OSINT and Red Team Engagement

The value of OSINT on a red team engagement is huge. When you are doing some pen testing, how does the OSINT come into play there? We look at it from a standpoint like, okay, if I'm going to be searching like GitHub for username and passwords,. The best way to do this is through, hey, you found this information and you're investigating a customer, go ahead and go ahead and just pretty much just present it to the customer. That's it.