Which of the following describes OSINT?

OSINT is the disciplined practice of collecting, correlating, and analyzing information that is freely and legally accessible from public sources - including websites, social media, public records, WHOIS data, and news - to build a profile of a target during the passive reconnaissance phase. It does not involve unauthorized access and leaves no footprint on the target's systems.

Using tools to gain unauthorized access to internal networks describes active exploitation or intrusion, which is fundamentally different from OSINT's passive, legal, public-source-only methodology.

Using public websites and social media for command and control describes a C2 (Command and Control) evasion technique used to manage compromised hosts, which is unrelated to intelligence gathering.

Collecting active threat data to generate IOCs describes threat intelligence (TI) analysis, a distinct operational discipline that goes beyond publicly available passive reconnaissance.