MEIOC #Python automation tool to extract information from EML files: Headers Detailed server relay hops (IP addresses involved) Extracted URLS/domains Attachments with calculated hashes. SPF (Sender Policy Framework) DKIM (DomainKeys Identified Mail) github.com/drego85/meioc

The Predicta Lab team worked with NHK journalists to investigate the I-SOON leak. Using Predicta Graph, we mapped relationships between key figures. 🔗 Uncover complex data networks with Predicta Graph: predictagraph.com.

The OSINTukraine archive #telegram data from 90+ Russian Telegram channels. Help us continue preserving this data:

Good to be reminded of a timeless investigative lesson: if two pieces of evidence seem to be contradictory it is usually an indicator that one of your assumptions is incorrect. Obvious when you think about it, but sometimes hard to see when it's right in front of you 😉

This looks like a chance for some #geolocation fun 👇

It's been almost 2 weeks, since we launched www.findthatspot.io as a publicbeta - and it's amazing to see how different people are testing it. We're taking another dive into feedback before the 🎄-break today to see what we can improve. Give it a try, if you haven't had the chance yet!

Sure you're an APT who pwn governments all day but can you correctly configure parental controls for Alexa and Google Nest?

I have organized (somewhat) an OSINT OPML feed. This will be updated periodically. The first version is linked here. knowledgebase.plessas.net/OSINT-Feeds-...

The Delusions of Crowds by William Bernstein digs into this phenomenon and is well worth reading.

The Office of the Director of National Intelligence issued a warning for industrial sabotage - one of the indicators points to online posts made by potential perpetrators.

One of my favorite search operators is „filetype:“ - PDFs or office docs often contain compressed and valuable information. Here‘s an example. Let‘s say I‘m looking into the Russian FSB and I want to find phone numbers and email addresses to conduct further research. Their domain is „fsb.ru“

Tough on crime.

I've put together an OSINT starter kit. Let's unite the OSINT community on Bluesky! go.bsky.app/GaTRbT3

For those not familiar with Russia's weekly threats to launch nuclear weapons, United Media has been keeping track. Roughly 70 threats since the 2022 invasion. The threat *is* the deterrence. We will still be here tomorrow. united24media.com/war-in-ukrai...

Fascinating use of ship tracking resources to link the Yi Peng 3 to the Baltic Sea cable sabotage. Currently looks like the ship has been stopped by the Danish navy.

Chinese-flagged cargo ship Yi Peng 3 crossed both submarine cables C-Lion 1 and BSC at times matching when they broke. She was shadowed by Danish navy for a while during night and is now in Danish Straits leaving Baltics. No signs of boarding. AIS-caveats apply.

[ #SOCMINT #TELEGRAM ] Telegram For Cyber Investigators (by @nixintel.bsky.social): nixintel.info/osint/telegr... #osint

Here are few interesting #OSINT resources relating to undersea cables. Semantic Net contains location and status information for undersea cables and data centres. www.semanticnet.net

Share it & let the #OSINT community grow! OSINT in general go.bsky.app/TSvKc6o Flight Trackers go.bsky.app/NKZeoR9 Ship Enthusiasts🚢 go.bsky.app/ScoHkM9 📡 #GEOINT #IMINT #SAT🛰️ Enthusiasts go.bsky.app/PzSSWrC OSINT ❗BREAKING❗NEWS 🗞️ go.bsky.app/446515N OSINT 💻 Cyber Enthusiasts🤖 go.bsky.app/N4W14ch

It's interesting to see how the cutting of two undersea cables in the #Baltic spirals. We don't have any significant public comment from investigating officials yet, but already the eternal problem of analytical bias rears its head. 1/

Extremely windy climb into #StormKathleen but worth it for the view.

