Tag: Internet

Posted on by

The CSI Linux Certified OSINT Analyst (CSIL-COA)

Course: CSI Linux Certified OSINT Analyst | CSI Linux Academy

Embark on a thrilling journey into the heart of digital sleuthing with the CSI Linux Certified-OSINT Analyst (CSIL-COA) program. In today’s world, where the internet is the grand tapestry of human knowledge and secrets, the ability to sift through this vast digital expanse is crucial for uncovering the truth. Whether it’s a faint digital whisper or a conspicuous online anomaly, every clue has a story to tell, often before traditional evidence comes to light. The CSIL-COA is your gateway to mastering the art and science of open-source intelligence, transforming scattered online breadcrumbs into a roadmap of actionable insights.

With the CSIL-COA certification, you’re not just learning to navigate the digital realm; you’re mastering it. This course is a deep dive into the core of online investigations, blending time-honored investigative techniques with the prowess of modern Open-Source Intelligence (OSINT) methodologies. From the initial steps of gathering information to the preservation of digital footprints and leveraging artificial intelligence to unravel complex data puzzles, this program covers it all. By the end of this transformative journey, you’ll emerge as a skilled digital detective, equipped with the knowledge and tools to lead your investigations with accuracy and innovation. Step into the role of an OSINT expert with us and expand your investigative landscape.

Here’s a glimpse of what awaits you in each segment of the OSINT certification and training material:

Who is CSIL-CI For?
    • Law Enforcement
    • Intelligence Personnel
    • Private Investigators
    • Insurance Investigators
    • Cyber Incident Responders
    • Digital Forensics (DFIR) analysts
    • Penetration Testers
    • Social Engineers
    • Recruiters
    • Human Resources Personnel
    • Researchers
    • Investigative Journalists
CSIL-COA Course Outline
    • What is OSINT?
    • Unraveling the Intricacies of Digital Forensics
    • Preserving Online Evidence
    • Phone Numbers and Info
    • IP Addresses, Proxies, and VPNs
    • DNS, Domains, and Subdomains
    • Importance of Anonymity
    • Examples of Online Investigation
    • Misinformation, Disinformation, and Deception

    • Crafting Your Digital Disguise: The Art of Persona (Sock Puppet) Creation
    • Using your persona to investigate
    • Translation options
    • Website Collection
    • 3rd Party Commercial Apps
    • OSINT Frameworks (tools)
    • Tracking changes and getting alerts
    • Public Records Searches
    • Geolocation
    • Tracking Transportation

    • The Storytelling Power of Images
    • Social Media Sites
    • Video Evidence Collection
    • Cryptocurrency
    • AI Challenges
    • Reporting and Actionable Intelligence
    • OSINT Case Studies
    • Practicing OSINT and Resources
    • Course Completion
    • The CSIL-COA Exam
The CSIL-CI Exam details
Exam Format:
    • Online testing
    • 85 questions (Multiple Choice)
    • 2 hours
    • A minimum passing score of 85%
    • Cost: $385
Domain Weight
    • OPSEC (%13)
    • Technology and Online Basics (%20)
    • Laws, Ethics, and Investigations (%9)
    • Identification (%16)
    • Collection & Preservation (%13)
    • Examination & Analysis (%13)
    • Presentation & Reporting (%14)
  • Certification Validity and Retest:

    The certification is valid for three years. To receive a free retest voucher within this period, you must either:

      • Submit a paper related to the subject you were certified in, ensuring it aligns with the course material.
      • Provide a walkthrough on a tool not addressed in the original course but can be a valuable supplement to the content.

  • This fosters continuous learning and allows for enriching the community and the field. Doing this underscores your commitment to staying updated in the industry. If you don’t adhere to these requirements and fail to recertify within the 3-year timeframe, your certification will expire.

Interactive Content

[h5p id=”7″]

Resource

Course: CSI Linux Certified OSINT Analyst | CSI Linux Academy

Posted on by

Mastering Domain Reconnaissance / OSINT with Sublist3r

Sublist3r for domain osint
Engaging with Sublist3r: Mastering Domain Reconnaissance in OSINT

Imagine you’re a digital detective, and your mission is to uncover the vast and hidden parts of the online world. Sublist3r is your tool of choice, a powerful ally in domain enumeration. It’s like having a high-powered telescope that scans the digital universe, aggregating data from search engines and sites to reveal subdomains of a target domain.

