×

OSINT Training for Law Enforcement

24.03.2025

Image for OSINT Training for Law Enforcement

Today, Western Balkans Cyber Capacity Centre (WB3C) launched a specialized training program designed to equip law enforcement professionals from the Western Balkans with practical skills in open-source intelligence (OSINT) and digital investigations. The training is being led by Brigadier Chief Cyril C. of the French National Police, WB3C's in-house trainer, whose extensive expertise ensures participants gain valuable insights grounded in real-world investigative experience.

The program combines theoretical learning with practical exercises, enhancing participants' ability to identify threats, gather digital evidence in lawful ways and support informed decision-making. 

The training will address critical aspects of digital evidence preservation, security checks to prevent data leaks, and safe navigation of the darknet. 

Additionally, participants will develop skills in data collection and metadata analysis to extract valuable insights from publicly available information.
This initiative is designed for English-speaking law enforcement officers, particularly those attending WB3C training for the first time, reinforcing their capacity to address emerging digital threats.


Image for Regional Conference on Foreign Information Manipulation and Interference and Disinformation
Upcoming
Regional Conference on Foreign Information Manipulation and Interference and Disinformation

This regional conference intended for governments, media and civil society brings diverse perspectives on the growing hybrid threats of fake news, disinformation, manipulative and malign narratives that have the power to undermine democratic processes, trust in media and institutions and overal societal resilience and cohesion. Understanding, detecting, preventing, responding, debunking, investigating and prosecuting such manipulations will be the task of our panels, case studies and interactive exercises aimed at supporting governemnts and societies to tackle this challenge. The conference will feature 30 prominent speakers from the EU and the WB region from various departments, sectors and industries. 

CTI for Critical Infrastructure Training Completed

Last week at WB3C, we wrapped up a four-day training on Cyber Threat Intelligence (CTI) focused on the energy sector and government infrastructure, led by Ljuban Petrovic.

Working with SOC, CSIRT and CERT teams from across the region, the training reinforced a simple point: CTI only matters when it informs decisions. When it helps prioritise. When it changes how teams prepare and respond.
The sectoral focus proved its value. Energy infrastructure comes with its own risk landscape, and the discussions reflected that reality—specific, operational, and directly relevant.

We are continuing this work in September, building on what started here.
Because strengthening resilience is not a one-off effort. It is something that develops over time, through practice, exchange, and trust. 

What is Cyber Threat Intelligence (CTI) — and why does it matter?

Simply put, CTI is about turning information into insight, before a threat happens.

Not just collecting data on threats, but understanding who is behind them, how they operate, and what that means for your own systems.
Without that understanding, cybersecurity remains reactive. With it, organisations can anticipate, prioritise and respond with purpose.

Next week at WB3C, we will be running a four-day regional training on Cyber Threat Intelligence (CTI).
The training is designed for SOC, CSIRT and CERT teams, as well as IT professionals working within critical entities—specifically the energy sector. The choice is deliberate.

We are taking a sectoral approach to cybersecurity capacity building. Because threats are not abstract—they target specific systems, infrastructures and vulnerabilities. And the energy sector, as a backbone of economic and societal stability, requires tailored, operationally relevant skills that reflect its real risk landscape.
Over four days, participants will cover:
💡 understanding CTI in the context of critical infrastructure
💡 analysing threats and assessing their impact
💡 translating intelligence into actionable outputs

All week, we will be working closely with cybersecurity professionals from across the region’s energy sector—moving from concepts to application, and building capabilities that can directly support operational decision-making.
This is where CTI becomes operational. Protecting our energy infrastructure means protecting our economy, our security and our livelihood.

Image: Patrick https://lnkd.in/diYnZEgB


Copyright © WB3C

Disclaimer: Translations of the original content written in English into other languages are AI generated by Weglot.