Profile Pictures on Social Media: Operational Risks
The internet has become an incredibly visual medium. Faces are everywhere online, particularly in social media. But, if you are trying to go online under an alias, faces can create a major problem.
20Sep
Off-Facebook Privacy Tool
Facebook's Off-Facebook privacy tool will allow users to clear their browsing history and “disconnect” their profile from the information Facebook gathers while they browse online. But what does this really mean, and is Facebook really shut out from all your data?
20Sep
The Nsight Series: Introducing MA Case Studies
The Ntrepid Nsight Series is a new product line from Ntrepid Academy. Each Nsight paper will examine real world case studies to highlight the managed attribution (MA) and operational security (OPSEC) lessons learned that you need to consider as you operate online.
28Aug
CAKED: Threat Modeling for Managed Attribution Part 3
In this episode of the series, I apply our threat model to a scenario with significantly higher vulnerability than the last. In this example, the client is conducting active engagement with an overseas illegal marketplace operated by the target.
28Aug
OSINT Threat Modeling for Managed Attribution: Part 2
Part 2 of this 3-part series, Lance applies the managed attribution threat model to an OSINT scenario. The MA requirement here is for the operator to blend in with a highly paranoid group while avoiding detection as an alias by the social media platform they are using.
31Jul
Threat Modeling for Managed Attribution: Part 1
Threat modeling for managed attribution systems requires a different methodology. We have developed a new framework that combats threats that are specific to managed attribution.
03Jul
Non-Technical Indicators: How to Blend in Online
When conducting intelligence operations, it is important to avoid attention.We have all heard the advice, “When in Rome, do as the Romans do,” but how do we achieve that when we are in Rome.com? What different factors will make us stand out from the crowd and attract unwanted attention during online operations? ...
12Jun
OSINT Case Study: Code Name “Arid Hunter”
Sometimes the best way to understand how a solution might work for you is to see how it was used by someone else. One of our customers kindly gave us permission to use them in an anonymous case study.
20Dec
The Why and How of High ROI Security Advisory Boards
Creating a strong Security Advisory Board (SAB) for your organization can be a challenge, but it has the potential to yield a significant reward. In a two-part SecurityWeek article series, I discuss my recent experience assembling an advisory board and explore the various ways to ensure that yours brings value...
14Nov
The DNC Hacker Indictment: A Lesson in Failed Misattribution
When reading the Mueller indictment of the Russian DNC hackers, I was stunned to see just how much visibility the US had into the hackers’ operations. In my recent Security Week article, I examine the hackers’ attempts to obfuscate their activities, and discuss what particular actions led to misattribution failure.