"The “OSINT Toolkit to Detect and Analyse IBD-focused FIMI” serves as a comprehensive guide for conducting open-source intelligence (OSINT) investigations, specifically addressing incidents and campaigns of Foreign Information Manipulation and Interference (FIMI) that weaponise identity-based disinformation (IBD). In response to the increasing number of manipulative, coordinated, and intentional attacks against individuals and groups based on their gender, sexual orientation, race, or ethnicity, these guidelines have a two-fold objective. They aim to equip potential victims with the tools and methodologies to detect, analyse, and gather evidence to counter these threats. At the same time, they wish to raise awareness among OSINT practitioners of recognising and adopting an IBD-specific lens in their investigative activities.
The guidelines are structured as follows. First, they define IBD and discuss its intersection with FIMI, exploring how the identity dimension is exploited for malign purposes. Then, the guidelines introduce key frameworks that offer a systematic approach to analysing FIMI. The second part outlines best practices for conducting IBD-focused public interest OSINT investigations on FIMI, emphasising the need for thorough threat assessments of the online ecosystem. The section provides practical guidance on navigating the complexities of these campaigns while ensuring responsible investigative methods. The third section presents a comprehensive and accessible catalogue of OSINT tools to investigate IBD within the context of FIMI. These tools cover a range of functions, including archiving digital evidence, assessing coordination between actors, verifying the authenticity of content and perpetrators, tracing the source of attacks, and evaluating the overall impact of disinformation operations. Finally, the document concludes with actionable recommendations to strengthen democratic integrity and bolster the global response to IBD-driven FIMI. These recommendations aim to guide future actions, promote greater collaboration within the OSINT community, and enhance the resilience of targeted groups against this phenomenon." (Executive summary)