Using SSL Certificates To Find Threat Actor Infrastructure

At last month’s SANS OSINT Summit I gave a talk the usefulness of SSL certificates for open source intelligence researchers. The talk looks at three recent examples of how information from certificate transparency logs can be used to discover, attribute, and unmask threat actor infrastructure. The video of the talk has now been published and you can watch it here.

The tools and resources I refer to in the talk can all be found here.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.