Discovering email addresses or user names is an important part of OSINT work. In this short article I’ll look at three methods for gathering information about Gmail users. How To Tell If An Organisation Uses Gmail The growth of GSuite (now better known as Google Workspace) for cloud based productivity means that organisations can link …
Why are all these people parking their cars at a swimming pool in the middle of lockdown? This was the question Lars Wienand posted for yesterday’s Quiztime challenge. Here’s the photo: To solve this quiz we need to do two things. First we need to know where this is, and secondly we need to know …
Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it was helpful for me to transfer habits and methodologies from traditional investigation to the subject …
Extract, Research, Verify: Quiztime 6th October 2020. Read More »
I started writing up this Quiztime post almost two months ago but then life got very busy and I never managed to finish it. This was a really fun quiz by Lars Wienand and the solution was not as obvious as I first thought it was so a little extra digging was required. Here’s the …
Lost In The Woods & Translation Troubles – Quiztime 10th March 2020 Read More »
January has been a busy month both personally and professionally so I haven’t been able to take part in as many Quiztime challenges as I’d like to. Fortunately I had time to try Sector035’s Thursday Quiz. Sector035 posted not one but two photos. All we had to do was establish where exactly they were taken. …
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible to construct a timeline of when various elements in webpage were put together and so …
Website Forensics: How To Detect Editorial Changes Read More »
Speed is a critical factor in investigations of any kind. The longer information is left or ignored, the more likely it is to become obscured, contaminated, or disappear altogether. This is true of any kind of information, whether it be an eyewitness, a server log, a tweet, a fingerprint, or anything else that an investigator …