OSINT Threat Analysis (local)

A defensive early-warning tool: the local AI evaluates public news and official warnings and reports when something points to war, attack or crisis that could become dangerous for you. Everything runs locally, public sources only, no surveillance.

What it does

Every 30 minutes it:

1. Fetches official warnings and sources worldwide: - Official warnings for your country, where an open interface exists — e.g. Germany: NINA (MoWaS, KATWARN, BIWAPP, DWD weather service, floods, police); Switzerland: Alertswiss. If there is no such source for your region, the report says "Not available in your region" — the other sources keep running. - News matching your language (German-, English- or French-language outlets) plus international sources (e.g. BBC, Al Jazeera, DW, France 24) - UN disaster alerts (GDACS, ReliefWeb), USGS earthquakes, cyber-security warnings (e.g. CERT-Bund/BSI in Germany)
2. Automatically scans for 8 threat categories: war/military, attack on your own country, CBRN (chemical/biological/radiological/nuclear), cyber attack, critical infrastructure, terror/attack, unrest, natural disaster
3. Has the local AI (Ollama) produce a structured analysis: overall situation, top threats, level 🟢🟡🟠🔴, concrete recommendation — with your location in mind
4. Writes osint-analyse\osint-report.html and warns from ORANGE upwards with a Windows notification (and by phone push, if set up — guide 18)

Setup

1. Run EINRICHTEN.bat in the main folder once — your home location, region and language come from there; nothing needs to be entered in the script
2. Install the local AI and download a model (guide 07). Without AI there is no assessment, but the sources are still collected
3. Run osint-analyse\osint-autostart-einrichten.bat as administrator → runs every 30 minutes
4. Test: osint-analyse\osint-START.bat → then open osint-report.html (it only exists after the first run)

Threat levels

Customising the sources

osint-analyse\quellen.txt — one RSS address per line, # = comment. Simply add your own feeds (local newspaper, county/district, specialist topics). The more sources, the better the coverage — but the slower the scan.

Limits & honest assessment

• It needs the internet — it is the early-warning system WHILE the network is running. If the internet fails, the last report applies (check the timestamp!) → then radio + offline knowledge (guide 13).
• The AI can be wrong (false alarm or missed event). At RED always cross-check with official sources: your country's warning app, radio, sirens.
• It only reads what is public in the feeds — no "secret knowledge", no prediction. It only speeds up recognising patterns across many sources.
• Relation to the situation monitor (lage-monitor\): the situation monitor is the simple traffic light, the OSINT analysis the deeper evaluation with categories and top threats. Both can run in parallel; for "well informed", the OSINT analysis alone is usually enough.

Useful combinations

OSINT reports ORANGE/RED → evacuation widget (guide 14) for direction, Kiwix (15) for background, local AI (07) for detailed questions, the other guides for concrete preparation.