OSINT in practice — what can be found about your company in 15 minutes

15 minutes passive

· Subdomains (crt.sh / CT)

· Historical URLs (Wayback)

· Brand lookalikes

· Public repos and config leaks (no PII dumps)

Goal: tighten scope and raise signal-to-noise before assessment.