Some images are easier to geolocate than others. If an image is easy to geolocate it is generally because at least one of the following three conditions apply: Sometimes none of these conditions apply. When this is the case geolocation becomes much harder and a more methodological structure is needed. Here’s a walkthrough of such …
This week’s huge protests in Israel drew huge crowds to the streets – but how many people took part? Crowd sizes are often used as evidence to show how widely supported a particular cause is, so being able to determine how many people took part in a demonstration is an important skill for those working …
A common challenge for OSINT practitioners and penetration testers alike is to fully identify the range of domains owned and managed by a particular organisation. Identifying the main domain that a company owns is usually fairly easy since it can be found in the second half of a company email ([email protected]) or as part of …
How To Identify A Company’s Domains With Azure AD Read More »
Wondering how to start out in OSINT? In this video Micah Hoffman, Technisette and I joined David Bombal to discuss some basic OSINT techniques and share examples and stories of our OSINT experiences.
Investigators are often faced with an overwhelming amount of data. In these situations finding an exact person, time, or place among all the noise can be very difficult. This problem is not limited to geo- or chronolocation challenges like those published by Quiztime either. Fortunately this is not a new problem and there are tried …
The Process of Elimination – Quiztime Jan 14th 2022 Read More »
Sometimes the way to solve a geolocation challenge is obvious. Other times less so. The Quiztime challenge that Fiete Stegers set on 8th October was certainly in the latter category and was probably the hardest Quiztime I’ve attempted so far. This is quite a lengthy write-up, so click to skip ahead to sections of interest. …
Why are all these people parking their cars at a swimming pool in the middle of lockdown? This was the question Lars Wienand posted for yesterday’s Quiztime challenge. Here’s the photo: To solve this quiz we need to do two things. First we need to know where this is, and secondly we need to know …
Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it was helpful for me to transfer habits and methodologies from traditional investigation to the subject …
Extract, Research, Verify: Quiztime 6th October 2020. Read More »
The term “OSINT” sometimes gets thrown around a little too loosely. The “open source” part of OSINT is straightfoward enough: there’s a world of information out there and with enough digging and practice you can find almost anything you could ever think of – but by itself this is not OSINT. The “intelligence” part of …
Website OSINT: What’s The Link Between Antifa.com and Russia? Read More »
This article was written jointly with Matthias Wilson (@MWOSINT). It is also published on his own site here. IP addresses feature prominently in digital investigations, but how useful are they for geolocation? The truth is that while IP addresses have many investigative uses, they can be quite unreliable as a precise geolocation method. The limitations …