Ritu shows how to perform several OSINT data gathering techniques on the Facebook social media site. There is a companion blog post at https://osintcurio.us/2020/04/02/facebook-tips/ with detailed notes about the techniques she uses.

In episode 15 of the OSINTCurious webcast we discuss:

Links to things we discussed:

• Twitter getting rid of “precise geotagging”: https://www.theverge.com/2019/6/19/18691174/twitter-location-tagging-geotagging-discontinued-removal
• New blog post by Daniel Miessler about Amass: https://danielmiessler.com/study/amass/, Link to the GitHub repo: https://github.com/OWASP/Amass
• New search tool for TikTok: https://www.osintcombine.com/tiktok-quick-search
• DarkLight, a Dark web scraper: https://github.com/bunseokbot/darklight, With an invite only web front: https://darklight.kr/recent
• Facebooks ad library with current and historical advertisement data: https://www.facebook.com/ads/library/
• TraceLabs is organizing another global CTF: https://www.eventbrite.ca/e/trace-labs-global-missing-ctf-2-an-osint-ctf-for-missing-persons-tickets-64148996375
• OSINT Mentoring
• Listener questions answered!

People in this episode:
▪ Ginsberg5150
▪ Sector035
▪ Technisette
▪ Kirby Plessas
▪ Nico, Dutch OSINT Guy
▪ Katelyn Bowden (badassbowden) - SPECIAL Guest!

• grep

• sort

• cut

• input/output redirectors

All our 10 Minute Tips can be found at https://osintcurio.us/10-minute-tips/

Are you a digital forensic examiner or investigator? Do you use OSINT? Are you unsure if you are using OSINT? If you answered yes to any of these questions, this webinar is for you! Nearly all examiners have used OSINT at one point in their work product, but many are not sure if they are maximizing their use of OSINT. SEC487 author and certified SANS instructor Micah Hoffman and law enforcement digital forensic examiner/detective Jeff Lomas will discuss how OSINT techniques can add value to digital forensic investigations, perform a live demo using OSINT in concert with digital forensics, and discuss how digital forensic examiners can improve their OSINT.

Visit our blogs about Facebook OSINT at https://osintcurio.us

This week, Micah (@WebBreacher) and Christina (@ChristinaLekati) put some extra emphasis on demonstrating new tools and search techniques. They started by discussing SMART (Start Me Aggregated Resource Tool), an OSINT Start.me page parser and aggregator. Bash scripting came into the conversation shortly after and along with it, Sinwindie's (@OSINTDojo) video tutorial.

OSINT on Mastodon had it's special place on this episode, as it is a social media platform that has been growing exponentially the past few weeks. We discussed what is different from other social media platforms and shared an introductory guide on how to conduct OSINT investigations on it. We also demonstrated 3 different ways & tools one can use to find usernames and accounts on Mastodon.

Micah and Christina moved on to discuss the role cryptography can play in certain investigations and shared a blog post that acts as a useful introduction into this intersection of disciplines.

Micah demonstrated the project "Backmoji", a resource that keeps historical data on the bitmoji's someone has historically used, based on their user ID. This database can reflect changes people have made in their appearance over time.

Speaking of appearances and images, we also shared a twitter thread that lists a number of resources that help conduct and improve reverse image searches. The list does not only contain tools that conduct RIS, but also editing tools that help this process.

Thank you for joining us for another episode, we wish everyone a happy holiday season and a happy new year! See you next time!

📚 LINKS AND RESOURCES mentioned in this stream:
SMART (Start Me Aggregated Resource Tool): https://webbreacher.com/2022/11/14/get-smart-about-osint/
Sinwindie's (@Sinwindie / @OSINTDojo) Bash Scripting Video - https://www.youtube.com/watch?v=hrXZv0hST0M
Blog “Mastodon OSINT: A Comprehensive introduction” https://www.secjuice.com/mastodon-osint-a-comprehensive-introduction/
WhatsMyName Username Checking Tool: https://whatsmyname.app/
Imagstodon Tool: https://seintpl.github.io/imagstodon/
Masto Tool: https://github.com/C3n7ral051nt4g3ncy/Masto
Blog: "Cryptography & OSINT - The fundamentals":
https://www.dutchosintguy.com/post/cryptography-osint-the-fundamentals
Backmoji Tool: https://backmoji.osint.ninja
Twitter thread by “OSINT for All”: “Ultimate list of resources for reverse image search”: https://twitter.com/AllForOsint/status/1588348612802932736

