At last month’s SANS OSINT Summit I gave a talk the usefulness of SSL certificates for open source intelligence researchers. The talk looks at three recent examples of how information from certificate transparency logs can be used to discover, attribute, and unmask threat actor infrastructure. The video of the talk has now been published and you can […]
Using SSL Certificates To Find Threat Actor Infrastructure Read More »
Telegram is one of the most important platforms for OSINT investigators. I joined the Needlestack podcast to discuss how Telegram works and shared some practical OSINT advice along the way.
Telegram For Cyber Investigators Read More »
Disinformation and propaganda has been one of the key features of the war between Russia and Ukraine. One of the many groups that have sprung up to push pro-Russian propaganda narratives is a small hacktivist organisation called Beregini. This article by Givi Gigitashvili provides a useful introductory insight into the methods of Beregini by analysing
Digging Into Russian Disinfo Infrastructure Read More »
Twitter’s recent decision to remove blue check marks from accounts it has previously verified causes a number of issues for the platform and its users. One of the most obvious ones is around authentic identity. Without verification, how do I know that a particular account really does belong to the person or organisation who claims
Verify Your Online Identities With Keybase Read More »
Some images are easier to geolocate than others. If an image is easy to geolocate it is generally because at least one of the following three conditions apply: Sometimes none of these conditions apply. When this is the case geolocation becomes much harder and a more methodological structure is needed. Here’s a walkthrough of such
Geolocation: At The Retail Park Read More »
