diff --git a/functions/cybersecurity/osint_crypto_wallet.go b/functions/cybersecurity/osint_crypto_wallet.go
new file mode 100644
index 00000000..da331c40
--- /dev/null
+++ b/functions/cybersecurity/osint_crypto_wallet.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintCryptoWallet represents a cryptocurrency wallet tracked in an OSINT investigation.
+type OsintCryptoWallet struct {
+	Address    string  `json:"address"`
+	Blockchain string  `json:"blockchain"`
+	Balance    float64 `json:"balance"`
+	FirstSeen  string  `json:"first_seen"`
+	LastSeen   string  `json:"last_seen"`
+}
diff --git a/functions/cybersecurity/osint_document.go b/functions/cybersecurity/osint_document.go
new file mode 100644
index 00000000..8a1d9e5c
--- /dev/null
+++ b/functions/cybersecurity/osint_document.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintDocument represents a document or file of interest in an OSINT investigation.
+type OsintDocument struct {
+	Title          string `json:"title"`
+	Format         string `json:"format"`
+	Classification string `json:"classification"`
+	HashSHA256     string `json:"hash_sha256"`
+	Source         string `json:"source"`
+}
diff --git a/functions/cybersecurity/osint_domain.go b/functions/cybersecurity/osint_domain.go
new file mode 100644
index 00000000..4386c38b
--- /dev/null
+++ b/functions/cybersecurity/osint_domain.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintDomain represents an internet domain tracked in an OSINT investigation.
+type OsintDomain struct {
+	FQDN        string   `json:"fqdn"`
+	Registrar   string   `json:"registrar"`
+	CreatedDate string   `json:"created_date"`
+	ExpiresDate string   `json:"expires_date"`
+	NameServers []string `json:"name_servers"`
+}
diff --git a/functions/cybersecurity/osint_email.go b/functions/cybersecurity/osint_email.go
new file mode 100644
index 00000000..819c6f96
--- /dev/null
+++ b/functions/cybersecurity/osint_email.go
@@ -0,0 +1,9 @@
+package cybersecurity
+
+// OsintEmail represents an email address of interest in an OSINT investigation.
+type OsintEmail struct {
+	Address  string `json:"address"`
+	Provider string `json:"provider"`
+	Verified bool   `json:"verified"`
+	Breached bool   `json:"breached"`
+}
diff --git a/functions/cybersecurity/osint_event.go b/functions/cybersecurity/osint_event.go
new file mode 100644
index 00000000..b28b534e
--- /dev/null
+++ b/functions/cybersecurity/osint_event.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintEvent represents a notable event or incident in an OSINT investigation.
+type OsintEvent struct {
+	EventType   string `json:"event_type"`
+	Date        string `json:"date"`
+	Location    string `json:"location"`
+	Description string `json:"description"`
+	Severity    string `json:"severity"`
+}
diff --git a/functions/cybersecurity/osint_ip_address.go b/functions/cybersecurity/osint_ip_address.go
new file mode 100644
index 00000000..4df40520
--- /dev/null
+++ b/functions/cybersecurity/osint_ip_address.go
@@ -0,0 +1,11 @@
+package cybersecurity
+
+// OsintIPAddress represents an IP address of interest in an OSINT investigation.
+type OsintIPAddress struct {
+	IP          string `json:"ip"`
+	ASN         string `json:"asn"`
+	Country     string `json:"country"`
+	ISP         string `json:"isp"`
+	Geolocation string `json:"geolocation"`
+	LastSeen    string `json:"last_seen"`
+}
diff --git a/functions/cybersecurity/osint_location.go b/functions/cybersecurity/osint_location.go
new file mode 100644
index 00000000..d4a63c4c
--- /dev/null
+++ b/functions/cybersecurity/osint_location.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintLocation represents a geographic location of interest in an OSINT investigation.
+type OsintLocation struct {
+	Lat     float64 `json:"lat"`
+	Lon     float64 `json:"lon"`
+	Address string  `json:"address"`
+	Country string  `json:"country"`
+	City    string  `json:"city"`
+}
diff --git a/functions/cybersecurity/osint_malware.go b/functions/cybersecurity/osint_malware.go
new file mode 100644
index 00000000..d6cefd1a
--- /dev/null
+++ b/functions/cybersecurity/osint_malware.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintMalware represents a malware sample tracked in an OSINT investigation.
