Core OSINT Keeping Track of and Reporting All the Things
Methods for managing massive OSINT investigation data and ensuring comprehensive coverage of all pivot points.
Summary
Investigation Data Overload
OSINT investigations generate massive amounts of data: CSVs, text output, images, URLs. Tracking all this data and ensuring complete pivot point coverage is challenging.
Standard Operating Procedures
Successful investigators maintain SOPs defining their process. They run tools, use sock puppets, scrape websites, and find extensive data requiring organization.
Data Management Challenge
OSINTers, pentesters, defenders, and PIs easily get swamped in data. Keeping investigations on track is critical for comprehensive results.
Management Methods
The presentation examines bad, good, and amazing methods for keeping investigations organized, ensuring no pivot points are missed, and maintaining the ability to report findings effectively.
Related talks
37th Annual FIRST Conference·21 min
Industry experts analyze emerging threats surrounding Draugnet: Anonymous Threat Reporting That Actually Works.
Videos·55 min
Andrew Thompson
Andrew Thompson details Securi-Tay 2020: Vulnerability Reporting In Open Source Software.
Videos·46 min
Jupyter Notebooks
Security researchers examine technical aspects of Advanced Cybersecurity Reporting with Jupyter Notebooks.