Overview
Explore advanced techniques for digital intelligence gathering in this BSidesSF 2016 conference talk. Delve into the world of Open Source Intelligence (OSINT) and its applications for both blue and red teams in cybersecurity. Learn how to leverage various online platforms such as Twitter, Instagram, Google Maps, and public records to automate and enhance OSINT discovery. Discover the presenters' custom application that integrates these tools with Maltego, enabling efficient identification of potential insider threats, preparation for red team engagements, and comprehensive information gathering. Gain insights into the benefits of OSINT from both offensive and defensive perspectives, and understand the interconnected nature of seemingly innocent online information. Follow along as the speakers demonstrate their methods, discuss basic workflows, and showcase real-world use cases. Conclude with valuable recommendations for implementing OSINT techniques effectively in your security operations.
Syllabus
Introduction
Welcome
Nuna Health
What is OSINT
Why use OSINT
Gathering vs Stocking
Basic Workflow
Analyze
Melty Go
Entities
MultiGo
Court Case Records
Brian Warehime
Danny Howerton
Oh Sent
Twitter Data
Twitter API
Google Maps
MeltyGo
Challenge Accepted
User Names
Reddit
Results
Use Cases
Social Engineering
Johnny Cash
Twitter Instagram
Web Application
Recommendations
Any Questions
Taught by
Security BSides San Francisco