A common challenge for OSINT practitioners and penetration testers alike is to fully identify the range of domains owned and managed by a particular organisation. Identifying the main domain that a company owns is usually fairly easy since it can be found in the second half of a company email ([email protected]) or as part of …
How To Identify A Company’s Domains With Azure AD Read More »
In last week’s Wednesday Quiz Tilman Wagner posted this photo and asked us several questions about it: 1) Who posted it and where? 2) What was the occasion? 3) Did Tilman participate, and if so, how? So where to start? We need to know the location before we can answer any of Tilman’s questions. There …
Quiztime: How To Clean Pictures For Better Search Results Read More »
Being able to prove exactly when data was posted to the internet is a core skill for internet investigators. If you want to be able to prove when a video was first uploaded, when an account was created, or when an editorial change was made to a website, then you need to be able to …
Sometimes the way to solve a geolocation challenge is obvious. Other times less so. The Quiztime challenge that Fiete Stegers set on 8th October was certainly in the latter category and was probably the hardest Quiztime I’ve attempted so far. This is quite a lengthy write-up, so click to skip ahead to sections of interest. …
In the last post we looked at the basic building blocks of the Open Street Map (OSM) database. Objects in the database are made up of single nodes, ways (which are a series of single nodes joined together), and relations (which are more complex structures where ways and nodes are combined). Tags are used to …
The Open Street Map database contains detailed information about almost every square metre of the surface of the planet. Land use, building types, rivers, park benches, pubs, streets and millions of other data points are all mapped out and documented in detail. You might be familiar with the browser-based Open Street Map (OSM) website. Superficially …
There’s a huge difference between countries when it comes to using publicly available records for OSINT. If you’re researching a subject in the USA there’s a wealth of available information. In the EU it’s almost the opposite and it can be very difficult to find any public data at all. The UK is much more …
Ever since I started blogging about image geolocation I’ve tried to write about methods and techniques that make solving these kind of puzzles more structured and systematic. In my professional career I was (until recently) a criminal investigator so it was helpful for me to transfer habits and methodologies from traditional investigation to the subject …
Extract, Research, Verify: Quiztime 6th October 2020. Read More »
Over the weekend my site suffered from a spike in traffic that caused the WordPress interface and then the rest of the site to grind to a halt. This blog runs on a VPS that has about the same computing power as a first generation Raspberry Pi and so it doesn’t take much to exhaust …
Hunchly is an excellent OSINT tool designed to capture and record your browser activity as you go. Once activated it sits quietly in the background as you browse and saves copies of webpages as you view them. It also records searches, captures EXIF data from images, takes screenshots, and saves lots of other useful data …