Let’s take google.com as our target. By running python sublist3r.py -d google.com, Sublist3r unveils a treasure trove of subdomains. This is your first step in mapping the digital empire of Google, revealing its extensive reach across the internet.

Advanced Reconnaissance Tactics

For a more tailored search, Sublist3r lets you choose your battlefields. Use python sublist3r.py -d google.com -e google,yahoo -t 10 -o domains.txt to set Google and Yahoo as your search engines, rev up the speed with 10 threads, and capture your conquests in ‘domains.txt’.

The OSINT Advantage

In the realm of OSINT, Sublist3r is like a master key. It opens doors to hidden corridors of an organization’s online presence. Discovering various subdomains of Google, for example, could reveal new services, potential vulnerabilities, or forgotten digital outposts.

Synergy with Other OSINT Tools

Sublist3r’s discoveries are not the end but the beginning. Pair these findings with tools like Nmap for a stealthy port scan or web application vulnerability scanners, turning data into actionable intelligence.

Navigating Ethical Boundaries

Remember, with great power comes great responsibility. While exploring the depths of google.com or any domain, it’s vital to respect privacy, adhere to legal boundaries, and avoid unauthorized probing.

Sublist3r Syntax Examples
  • Basic Domain Search: python sublist3r.py -d example.com
  • Specifying Search Engines: python sublist3r.py -d example.com -e google,bing
  • Setting Concurrent Threads: python sublist3r.py -d example.com -t 10
  • Saving Output to File: python sublist3r.py -d example.com -o domains.txt
  • Using Brute Force: python sublist3r.py -d example.com -b
  • Specifying Ports for Brute Force: python sublist3r.py -d example.com -b -p 80,443
  • Excluding Subdomains: python sublist3r.py -d example.com --exclude-subdomains unwanted.example.com
  • Verbose Output: python sublist3r.py -d example.com -v
Posted on by

Digital Shadows: Navigating the Online Maze in Investigative Research

In the dynamic landscape of journalism, investigative research involves employing Open Source Intelligence (OSINT) and Geospatial Intelligence (GEOINT) to uncover information and verify facts. The pursuit of truth can often lead journalists to highly sensitive or controversial territories. Therefore, maintaining Operational Security (OPSEC) and minimizing one’s internet footprint becomes paramount. This article serves as a guide to keeping digital tracks concealed while conducting online research.

Understanding the Risk

Investigative journalists often navigate the tangled web of public and private information. Accessing data from various sources can lead to ethical dilemmas and legal challenges. It can also expose the investigator to potential threats and unwanted scrutiny. A strong OPSEC strategy mitigates these risks by ensuring that digital trails are concealed, protecting both the investigation and the investigator.

Essential Steps to Minimize Internet Footprint

  1. Use a Virtual Private Network (VPN): Connecting to a VPN hides the user’s IP address, making their online actions virtually untraceable. It ensures anonymity and security by establishing an encrypted connection.
  2. Utilize Secure Browsers: Specialized browsers like Tor help in maintaining anonymity by routing online activity through multiple servers. Regular browsers can be set to private or incognito mode to prevent saving browsing history, though this alone is not enough for complete privacy.
  3. Access Information Through Secure Channels: Utilizing HTTPS ensures that the data between the user’s browser and the website is encrypted. Tools like HTTPS Everywhere can be useful in this regard.
  4. Minimize the Use of Personal Accounts: Avoid logging into personal accounts while conducting research to prevent linking the investigation to the individual. Dedicated research accounts, where needed, should be employed.
  5. Employing Virtual Machines and Disposable Operating Systems: These can be used to isolate the research environment from the personal workspace, leaving no traces once the virtual instance is deleted.
  6. Avoid Geolocation Features: Disabling geolocation services on devices and browsers prevents leaking location data.
  7. Careful Handling of Metadata: Documents, pictures, and other files can contain hidden metadata that reveals information about the author, location, or device. Tools to scrub metadata should be used when handling such files.
  8. Regular Monitoring and Evaluation of Digital Footprint: Regularly auditing and monitoring the digital footprint helps in identifying unexpected traces or exposures

Investigative journalism is a delicate dance between unearthing truths and maintaining security. By embracing the best practices in OPSEC, journalists can minimize their online footprint and protect their research and personal integrity.

In a world where data is the new currency, it is essential to move with caution, armed with the tools and knowledge that can keep a researcher’s work shielded from prying eyes. Navigating the digital shadows is an art, and with careful consideration and the right practices, it can be mastered.