Event Intelligence Before, During & After Critical Incidents
REGISTER NOWTCOLE credit is expected; final approval and details are pending through Denton Police Department.
A protest begins organizing online. A counter-event appears. A local issue suddenly draws national attention. People begin traveling into the area. Posts disappear, screenshots circulate, crowd estimates conflict, and the conversation moves somewhere investigators were not watching.
OSINT Incident Response teaches investigators to work that problem from the event outward - identifying the terminology, platforms, public communities, influential voices, logistics, locations, networks, and information flow surrounding a developing incident.
Find the event, identify the language and online ecosystem around it, map public information networks, estimate participation, and establish collection priorities.
Follow rapidly changing information, track platform shifts, verify media and claims, reconstruct deleted or reposted content, and maintain an evolving intelligence picture.
Compare predictions with outcomes, reconstruct what happened, identify intelligence gaps, and use AI-assisted development to prototype a tool for an unmet investigative need.
The commercial platform doesn't do it. The API costs too much. The extension disappeared. The data shouldn't leave the investigator's computer. Or maybe the tool simply doesn't exist.
Translate an investigative workflow problem into functional requirements and use AI-assisted development to create a working prototype.
Event dashboards, crowd estimators, repost timelines, public network maps, multi-platform search launchers, page-change monitors, metadata utilities, and debrief tools.
Students test for bad inputs, false positives, incorrect assumptions, privacy risks, external network calls, and reproducibility before relying on a tool.
No programming experience is required.
This is not a three-day lecture. Students work through a fictional developing incident and continually update their assessment as new information is introduced.
Private-sector attendees must provide proof of qualifying employment.
| Host Agency | Denton Police Department |
| Location | Denton Police Department Training Center |
| Address | 719 E. Hickory Street, Denton, TX 76205 |
| Dates | December 7-9, 2026 |
| Daily Hours | 8:00 AM-5:30 PM |
| Length | 24 instructional hours |
| Capacity | Limited to 35 registrations |
| Certificate | Plessas Experts Network Certificate of Completion |
| TCOLE | Credit expected; final approval/details pending through Denton Police Department |
$995
per student
Pay by credit card, invoice, or purchase order.
REGISTER NOWMinimum enrollment: 14 paid registrations by December 1, 2026. If minimum enrollment is not reached, the course may be canceled or rescheduled.
Students should bring a Windows or macOS laptop with current Chrome and Firefox browsers, internet access, and the ability to download, unzip, and run local HTML training files and utilities.
A personally controlled training laptop is strongly recommended. Agency-managed computers with restrictive browser, download, software, or AI-access policies may prevent completion of some exercises.
Founder & CEO, Plessas Experts Network
Kirby Plessas began her intelligence career as a U.S. Army Military Intelligence Arabic linguist and later supported open-source intelligence efforts associated with the Defense Intelligence Agency and Central Intelligence Agency. In 2007, she was part of the founding team of an innovative federal open-source intelligence center and later served as an OSINT Technical Expert supporting the U.S. Department of Homeland Security.
She has trained more than 25,000 law-enforcement professionals through programs involving FBI, DEA, and other federal, state, local, and partner agencies. Her current work focuses on OSINT, social-media investigations, AI-assisted investigations, digital evidence, investigator OPSEC, automation, and development of custom investigative tools.
Cancellations received before November 20, 2026 receive a full refund. No refunds are available after November 20 unless the course is canceled by the host or training staff.
Email:
[email protected]
Phone:
(202) 684-8101
Learn how to find the event, understand the network, monitor the shift, verify what happened, and build what you need.
REGISTER FOR OSINT INCIDENT RESPONSE