Another Monday filled with interesting articles, tips and news. This Week in #OSINT is brought to you by: @mwosint.bsky.social @bashinho.de @fs0c131y.com @christinalekati.bsky.social @nixintel.bsky.social sector035.nl/articles/202...

it’s time to burn the incense, it’s time to slay the sheep, it’s time to wake the muppets, from a thousand years of sleep. it’s time to raze existence, it’s time to banish light, it’s time to call the void in, on the muppet show tonight.

Had a great time @hackerhotel.bsky.social ! Thanks for letting me talk about #OSINT and how #AI fuels #disinformation #hackerhotel

Will you look at that! It is another episode of Week in #OSINT that suddenly appears… All thanks to the free roaming spirits of: @osinttechniques.bsky.social @bashinho.de @tlmn.bsky.social @needlestackpod.bsky.social @webbreacher.com @trbrtc.bsky.social sector035.nl/articles/202...

More outside time.

Winter is nearly over. It's good to get outside again.

Life is always better after a couple of hours outside on a bike.

Week in OSINT is back! Check out this week's episode here: sector035.nl/articles/202...

Great day for a bike ride. Ruined only by getting stung in the head by a wasp a few miles from home.

Had a great time speaking about all things OSINT and Cyber last night. Nice to meet lots of local infosec people too. More cyber events should be held in the pub.

Pic of the day. Seriously hot hiking weather.

Pic of the day.

Pic of the day.

My BlueSky account will probably my next main social network account. A lot of #OSINT practitioners have already an account. It’s up to us to be connected again

Let’s create a list of #OSINT practitioners accounts to follow on BlueSky! Add the usernames you have in the comments! (It can be you 😅)

Sign up for the FREE SANS #OSINT SUMMIT https://www.sans.org/cyber-security-training-events/osint-summit-2023/ SANS OSINT course? - SEC497: Practical Open-Source Intelligence (OSINT) sans.org/sec497 - SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis sans.org/sec587

OSINT on individuals is my favorite. You’d be surprised where to find personal information on people. I’ve often found private addresses while going through patents and trademark registrations on the WIPO IP portal. So here’s s short article to make you familiar with the basics of this search site:

ICYMI: The @ShadowDragonIO podcast SE2 EP4 is out. We talked about breached data, tech job interviews, #OSINT and more… check out out here: https://youtu.be/qquMT0kxFGo

Meta is trying to figure out how to bring back the roughly 50 million users that left the app in the last month https://www.garbageday.email/p/oh-your-brand-tweet-caused-an-international

Another fun investigation linking an OSINT tool to a Russian surveillance company (which has been sanctioned in the meantime). A reminder to always vet your tools, software and partners before use.

The Beregini disinfo group claims to be run by dissident Ukrainians, but it is possible to peek behind Cloudflare and see that their infrastructure is really based in...St Petersburg. New #OSINT blog post/walkthrough here: https://nixintel.info/osint/digging-into-russian-disinfo-infrastructure/

Time for your weekly dose of #OSINT news!

Pic of the day. Even managed to see a few seals.

It's Monday, it's time for Week in #OSINT! Here's episode 2023-29: https://sector035.nl/articles/2023-29

Tip: Have a need to monitor the current #wildfires In Greece (Islands Rhodos, Corfu) ? You can use NASA FIRMS to figure out more details about where and when these fire are happening. #OSINT #GEOINT https://firms.modaps.eosdis.nasa.gov/map/#d:24hrs;@27.6,36.2,10z

Agenda for the FREE @SANSInstitute #OSINT summit is live. You can take a look & register here: https://www.sans.org/cyber-security-training-events/osint-summit-2023/

Had some questions the last weeks from people regarding #mapping/#geolocation browser tools for #OSINT. Here is a tip: Try the maps switcher Chrome extension to quickly switch between maps and mapping services. https://chrome.google.com/webstore/detail/map-switcher/fanpjcbgdinjeknjikpfnldfpnnpkelb

The Russian naval officer who was shot in Krasnodar while out jogging apparently made his regular running routes public on Strava.

Great opportunity for the right person!