👁‍🗨 OSINT Curious:

🌍WEBSITE:
All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project.
https://osintcurio.us/

🦉TWITTER:
Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community.
https://twitter.com/osintcurious

👩‍💻 DISCORD:
Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community.
https://iam.osintcurio.us/discord

Welcome & Intro (0:00)
SMART (Start Me Aggregated Resource Tool) (5:00)
Video/Tutorial On Bash Scripting (8:56)
OSINT on Mastodon (10:38)
Tools That Help Your OSINT on Mastodon (24:45)
Cryptography & OSINT (35:20)
Backmoji (40:00)
Reverse Image Search Tools List (43:35)
Wrap Up/End (48:23)

Links to what we discussed
Tips on how to interpret leak data https://www.bellingcat.com/resources/how-tos/2019/11/06/massive-white-supremacist-message-board-leak-how-to-access-and-interpret-the-data/
A new blog from MwOsint on investigating right wing extremists https://keyfindings.blog/2019/12/01/researching-right-wing-extremism-in-central-europe/
An Emmy for the Bellingcat documentary https://www.dutchnews.nl/news/2019/11/two-dutch-documentaries-win-international-emmy-awards/
Firstdraft article on identifying bots https://firstdraftnews.org/latest/the-not-so-simple-science-of-social-media-bots/
Blogpost by OsintCombine on Foursquare https://www.osintcombine.com/post/foursquare-the-hidden-osint-gem
Tutorial about Vortimo https://vortimo.wordpress.com/2019/11/08/vortimo-tutorial/
LawFare Podcast https://twitter.com/kirbstr/status/1198804496660385793
Diving into the TikTok API https://twitter.com/Sector035/status/1198692966333865987
Automatic transcription of podcasts in iOS 13 https://twitter.com/chadloder/status/1194781978307911680 and a direct link: https://www.cultofmac.com/647598/search-podcast-transcripts-ios-13/
Political ads information on Snapchat https://twitter.com/carljackmiller/status/1195306436529721345
Tutorial on TikTok investigations https://www.secjuice.com/osint-investigations-on-tiktok/
Small tutorial on the tool ‘bulkextractor’ https://digitalforensicstips.com/2019/11/using-bulk-extractor-for-quick-osint-wins/
An SEO tool to analyze search results https://app.samuelschmitt.com
A NYT investigation into the bombing of civilian targets in Syria https://www.nytimes.com/video/world/middleeast/100000006818506/russia-bombs-syria-civlians.htm

The item we started this episode with was a tweet about interesting Google dorks. Feel free to share your favourite Google dork on Twitter using the hashtag #osintcurious. For example: https://twitter.com/sinwindie/status/1191493752113766401

Chapters & Timestamps
Countdown (0:00)
Welcome & Guest Introduction (0:19)
Jessica’s Career & Getting Into OSINT (01:57)
Transitioning From Classified Intelligence to OSINT (02:54)
The Mechanisms Behind Terrorism Financing (05:02)
Counter-Terrorism Financing Strategy (09:07)
The Role of OSINT In (Counter) Terrorism Financing (12:08)
Current Trends In Terrorism Financing (17:08)
Jessica’s New Book: Illicit Money (20:50)
Low Cost, Lone Actor Attacks (26:40)
Challenges Of Disrupting Terrorism Financing (30:36)
New Trends In OSINT (35:50)
Skills For New Analysts In Governmental Positions (40:35)
Wrap-up (42:42)

In episode 10 of the osintcurious webcast we discuss:

• OSINT tool - https://github.com/lulz3xploit/LittleBrother
• FreshOnions Tor service goes up and down.
• DutchOsintGuy's blog post on OSINT Operational Security
• Ludo Block tweeted about Dustin Miller's outstanding Twitter Machine Learning thread for un-redacting content using Machine Learning.
• Defcon Recon Village CFP is now open for Las Vegas!
• Bellingcat article about Poway shooting and 8chan -
• Email validation web site
• Peabody award for BBCAfrica story on the killings in Cameroon
• Kenn White's tweet about Docker's breach and what is could mean for OSINT researchers

People in this episode:
▪ Micah Hoffman
▪ Dutch Osint Guy
▪ Sector035

Links to what was discussed can be found here: https://osintcurio.us/webcast/

#osintcurious #osint #opsec #pentest

The official webcast of the OSINTCurious (https://osintcurio.us/) community.

