A tourism-board intern live-tweets each step of an active OSINT investigation from a personal handle. What OPSEC rule does that break?
Select an answer to reveal the explanation.
Short Explanation
Live-tweeting the investigation is a play-by-play from the sideline that tells the subject someone is looking. Personal handles are still public. Keep the fact of the work off social media until an authorized public report is the product.
Full Explanation
Personal OPSEC includes not advertising that an investigation is underway. Live-tweeting steps from a personal handle can taint the collection, alert subjects, and bind the intern's real identity to the case. Posting hours for public verification, sharing persona credentials, or mirroring the play-by-play on an official account all broadcast the work. Civic OSINT findings belong in the notebook and the professional report, not in a personal feed.