Internet archiving services are powerful open source intelligence (OSINT) tools that can be used like a time machine to look back in time for information that may be crucial to an online investigation. But, just as they can provide a glimpse into the past, these services have also been used...
The ability to perform OSINT efficiently and without detection is not any easy task. Our trained cyber analysts offer a number of virtual courses on OSINT training. At the Academy, our analysts discuss the collection phase of the OSINT cycle, OSINT research, and OSINT investigations.
The consequence of employing poor managed attribution practices is exposure—exposure of your online activities, your professional affiliation, and, potentially your true identity.
With just a name and an email address, an open source analyst can likely discover the hometown, employer, and alma mater of most individuals with a smartphone.
When you are trying to operate online, it may seem obvious that you need an alias; the question is, what kind? In this blog, I am going to share with you my framework for the four forms of online identity.
The internet has become an incredibly visual medium. Faces are everywhere online, particularly in social media. But, if you are trying to go online under an alias, faces can create a major problem.
Bitcoin could actually put you at risk of exposing your alias. But with the proper precautions and rigorous OPSEC, your mission objectives remain feasible, even while manipulating bitcoin.
This blog highlights the FireFox Lightbeam tool that shows how many third party sites that are viewing your activity when you visit a given website. I also discuss the only way to mitigate this ubiquitous monitoring—perfecting your OPSEC and managing your online fingerprint.
In this episode of the series, I apply our threat model to a scenario with significantly higher vulnerability than the last. In this example, the client is conducting active engagement with an overseas illegal marketplace operated by the target.
Part 2 of this 3-part series, Lance applies the managed attribution threat model to an OSINT scenario. The MA requirement here is for the operator to blend in with a highly paranoid group while avoiding detection as an alias by the social media platform they are using.
