At last month’s SANS OSINT Summit I gave a talk the usefulness of SSL certificates for open source intelligence researchers. The talk looks at three recent examples of how information from certificate transparency logs can be used to discover, attribute, and unmask threat actor infrastructure. The video of the talk has now been published and you can […]
Using SSL Certificates To Find Threat Actor Infrastructure Read More »
Telegram is one of the most important platforms for OSINT investigators. I joined the Needlestack podcast to discuss how Telegram works and shared some practical OSINT advice along the way.
Telegram For Cyber Investigators Read More »
Disinformation and propaganda has been one of the key features of the war between Russia and Ukraine. One of the many groups that have sprung up to push pro-Russian propaganda narratives is a small hacktivist organisation called Beregini. This article by Givi Gigitashvili provides a useful introductory insight into the methods of Beregini by analysing
Digging Into Russian Disinfo Infrastructure Read More »
Some images are easier to geolocate than others. If an image is easy to geolocate it is generally because at least one of the following three conditions apply: Sometimes none of these conditions apply. When this is the case geolocation becomes much harder and a more methodological structure is needed. Here’s a walkthrough of such
Geolocation: At The Retail Park Read More »
This week’s huge protests in Israel drew huge crowds to the streets – but how many people took part? Crowd sizes are often used as evidence to show how widely supported a particular cause is, so being able to determine how many people took part in a demonstration is an important skill for those working
Counting Crowds In Public Spaces Read More »
