The OSINT Curious Project OSINTCurious

Happy New Year! We're back in 2021 with a new format. Today Micah (@WebBreacher), John (@thegumshoo), Steve (@nixintel) and Matthias (@MwOsint) discuss OSINT activities around the recent event at the US Capitol, e.g. how crowd-sourced OSINT can support law enforcement and how content was collected and saved by non-profits before being erased off the internet.


---

Support this podcast: https://anchor.fm/osintcurious/support

In this final episode of The OSINT Curious Project webcast/podcast in 2020, we have an interesting panel discussion for you. Micah, Matthias, and Steven discuss some OSINT topics.

People in this Episode

Micah Hoffman (@WebBreacher)
Matthias Wilson (@mwosint)
Steven Harris (@nixintel)

Links to what we discussed

Micah spoke about The OSINT Curious Project and its resources.
Page to find the Advisory and Executive Board members: https://osintcurio.us/about-our-project/
Page to find an organized list of our blogs and videos: https://bit.ly/osintcuriousresources
Page to find our sponsors and patrons: https://osintcurio.us/sponsors-and-contributors/
Patreon page to send donations to help us run the project: https://patreon.com/osintcurious

Our discussion today, touched upon the following topics:
Understanding how tools work (https://medium.com/@micallst/misusing-osint-to-claim-election-fraud-cfb89c858c3a)
Tools versus training
Creating final intel products
Sharing of OSINT techniques
Creating a risk profile prior to OSINT investigations
Disinformation/Misinformation

Our favorite interviewees and blog posts from OSINT Curious’ 2020

Thank you for listening, watching, and reading our content in 2020!


---

Support this podcast: https://anchor.fm/osintcurious/support

People in this Episode

Micah Hoffman (@WebBreacher)
Nico Dekens (@dutch_osintguy)
Ritu Gill (@OSINTTechniques)

Links to what we discussed

Nico is tracking all black friday / cyber monday related deals for you: https://github.com/Dutchosintguy/Blackfriday-Deals-2020
Interesting Twitter thread on Arabic clothing that might be useful in some OSINT investigations: https://twitter.com/AD_GQ/status/1331092825858076673
Nico’s tip on how to search for Parler content without accessing Parler: https://twitter.com/dutch_osintguy/status/1330515656916262912
Keyword search is coming to Instagram! More info here: https://www.theverge.com/platform/amp/2020/11/17/21570475/instagram-keyword-search-update-hashtag-account?__twitter_impression=true
YouTube-DI is back on GitHub: https://github.blog/2020-11-16-standing-up-for-developers-youtube-dl-is-back/
Practice your verification skills with First Draft News’s new interactive quizzes: https://ftp.firstdraftnews.org/articulate/temp/ovcR/story_html5.html
Need some AI generated faces? Check out this massive archive but keep in mind they’re easily recognisable: https://generated.photos/faces
Great Twitter thread on scraping Fleets without triggering the ‘read’ notification: https://twitter.com/donk_enby/status/1329935540049817600
Great resource for international geolocation and winning the GeoGuessr.com game: https://geotips.net/
There’s a new OSINT project, called OSINTDojo that you might want to check out: https://www.osintdojo.com/
Wanna view all tweets from one account? Then check out this tool: https://nitter.net/
Protect your identity by creating an AI-generated photo of yourself: https://generated.photos/anonymizer#

Self Promotion

Ritu will be teaching the SANS SEC487 OSINT course with Micah in December. Look at https://www.sans.org/event/cyber-defense-initiative-2020-live-online/course/open-source-intelligence-gathering for details.
Nico will also be on the https://zolder.io/category/zoldersessions/.


---

Support this podcast: https://anchor.fm/osintcurious/support

Today’s special guest is Samuel Lolagar @osintgeek
Samuel’s website: https://osintgeek.de



People in this Episode

Micah Hoffman (@WebBreacher)
Matthias Wilson (@MwOsint)
Steven Harris (@nixintel)
John TerBush (@thegumshoo)
Nico Dekens (@dutch_osintguy)
Lisette (@technisette)

Links to what we discussed

Here’s a new VM from FireEye for threat intel/research: https://github.com/fireeye/ThreatPursuit-VM
Check out OSINTCombine’s new blog post on dark web OSINT: https://twitter.com/osintcombine/status/1326329875037216768
If you want to know more about Parler and what info you can find: https://twitter.com/firstdraftnews/status/1326973035207921667
Case study of how to verify and geolocate images: https://mxsx.eu/2020/11/13/Wakashio.html
How to use ETags (part of the HTTP response) in OSINT investigations: https://medium.com/@catalyst256/osint-etag-youre-it-ecd7e923392c
Article about militias, their radio gears and channel frequencies utilised by them: https://radiofreeq.wordpress.com/2016/01/19/militia-radio-frequencies/
Tool to collect valuable info from YouTube videos: https://tools.digitalmethods.net/netvizz/youtube/
Lorand’s new blog post explains how to construct powerful search queries: https://www.lorandbodo.com/blog/constructing-searchqueries-osint
Curated dark web resources for OSINT by MidaSearch: https://midasearch.org/dark-web/
Thoughts about sockpuppet accounts for OSINT: https://www.aaroncti.com/lets-talk-about-sockpuppet-accounts/