+type OsintMalware struct {
+	Family      string `json:"family"`
+	HashSHA256  string `json:"hash_sha256"`
+	FirstSeen   string `json:"first_seen"`
+	LastSeen    string `json:"last_seen"`
+	ThreatLevel string `json:"threat_level"`
+}
diff --git a/functions/cybersecurity/osint_organization.go b/functions/cybersecurity/osint_organization.go
new file mode 100644
index 00000000..3c5011b8
--- /dev/null
+++ b/functions/cybersecurity/osint_organization.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintOrganization represents a company or group of interest in an OSINT investigation.
+type OsintOrganization struct {
+	LegalName string  `json:"legal_name"`
+	Country   string  `json:"country"`
+	Sector    string  `json:"sector"`
+	Founded   string  `json:"founded"`
+	RiskScore float64 `json:"risk_score"`
+}
diff --git a/functions/cybersecurity/osint_person.go b/functions/cybersecurity/osint_person.go
new file mode 100644
index 00000000..0d60f45d
--- /dev/null
+++ b/functions/cybersecurity/osint_person.go
@@ -0,0 +1,11 @@
+package cybersecurity
+
+// OsintPerson represents an individual of interest in an OSINT investigation.
+type OsintPerson struct {
+	FullName    string   `json:"full_name"`
+	Alias       []string `json:"alias"`
+	Nationality string   `json:"nationality"`
+	DOB         string   `json:"dob"`
+	Gender      string   `json:"gender"`
+	RiskScore   float64  `json:"risk_score"`
+}
diff --git a/functions/cybersecurity/osint_phone.go b/functions/cybersecurity/osint_phone.go
new file mode 100644
index 00000000..885d64f7
--- /dev/null
+++ b/functions/cybersecurity/osint_phone.go
@@ -0,0 +1,9 @@
+package cybersecurity
+
+// OsintPhone represents a phone number of interest in an OSINT investigation.
+type OsintPhone struct {
+	Number      string `json:"number"`
+	CountryCode string `json:"country_code"`
+	Carrier     string `json:"carrier"`
+	PhoneType   string `json:"phone_type"`
+}
diff --git a/functions/cybersecurity/osint_social_media.go b/functions/cybersecurity/osint_social_media.go
new file mode 100644
index 00000000..46455688
--- /dev/null
+++ b/functions/cybersecurity/osint_social_media.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintSocialMedia represents a social media account of interest in an OSINT investigation.
+type OsintSocialMedia struct {
+	Platform string `json:"platform"`
+	Username string `json:"username"`
+	URL      string `json:"url"`
+	Followers int   `json:"followers"`
+	Verified bool   `json:"verified"`
+}
diff --git a/functions/cybersecurity/osint_vulnerability.go b/functions/cybersecurity/osint_vulnerability.go
new file mode 100644
index 00000000..c3beb546
--- /dev/null
+++ b/functions/cybersecurity/osint_vulnerability.go
@@ -0,0 +1,10 @@
+package cybersecurity
+
+// OsintVulnerability represents a CVE or security vulnerability in an OSINT investigation.
+type OsintVulnerability struct {
+	CVEID           string  `json:"cve_id"`
+	CVSS            float64 `json:"cvss"`
+	AffectedProduct string  `json:"affected_product"`
+	Published       string  `json:"published"`
+	Exploited       bool    `json:"exploited"`
+}
diff --git a/types/cybersecurity/osint_crypto_wallet.md b/types/cybersecurity/osint_crypto_wallet.md
new file mode 100644
index 00000000..f4c025b7
--- /dev/null
+++ b/types/cybersecurity/osint_crypto_wallet.md
@@ -0,0 +1,19 @@
+---
+name: osint_crypto_wallet
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintCryptoWallet struct {
+      Address    string  `json:"address"`
+      Blockchain string  `json:"blockchain"`
+      Balance    float64 `json:"balance"`
+      FirstSeen  string  `json:"first_seen"`
+      LastSeen   string  `json:"last_seen"`
+  }
+description: "Wallet de criptomonedas rastreada en una investigacion OSINT. Contiene direccion, blockchain, balance y timestamps."
