Episode 31: Jeff Lomas of BleuBloodHound, MWOsint demos the MSFT video indexer and more...

People in this Episode:

• Micah Hoffman (WebBreacher)

• Dutch_Osintguy

• Matthias Wilson (MwOsint)

• Nixintel

• Sector035

• Special Guest: Jeff Lomas (@BleuBloodHound (twitter.com/BleuBloodHound))

Links to what we discussed:

• Jeff Lomas talked about his blog on cell tower info, DFIR and OSINT osintcurio.us/2019/08/19/making-sense-of-osint…

• People being monitored by the geotagged social media trough Echosec twitter.com/KarlSwannie/status/123309212182297… (twitter.com/KarlSwannie/status/123309212182297… )

• An semi automated website for lookups on a domain, ip or email. Covers dns, location, whois and more. Opsec! don’t know if requests are tracked synapsint.com (synapsint.com )

• OSINT CTF that gives people a chance to practice their skills. It covers a wide range of areas like government databases, social media, archived websites as well as some basic digital forensic and cyber security knowledge. ctf.cybersoc.wales

• Vis graphing tool for win, linux and osx in beta. Sort of Maltego alternative made with help of occrp.vis.com docs.alephdata.org/guide/vis-desktop

• Guideline by US DoJ : Legal Considerations when Gathering Online Cyber Threat Intelligence and Purchasing Data from Illicit Sources justice.gov/criminal-ccips/page/file/1252341/d…

• Useful to manually create charts in your OSINT investigationsdraw.io

• Bram (Aware Online) has been on fire this week, posting lots of quick OSINT tips. Might be worth a shout-out twitter.com/aware_online

• Great detailed blog on how to build your own web scraper using Python hackernoon.com/how-to-build-a-web-scraper-with… (hackernoon.com/how-to-build-a-web-scraper-with… )

• TikTok OSINT thread twitter.com/summer__heidi/status/1234308465662…

• The Cyber Intelligence Analyst Cookbook has some good information about CTI and OSINT process and analysis. github.com/open-source-rs/The-Cyber-Intelligen…

• Scrapy: An open source and collaborative framework for extracting the data you need from websites. scrapy.org (scrapy.org )

Skills Demo:

Matthias a.k.a MWOsint – keyfindings.blog/2020/03/08/using-the-microsof… demo

Self Promotion:

• Dutch_OsintGuy added new events to his website for several trainings and workshops dutchosintguy.com/events-and-blogs

• Dutch_Osintguy : Workshop understanding Google’s search results and advanced searching techniques workshop (Dutch language only) together with Aware Online. March 20th in Amsterdam. aware-online.com/workshop-google-voor-gevorder…

• Micah (WebBreacher) has multiple SANS SEC487 live classes (sans.org/sec487) coming up in the coming months and is looking forward to the GIAC GOSI OSINT certification (giac.org/gosi) moving into beta testing in April.