Calculating Website Age & Tracking Changes With URL Dater
How can you determine the age of a webpage in a reliable way? URL Dater uses a range of different sources to present an accurate picture.
Nixintel Open Source Intelligence & Investigations
Open Source Intelligence Investigations
Latest posts
Using SSL Certificates To Find Threat Actor Infrastructure
At last month’s SANS OSINT Summit I gave a talk the usefulness of SSL certificates for open source intelligence researchers. The talk looks at three recent examples of how information from certificate transparency logs can be used to discover, attribute, and unmask threat actor infrastructure. The video of the talk has now been published and you can [ ]
Telegram For Cyber Investigators
Telegram is one of the most important platforms for OSINT investigators. I joined the Needlestack podcast to discuss how Telegram works and shared some practical OSINT advice along the way.
Digging Into Russian Disinfo Infrastructure
Disinformation and propaganda has been one of the key features of the war between Russia and Ukraine. One of the many groups that have sprung up to push pro-Russian propaganda narratives is a small hacktivist organisation called Beregini. This article by Givi Gigitashvili provides a useful introductory insight into the methods of Beregini by analysing [ ]
Verify Your Online Identities With Keybase
Twitter s recent decision to remove blue check marks from accounts it has previously verified causes a number of issues for the platform and its users. One of the most obvious ones is around authentic identity. Without verification, how do I know that a particular account really does belong to the person or organisation who claims [ ]
Geolocation: At The Retail Park
Some images are easier to geolocate than others. If an image is easy to geolocate it is generally because at least one of the following three conditions apply: Sometimes none of these conditions apply. When this is the case geolocation becomes much harder and a more methodological structure is needed. Here s a walkthrough of such [ ]
Counting Crowds In Public Spaces
This week s huge protests in Israel drew huge crowds to the streets but how many people took part? Crowd sizes are often used as evidence to show how widely supported a particular cause is, so being able to determine how many people took part in a demonstration is an important skill for those working [ ]
How To Identify A Company’s Domains With Azure AD
A common challenge for OSINT practitioners and penetration testers alike is to fully identify the range of domains owned and managed by a particular organisation. Identifying the main domain that a company owns is usually fairly easy since it can be found in the second half of a company email (user@example.com) or as part of [ ]
Quiztime: How To Clean Pictures For Better Search Results
In last week s Wednesday Quiz Tilman Wagner posted this photo and asked us several questions about it: 1) Who posted it and where? 2) What was the occasion? 3) Did Tilman participate, and if so, how? So where to start? We need to know the location before we can answer any of Tilman s questions. There [ ]
Use Python To Automate Your OSINT Reporting
What s the most boring part of Open Source Intelligence? Most OSINT practitioners (including me) usually enjoy the research phase of an assignment the most. Collecting data and finding new lines of enquiry is fun, but writing it all up at the end is usually dull. Well-written reports are a vital part of the OSINT process, [ ]