• cd

• more

• less

• cat

• grep

All our 10 Minute Tips can be found at https://osintcurio.us/10-minute-tips/

Web sites in this episode:

• https://github.com/elceef/dnstwist
• https://osintframework.com/
• https://dnstwister.report/

• pwd
• ls (with the flags and switches)
• cd
• alias
• Using the up and down arrows to move through your terminal history

All our 10 Minute Tips can be found at https://osintcurio.us/10-minute-tips/

Freddy's intelligence architecture map can be found here: https://github.com/Errum/IntelArchitectureMap

Join us on our OSINTCurious Discord: https://discord.com/invite/FHagzwXqbT

Reach out to Freddy on Discord. His name is Furdy.

For more #OSINT, follow us on Twitter: https://twitter.com/osintcurious

People in this episode:

• Ginsberg5150
• DutchOSINTGuy
• Sector035 (Voice only)
• Kirby (first half only)
• And our special guest: Tracy Maleeff (@InfoSecSherpa on Twitter)
  • https://nuzzel.com/InfoSecSherpa
  • https://medium.com/@InfoSecSherpa

Links to things we discussed:

• https://www.martinvigo.com/email2phonenumber/ – a tool to enumerate possible phone numbers
• https://ilovaisk.forensic-architecture.org – how machine learning was used to sift through social media
• https://github.com/twintproject/twint – new version of Twint
• https://firms.modaps.eosdis.nasa.gov/map/ – finding fires from space
• https://darknetlive.com – darknet markets/forums etc – GONZO osint.team
• https://yippy.com – AI OSINT Cluster search engine
• https://sphere.tenebris.cc/index.html – a privacy aware browser
• https://osintcurio.us/2019/08/19/making-sense-of-osint-cell-tower-data-for-dfir/ Guest blog about Cell towers and how to map out the information
• https://osintcurio.us/2019/08/22/the-new-facebook-graph-search-part-1/ Facebook graphs explained part 1
• https://osintcurio.us/2019/08/22/the-new-facebook-graph-search-part-2/ Facebook graphs explained part 2
• https://osintcurio.us/2019/08/15/json-and-common-web-encodings-demystified/ – Most common web encodings explained

Self Promotion:

• Blogpost by Sector035 and MwOsint about tracing a phone scam https://keyfindings.blog/2019/08/25/unravelling-the-norton-scam-final-chapter/

People in this Episode
Dutch_Osintguy
Kirby
Sector035

Links to what we discussed
Our new swag shop! https://www.redbubble.com/people/osint-curious/og-shop
Sector035 on Google id’s https://medium.com/week-in-osint/getting-a-grasp-on-googleids-77a8ab707e43
https://twitter.com/bertram_hill1/status/1205768358748213248 Bertram Hill about a new map service: https://demo.f4map.com/
Fake profiles on Facebook https://analysis.leadstories.com/3471185-fake-faces-people-Who-Do-Not-Exist-Invade-Facebook-To-Influence-2020-Elections.html
How NATO tested manipulation with fake engagements https://www.buzzfeednews.com/article/albertonardelli/facebook-twitter-google-manipulation-nato-stratcom
Using TikTok to discover new OSINT leads https://twitter.com/AccessOSINT/status/1204103391443640322
Using Carspotting to help identify car info https://twitter.com/gijn/status/1204732840165941249
Work with JSON alot? Check out “Parsing Zeek JSON logs with JQ” https://twitter.com/joswr1ght/status/1204398474353086465
Tweet from Chad Loder: Oh-sint or OSINT? https://twitter.com/chadloder/status/1205965540608462848
KAS_stoner wants an InfoSec themed B-day party – what would you do for that? https://twitter.com/KAS_stoner/status/1206055921371103232

Self Promotion
Kirby has a class in St Augustine Jan 21-22 plessas.net/events
Kirby will have her NDCAC law-enforcement only classes listed there soon as well.
OSINT Summit this February https://www.sans.org/event/osint-summit-2020/summit-agenda
Use code OSINTPOD20 for special deal of $175 Summit tickets
Kirby and Technisette will be giving a free webinar on Facebook search on Dec 23.

• grep
• pipes (|)
• regex/regular expressions

All our 10 Minute Tips can be found at https://osintcurio.us/10-minute-tips/