Twitter’s recent decision to remove blue check marks from accounts it has previously verified causes a number of issues for the platform and its users. One of the most obvious ones is around authentic identity. Without verification, how do I know that a particular account really does belong to the person or organisation who claims …
Some images are easier to geolocate than others. If an image is easy to geolocate it is generally because at least one of the following three conditions apply: Sometimes none of these conditions apply. When this is the case geolocation becomes much harder and a more methodological structure is needed. Here’s a walkthrough of such …
This week’s huge protests in Israel drew huge crowds to the streets – but how many people took part? Crowd sizes are often used as evidence to show how widely supported a particular cause is, so being able to determine how many people took part in a demonstration is an important skill for those working …
A common challenge for OSINT practitioners and penetration testers alike is to fully identify the range of domains owned and managed by a particular organisation. Identifying the main domain that a company owns is usually fairly easy since it can be found in the second half of a company email ([email protected]) or as part of …
How To Identify A Company’s Domains With Azure AD Read More »
In last week’s Wednesday Quiz Tilman Wagner posted this photo and asked us several questions about it: 1) Who posted it and where? 2) What was the occasion? 3) Did Tilman participate, and if so, how? So where to start? We need to know the location before we can answer any of Tilman’s questions. There …
Quiztime: How To Clean Pictures For Better Search Results Read More »
What’s the most boring part of Open Source Intelligence? Most OSINT practitioners (including me) usually enjoy the research phase of an assignment the most. Collecting data and finding new lines of enquiry is fun, but writing it all up at the end is usually dull. Well-written reports are a vital part of the OSINT process, …
If you’ve been interested in geolocation for any length of time, you’ll already be familiar with some of the most common tools that researchers make use of: Google Maps & Street View, Google Earth, reverse image search tools, Suncalc, and so on. There are many lesser-known tools that are also useful and can help to …
I was kindly invited to the Layer 8 Podcast to talk about my career in OSINT, the skills that make a good OSINT investigator, why I love Quiztime so much, teaching SANS SEC 487 Open Source Intelligence, and what we do at The OSINT Curious Project. You can listen to the podcast here.
In this video Technisette and I joined David Bombal to demonstrate some different geolocation techniques. We covered quite a few topics including: EXIF Data Using terrain features to find locations with Google Earth Removing unwanted parts of an image to do better reverse image searches Cropping and reverse searching images with Bing and Google Lens …
Wondering how to start out in OSINT? In this video Micah Hoffman, Technisette and I joined David Bombal to discuss some basic OSINT techniques and share examples and stories of our OSINT experiences.