Open source intelligence (OSINT) is considered publicly available information (PAI). OSINT, until the internet was introduced, included newspaper clippings and library resources. OSINT mediums are ever-changing, and therefore, collecting this information is both an art and a science. Finding the most effective and secure OSINT technologies have a lasting impact on investigations. Conveying the sentiment coined by William Gibson,...
Transforming open source data into intelligence, or OSINT, has become increasingly complex over the last decade. Although more open sources are available to operators, the dramatic increase of false information and adversarial counter attacks online have made the collection of data an even more tedious process. Known as the OSINT...
In this webcast, Mitch Freddura, Program Manager of our Ntrepid Academy, walked through the fundamentals and best practices of managing your online attribution, defined the landscape of the clear and deep web, and covered useful online research techniques.
Transforming open source data into intelligence, or OSINT, has become increasingly complex over the last decade. Although more open sources are available to operators, the dramatic increase of false information and adversarial counter attacks online have made the collection of data an even more tedious process. Known as the OSINT...
Bitcoin could actually put you at risk of exposing your alias. But with the proper precautions and rigorous OPSEC, your mission objectives remain feasible, even while manipulating bitcoin.
This blog highlights the FireFox Lightbeam tool that shows how many third party sites that are viewing your activity when you visit a given website. I also discuss the only way to mitigate this ubiquitous monitoring—perfecting your OPSEC and managing your online fingerprint.
In this episode of the series, I apply our threat model to a scenario with significantly higher vulnerability than the last. In this example, the client is conducting active engagement with an overseas illegal marketplace operated by the target.
The most effective way to expose online identities and aliases is a technique called the Canary Trap or the Barium Meal Test. None of the standard managed attribution practices are effective in thwarting it because it attacks the human operator, rendering most tools ineffective.
When conducting intelligence operations, it is important to avoid attention.We have all heard the advice, “When in Rome, do as the Romans do,” but how do we achieve that when we are in Rome.com? What different factors will make us stand out from the crowd and attract unwanted attention during online operations? ...
Sometimes the best way to understand how a solution might work for you is to see how it was used by someone else. One of our customers kindly gave us permission to use them in an anonymous case study.