+tags: [osint, crypto, wallet, blockchain, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_crypto_wallet.go"
+---
diff --git a/types/cybersecurity/osint_document.md b/types/cybersecurity/osint_document.md
new file mode 100644
index 00000000..e663b739
--- /dev/null
+++ b/types/cybersecurity/osint_document.md
@@ -0,0 +1,19 @@
+---
+name: osint_document
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintDocument struct {
+      Title          string `json:"title"`
+      Format         string `json:"format"`
+      Classification string `json:"classification"`
+      HashSHA256     string `json:"hash_sha256"`
+      Source         string `json:"source"`
+  }
+description: "Documento o archivo de interes en una investigacion OSINT. Contiene titulo, formato, clasificacion y hash."
+tags: [osint, document, file, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_document.go"
+---
diff --git a/types/cybersecurity/osint_domain.md b/types/cybersecurity/osint_domain.md
new file mode 100644
index 00000000..c98d43be
--- /dev/null
+++ b/types/cybersecurity/osint_domain.md
@@ -0,0 +1,19 @@
+---
+name: osint_domain
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintDomain struct {
+      FQDN        string   `json:"fqdn"`
+      Registrar   string   `json:"registrar"`
+      CreatedDate string   `json:"created_date"`
+      ExpiresDate string   `json:"expires_date"`
+      NameServers []string `json:"name_servers"`
+  }
+description: "Dominio de internet rastreado en una investigacion OSINT. Contiene FQDN, registrar y nameservers."
+tags: [osint, domain, dns, infrastructure, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_domain.go"
+---
diff --git a/types/cybersecurity/osint_email.md b/types/cybersecurity/osint_email.md
new file mode 100644
index 00000000..ad50f52a
--- /dev/null
+++ b/types/cybersecurity/osint_email.md
@@ -0,0 +1,18 @@
+---
+name: osint_email
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintEmail struct {
+      Address  string `json:"address"`
+      Provider string `json:"provider"`
+      Verified bool   `json:"verified"`
+      Breached bool   `json:"breached"`
+  }
+description: "Direccion de email de interes en una investigacion OSINT. Indica si fue verificada y si aparece en breaches."
+tags: [osint, email, identity, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_email.go"
+---
diff --git a/types/cybersecurity/osint_event.md b/types/cybersecurity/osint_event.md
new file mode 100644
index 00000000..9ed9b83f
--- /dev/null
+++ b/types/cybersecurity/osint_event.md
@@ -0,0 +1,19 @@
+---
+name: osint_event
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintEvent struct {
+      EventType   string `json:"event_type"`
+      Date        string `json:"date"`
+      Location    string `json:"location"`
+      Description string `json:"description"`
+      Severity    string `json:"severity"`
+  }
+description: "Evento o incidente notable en una investigacion OSINT. Contiene tipo, fecha, ubicacion y severidad."
+tags: [osint, event, incident, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_event.go"
+---
diff --git a/types/cybersecurity/osint_ip_address.md b/types/cybersecurity/osint_ip_address.md
new file mode 100644
index 00000000..a10170e3
--- /dev/null
+++ b/types/cybersecurity/osint_ip_address.md
@@ -0,0 +1,20 @@
+---
+name: osint_ip_address
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintIPAddress struct {
+      IP          string `json:"ip"`
+      ASN         string `json:"asn"`
+      Country     string `json:"country"`
+      ISP         string `json:"isp"`
+      Geolocation string `json:"geolocation"`
+      LastSeen    string `json:"last_seen"`
+  }
+description: "Direccion IP de interes en una investigacion OSINT. Contiene ASN, geolocalizacion e ISP."
+tags: [osint, ip, network, infrastructure, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_ip_address.go"
+---
diff --git a/types/cybersecurity/osint_location.md b/types/cybersecurity/osint_location.md
new file mode 100644
index 00000000..14937d65
--- /dev/null
+++ b/types/cybersecurity/osint_location.md
@@ -0,0 +1,19 @@
+---
+name: osint_location
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintLocation struct {
+      Lat     float64 `json:"lat"`
+      Lon     float64 `json:"lon"`
+      Address string  `json:"address"`
+      Country string  `json:"country"`
+      City    string  `json:"city"`
+  }
+description: "Ubicacion geografica de interes en una investigacion OSINT. Contiene coordenadas, direccion y pais."