Self Promotion

Matthias and Samuel are preparing for the German OSINT conference. More info here: https://gosintcon.de
Micah and John are co-chairs of the SANS OSINT Summit, a free 2-day OSINT conference in February 2021 (https://www.sans.org/event/osint-summit-2021/) and are looking for presenters and attendees!
DutchOSINTGuy is proud of his SANS SEC537 Practical OSINT Class (https://www.sans.org/cyber-security-courses/practical-osint-analysis-and-automation/). Registration is open for those classes at significant discount.


---

Support this podcast: https://anchor.fm/osintcurious/support

Today’s special guest


Amine (@aityaakub)

People in this Episode

Micah Hoffman (@WebBreacher)
Matthias Wilson (@mwosint)
Lorand Bodo (@LorandBodo)
Steven Harris (@nixintel)
John TerBush (@thegumshoo)

Links to what we discussed

TOCP Resource List: https://bit.ly/osintcuriousresources
What to do when a Facebook profile is private? https://osintcurio.us/2020/10/19/what-to-do-when-a-facebook-profile-is-private/
10 Minute Tip on geolocation – part I: https://osintcurio.us/2020/11/01/ten-minute-tip-image-geolocation-part-1/
Bellingcat’s OSINT tools: https://docs.google.com/spreadsheets/d/18rtqh8EG2q1xBo2cLNyhIDuK9jrPGwYr9DI2UncoqJQ/edit
Resources on mis/disinformation: https://mediamanipulation.org
Training session on how to verify images/videos by Jane Lytvynenko: https://www.youtube.com/watch?v=8aMk48O3vpM&feature=youtu.be
Geolocating Kim Kardashian: https://vickymochama.medium.com/how-dare-you-kim-kardashians-40th-birthday-an-investigation-766dc879eb23
Guide on how to use Optical Character Recognition: https://www.ghacks.net/2020/10/24/screentranslator-is-an-open-source-tool-that-can-translate-text-from-images/
Finding connections between entities based on text: https://jantegze.medium.com/how-to-find-out-who-owns-my-data-d0c7984ae20f
Investigate international phone numbers: https://www.secjuice.com/phone-numbers-investigation-the-open-source-way/
RIAA GitHub projects for downloading YouTube videos https://www.zdnet.com/article/riaa-blitz-takes-down-18-github-projects-used-for-downloading-youtube-videos/
Lorand’s blog on how to search social media: https://www.lorandbodo.com/blog/social-media-search-strategies
Christina Letaki & OSINTGeek’s blog on combining intelligence disciplines: https://osintgeek.de/fcihi/blog/index.html
and much more!


---

Support this podcast: https://anchor.fm/osintcurious/support

People in this Episode

Micah Hoffman (@WebBreacher)
Matthias Wilson (@mw_Osint)
Lorand Bodo (@LorandBodo)
Technisette
Sector035
Ritu Gill (@OSINTTechniques)
John TerBush (@thegumshoo)

Links to what we discussed

App usage by country: https://www.applyzer.com/?mmenu=worldcharts
Top sites worldwide: https://www.alexa.com/topsites
OSINT technique to find Start.me page: https://twitter.com/OSINTtechniques/status/1316937466222465024
Download Win7, 8.1 and 10 (90 day trial) VM’s: https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/ & https://web.archive.org/web/20191226134552/https://developer.microsoft.com/en-us/microsoft-edge/tools/vms/
Sinwindie’s attack surface for the dark web: https://twitter.com/sinwindie/status/1315082663384899584
Lifting fingerprints from photos: https://twitter.com/BenDoBrown/status/1317544626425913351
Lorand Bodo’s new website & blog: https://lorandbodo.com
RSS feeds for Subreddits: https://twitter.com/LorandBodo/status/1314548615071834112
Download CONINT presentations here: https://conint.io/2020downloads
Understanding time stamps on social media: https://twitter.com/firstdraftnews/status/1314007636036259842
Update on WeVerify: https://twitter.com/WeVerify/status/1317548452784578561
Data scraping with Google Sheets: https://tompatrickjarvis.medium.com/data-scraping-with-google-sheets-to-assist-journalism-and-osint-tutorial-4f490d0dd5c4
Blog post on pivoting and researching info: https://keyfindings.blog/2020/10/16/where-is-leonardos-car-using-osint-to-trace-vehicles/
Retrieve info about Google account &activity: https://tools.epieos.com/google-account.php
Keeping grid on Google IDs: https://sector035.nl/articles/keeping-a-grip-on-google-ids
and much more!


---

Support this podcast: https://anchor.fm/osintcurious/support