In OSINT we make use of the wealth of information that is now available to us, but so often it becomes the case that there is too much information for us to process effectively. It’s easy to drown in a sea of data and you can quickly find yourself with twenty browser tabs open having …
Using Gap Analysis For Smarter OSINT – Quiztime 4th March 2020 Read More »
The last blog post I wrote about Fake Twitter profiles is by far the most widely-read post I’ve ever published since I started this blog. It’s nice when people read your work but there was a little sour note with this post after it was pointed out to me that someone had been posting it …
Who Stole My Stuff? Finding Out Who Is Behind A Website Read More »
The challenge of dealing with fake accounts that spread disinformation is probably one of the greatest challenges facing the large social media companies. Most methods used to detect fake Twitter accounts (like the excellent Botometer) assume that they are working at scale and are automated, and for large bot operations this is almost always the …
How can you become more accurate with photo geolocation? Finding a country is good, finding a town is better, finding a street in a town is better still – but is it possible to get even more accurate than that? It depends on the needs of your case, but if you want to geolocate and …
In OSINT as in sport, there is definitely such a thing as home fixture advantage. We are always going to be able to identify the important little clues in an environment we are familiar with rather than one we aren’t. So when I saw Paul Fennell post this geolocation challenge I was pleased …
Where Was This Taken? Church Spires and Steering Wheels Read More »
A few months ago I wrote about how you could use Carbon-14 to detect the timestamps for images published in webpages. By comparing the publication times of the images with the publication time of the page itself it is possible to construct a timeline of when various elements in webpage were put together and so …
Website Forensics: How To Detect Editorial Changes Read More »
How much information is there in a photograph? There is always more than you think. I learned recently that when miltary intelligence officers receive their training, they are given a photo that does not seem to contain much detail but they are required to produce twenty pieces of intelligence from it: Who is in the …
Automation or Augmentation? Automation is an increasingly important part of OSINT. Even the simplest of investigations can require large amounts of different data types to be gathered and analysed quickly. Yet it is not accurate to suggest that all OSINT work is going to be automated as time progresses. Good OSINT practitioners will do …
Crypto Scam Investigation: Using Spiderfoot HX For OSINT Automation Read More »
In my last Spiderfoot tutorial I wrote about how Spiderfoot HX could be used to gather information about a suspicious IP address and then analyse and visualise the data. In this guide I’m going to show how Spiderfoot HX can be used to investigate a domain linked to phishing. Despite a lot of high-profile …
Spiderfoot HX: Investigating A Domain Used For Phishing Read More »
Using OSINT to identify and investigate sources of malicious internet activity is a key part of cyber security. There’s a huge range of open source information out there to help with this, and Spiderfoot HX gathers it very quickly. This allows more time to spend on analysis of the data to help assess the nature …
Using Spiderfoot HX To Investigate A Malicious IP Address Read More »