retainer includes

  • Continuous monitoring and alerting against requirements you set
  • Executive and brand exposure reviews
  • Recurring intelligence briefs written for a principal or for counsel
  • Priority response from a senior team, sized to the retainer

When a project is the better fit

A single question, a pre-deal review, or a crisis with an end date is usually a project: defined scope, timeline, and deliverable. A retainer earns its place when the question does not end. Many clients start with a project and keep a retainer only if the monitoring requirement is real.

OSINT also feeds due diligence, threat hunting, and protective assessments. Procedures are scoped with the client. They are not published here.

Lawful sources, counsel in the lead

Collection is from lawful open sources. The firm obtains technical legal opinions on methods when the question calls for it. If a law firm is instructing, counsel directs the scope. This page is not legal advice about what your matter permits.

Related

Private investigationLicensed DC private detective work for counsel and principals: public records, OSINT, and litigation support. Threat huntingAttribution, infrastructure mapping, and insider or fraud investigations. Not a 24/7 SOC. Signature reductionA smaller online and technical footprint for executives and travelers before they move.

Know the board before you move.

Confidential 30-minute scoping call. An NDA is available before it. We reply within one business day.

Request a briefing

FAQ

Questions counsel ask first.

What OSINT means here, and when a retainer is the right model.

What is fractional OSINT?

Fractional OSINT gives an organization ongoing access to a senior open-source intelligence team on a monthly retainer. It covers continuous monitoring and alerting, executive and brand exposure reviews, and recurring intelligence briefs, without the cost of building an in-house team.

What is OSINT, and how do investigators use it?

OSINT is intelligence from publicly and commercially available information: corporate and court records, social media, breach data, geolocation and adtech data, and the historical record. Analysts connect these sources through social network analysis to identify people, entities, and relationships a basic search would miss.

Do you publish your OSINT tools or methods?

No. The site describes the categories of source material and the standard of the work. Collection procedures are discussed only inside a scoped engagement. Rook does not provide do-it-yourself instructions.

Is fractional OSINT available to New York law firms?

Yes. The team is based in Washington, DC. Retainers support counsel in the District and in New York, and clients elsewhere. The advertised investigative license is DC DLCP PAI40000046.