Which of the following activities uses OSINT?

Social engineering testing often leverages OSINT (Open-Source Intelligence) to gather information about targets. This can include details like employee names, roles, interests, and company structure, which are then used to craft convincing phishing emails, pretexting scenarios, or other social engineering attacks. Data analysis of logs, collecting evidence of malicious activity, and producing Indicators of Compromise (IOCs) are all crucial security activities but do not primarily involve the use of publicly available information in the same way OSINT supports social engineering reconnaissance.