The fire public-information officer finds a Facebook profile using the department patch as an avatar and soliciting donations. What is the OSINT product?
Select an answer to reveal the explanation.
Short Explanation
A patch on an avatar plus a donation button is a costume, and costumes get photographed. Capture the public profile as an impersonation finding for the PIO and counsel. Do not try the door with a guessed password.
Full Explanation
When the fire public-information officer finds a Facebook profile using the department patch as an avatar and soliciting donations, the OSINT product is to document the public branding misuse and donation ask as an impersonation finding for the PIO and legal path. Capture and side-by-side comparison to official channels are the open-source deliverable that enables takedown requests and public warnings. Ignoring the profile because only verified pages can impersonate a fire department fails; unofficial pages routinely misuse seals and patches and still mislead donors. Taking over the profile by guessing the password fails as unauthorized access and is not a Fundamentals collection step. Treating every donation page that mentions fire as official fundraising fails; official fundraising must match known civic or foundation channels with verifiable payment paths. Exam caveat: documentation supports PIO and counsel actions; the researcher does not perform account takeover or public accusation beyond sourced description. Operational check: capture profile URL, avatar, donation text, and retrieval date; compare to official fire and foundation pages; hand the package to PIO and counsel with recommended public-messaging and platform-report next steps.