Private Security Final Exam, 2026 – Security Studies
Comprehensive Review Material
what does OSINT stand for - ANS✔✔ open-source intelligence
OSINT "mindset" information: - ANS✔✔ unverified data points relating to subject
OSINT "mindset" intelligence: - ANS✔✔ reviewed, analyzed, and verified pieces of information
OSINT "mindset" evidence: - ANS✔✔ intelligence processed and collected for presentation
open source - ANS✔✔ any publicly available information
open source intelligence - ANS✔✔ intelligence that is the result of collecting and analyzing
publicly available information
U.S. vs. Josh Merigildo - ANS✔✔ 4th amendment protections are not violated if you access a
profile through a cooperating witness. If privacy settings allow for "friends" to view a site,
government may access information through someone who is a "friend". Subjects have no
justifiable expectation that "friends", the information is public and free to be used by "friends"
in any way- including cooperating w LE. Posts that have more secure privacy settings may be
constitutionally protected.
Katz vs. U.S. - ANS✔✔ the "voluntary disclosure" doctrine is highly cited as justification that
heightened privacy setting are irrelevant, even if the agent used fictitious accounts to gain
access. If a user accepts a friend/social connection through normal means, they no long have
protection on what they share w those individuals. DEA and Mall of America learned the hard
way.
, the signs of a "fake profile" - ANS✔✔ -outdated layout
-the "babe factor"
-few photo uploads
-inconsistent biography
-blank "wall"
-lots of "likes"
how to make the perfect ghost persona - ANS✔✔ -an active investigator should have a generic
account for basic collection and subject identification
-once a subject is identified, ghost accounts that are tailored to the subject should be created to
avoid suspicion
-this account should ONLY be used for on investigation, then deactivated
make profiles for each type - ANS✔✔ -college kids
-drug user
-middle aged
-employed/white collar
-recruiter
-high school kid
repeat content make a blog ensure identities match, consider names that will have search
results but aren't real
ghost accounts-personal identifiers - ANS✔✔ -names should match other identifiers for the
account
-the location should be close to the subject's location
-use "fake name generator"
-use "advanced options" to be able to select states and other key demographics
Comprehensive Review Material
what does OSINT stand for - ANS✔✔ open-source intelligence
OSINT "mindset" information: - ANS✔✔ unverified data points relating to subject
OSINT "mindset" intelligence: - ANS✔✔ reviewed, analyzed, and verified pieces of information
OSINT "mindset" evidence: - ANS✔✔ intelligence processed and collected for presentation
open source - ANS✔✔ any publicly available information
open source intelligence - ANS✔✔ intelligence that is the result of collecting and analyzing
publicly available information
U.S. vs. Josh Merigildo - ANS✔✔ 4th amendment protections are not violated if you access a
profile through a cooperating witness. If privacy settings allow for "friends" to view a site,
government may access information through someone who is a "friend". Subjects have no
justifiable expectation that "friends", the information is public and free to be used by "friends"
in any way- including cooperating w LE. Posts that have more secure privacy settings may be
constitutionally protected.
Katz vs. U.S. - ANS✔✔ the "voluntary disclosure" doctrine is highly cited as justification that
heightened privacy setting are irrelevant, even if the agent used fictitious accounts to gain
access. If a user accepts a friend/social connection through normal means, they no long have
protection on what they share w those individuals. DEA and Mall of America learned the hard
way.
, the signs of a "fake profile" - ANS✔✔ -outdated layout
-the "babe factor"
-few photo uploads
-inconsistent biography
-blank "wall"
-lots of "likes"
how to make the perfect ghost persona - ANS✔✔ -an active investigator should have a generic
account for basic collection and subject identification
-once a subject is identified, ghost accounts that are tailored to the subject should be created to
avoid suspicion
-this account should ONLY be used for on investigation, then deactivated
make profiles for each type - ANS✔✔ -college kids
-drug user
-middle aged
-employed/white collar
-recruiter
-high school kid
repeat content make a blog ensure identities match, consider names that will have search
results but aren't real
ghost accounts-personal identifiers - ANS✔✔ -names should match other identifiers for the
account
-the location should be close to the subject's location
-use "fake name generator"
-use "advanced options" to be able to select states and other key demographics