+tags: [osint, location, geography, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_location.go"
+---
diff --git a/types/cybersecurity/osint_malware.md b/types/cybersecurity/osint_malware.md
new file mode 100644
index 00000000..3138bc78
--- /dev/null
+++ b/types/cybersecurity/osint_malware.md
@@ -0,0 +1,19 @@
+---
+name: osint_malware
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintMalware struct {
+      Family      string `json:"family"`
+      HashSHA256  string `json:"hash_sha256"`
+      FirstSeen   string `json:"first_seen"`
+      LastSeen    string `json:"last_seen"`
+      ThreatLevel string `json:"threat_level"`
+  }
+description: "Muestra de malware rastreada en una investigacion OSINT. Contiene familia, hash SHA256 y nivel de amenaza."
+tags: [osint, malware, threat, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_malware.go"
+---
diff --git a/types/cybersecurity/osint_organization.md b/types/cybersecurity/osint_organization.md
new file mode 100644
index 00000000..0d5576e3
--- /dev/null
+++ b/types/cybersecurity/osint_organization.md
@@ -0,0 +1,19 @@
+---
+name: osint_organization
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintOrganization struct {
+      LegalName string  `json:"legal_name"`
+      Country   string  `json:"country"`
+      Sector    string  `json:"sector"`
+      Founded   string  `json:"founded"`
+      RiskScore float64 `json:"risk_score"`
+  }
+description: "Organizacion o empresa de interes en una investigacion OSINT. Contiene datos legales, sector y score de riesgo."
+tags: [osint, organization, company, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_organization.go"
+---
diff --git a/types/cybersecurity/osint_person.md b/types/cybersecurity/osint_person.md
new file mode 100644
index 00000000..30088765
--- /dev/null
+++ b/types/cybersecurity/osint_person.md
@@ -0,0 +1,20 @@
+---
+name: osint_person
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintPerson struct {
+      FullName    string   `json:"full_name"`
+      Alias       []string `json:"alias"`
+      Nationality string   `json:"nationality"`
+      DOB         string   `json:"dob"`
+      Gender      string   `json:"gender"`
+      RiskScore   float64  `json:"risk_score"`
+  }
+description: "Persona de interes en una investigacion OSINT. Contiene identidad, nacionalidad y score de riesgo."
+tags: [osint, person, identity, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_person.go"
+---
diff --git a/types/cybersecurity/osint_phone.md b/types/cybersecurity/osint_phone.md
new file mode 100644
index 00000000..4823faa1
--- /dev/null
+++ b/types/cybersecurity/osint_phone.md
@@ -0,0 +1,18 @@
+---
+name: osint_phone
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintPhone struct {
+      Number      string `json:"number"`
+      CountryCode string `json:"country_code"`
+      Carrier     string `json:"carrier"`
+      PhoneType   string `json:"phone_type"`
+  }
+description: "Numero de telefono de interes en una investigacion OSINT. Contiene carrier, codigo de pais y tipo."
+tags: [osint, phone, telecom, identity, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_phone.go"
+---
diff --git a/types/cybersecurity/osint_social_media.md b/types/cybersecurity/osint_social_media.md
new file mode 100644
index 00000000..03f98db1
--- /dev/null
+++ b/types/cybersecurity/osint_social_media.md
@@ -0,0 +1,19 @@
+---
+name: osint_social_media
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintSocialMedia struct {
+      Platform  string `json:"platform"`
+      Username  string `json:"username"`
+      URL       string `json:"url"`
+      Followers int    `json:"followers"`
+      Verified  bool   `json:"verified"`
+  }
+description: "Cuenta de red social de interes en una investigacion OSINT. Contiene plataforma, usuario y seguidores."
+tags: [osint, social_media, identity, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_social_media.go"
+---
diff --git a/types/cybersecurity/osint_vulnerability.md b/types/cybersecurity/osint_vulnerability.md
new file mode 100644
index 00000000..7abea230
--- /dev/null
+++ b/types/cybersecurity/osint_vulnerability.md
@@ -0,0 +1,19 @@
+---
+name: osint_vulnerability
+lang: go
+domain: cybersecurity
+version: "1.0.0"
+algebraic: product
+definition: |
+  type OsintVulnerability struct {
+      CVEID           string  `json:"cve_id"`
+      CVSS            float64 `json:"cvss"`
+      AffectedProduct string  `json:"affected_product"`
+      Published       string  `json:"published"`
+      Exploited       bool    `json:"exploited"`
+  }
+description: "Vulnerabilidad CVE rastreada en una investigacion OSINT. Contiene CVSS score y estado de explotacion."
+tags: [osint, vulnerability, cve, threat, intelligence]
+uses_types: []
+file_path: "functions/cybersecurity/osint_vulnerability.go"
+---