In OSINT as in sport, there is definitely such a thing as home fixture advantage. We are always going to be able to identify the important little clues in an environment we are familiar with rather than one…
Tag: OSINT
Website Forensics: How To Detect Editorial Changes
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible…
20 Questions – Quiztime 25th November 2019
How much information is there in a photograph? There is always more than you think. I learned recently that when miltary intelligence officers receive their training, they are given a photo that does not seem to contain much detail but…
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all…
Spiderfoot HX: Investigating A Domain Used For Phishing
In my last Spiderfoot tutorial I wrote about how Spiderfoot HX could be used to gather information about a suspicious IP address and then analyse and visualise the data. In this guide I’m going to show how Spiderfoot HX can…
Using Spiderfoot HX To Investigate A Malicious IP Address
Using OSINT to identify and investigate sources of malicious internet activity is a key part of cyber security. There’s a huge range of open source information out there to help with this, and Spiderfoot HX gathers it very quickly. This…
Using Flight Tracking For Geolocation – Quiztime 30th October 2019
Things have been busy lately but I finally managed to catch up with a few recent Quiztime challenges. This post will explain how I managed to solve Tilman Wagner’s challenge from 30th October but I have to say it was…
Using PGP Keys For OSINT
I was originally going to write this guide as part of my post on OSINT for e-mail addresses, but really this is better as separate subject. PGP keys are used for a variety of purposes, but one of the main…
Carbon-14: Verifying The Age of A Website
Carbon14 is a really useful Python tool for website investigations and verification. It allows investigators to work out when a webpage was created, and if it has potentially been altered since it was first published. Carbon14 checks the data attached…
Gap Analysis: Chrono and Geolocation In Berlin (Quiztime 7th October 2019)
I’ve written a few blogs about gap analysis before, but it’s an important skill for investigation and intelligence analysis work so I decided to write about it again. Daily Quiztime challenges are a good platform to demonstrate how this kind…