Open-Source Intelligence - OSINT - Revision history

BPeat at 14:20, 18 August 2023

2023-08-18T14:20:13Z

BPeat at 01:19, 10 July 2023

2023-07-10T01:19:50Z

BPeat at 17:22, 7 July 2023

2023-07-07T17:22:20Z

BPeat at 15:12, 30 June 2023

2023-06-30T15:12:48Z

BPeat: /* OSINT Companies/Tools */

2023-06-30T15:07:21Z

‎OSINT Companies/Tools

Show changes

BPeat at 15:01, 30 June 2023

2023-06-30T15:01:45Z

BPeat: /* OSINT Companies/Tools */

2023-06-30T14:59:50Z

‎OSINT Companies/Tools

BPeat: /* OSINT Companies/Tools */

2023-06-30T14:58:27Z

‎OSINT Companies/Tools

BPeat: /* OSINT Companies/Tools */

2023-06-30T14:49:17Z

‎OSINT Companies/Tools

BPeat: /* Tools for Analyzing Social Media */

2023-06-30T14:40:56Z

‎Tools for Analyzing Social Media

@@ Line 126: / Line 126: @@
 * <b>[https://github.com/lanmaster53/recon-ng Recon-ng]</b> ... provides a modular framework for conducting OSINT investigations. It enables users to gather data from various sources using built-in or custom modules, store data in a local database, and visualize data using interactive reports.
 * <b>[https://searchcode.com/ searchcode]</b> ... is a highly specialized search engine that looks for useful intelligence inside source code.
-* <b>[https://www.shodan.io/ Shodan]</b> ... can monitor and search as part of an OSINT effort is impressive. It’s one of the few engines capable of examining operational technology (OT) such as the kind used in industrial control systems at places like power plants and manufacturing facilities. Any OSINT gathering effort in industries that deploy both information technology and OT would miss a huge chunk of that infrastructure without a tool like Shodan. In addition to IoT devices like cameras, building sensors and security devices, Shodan can also be turned to look at things like databases to see if any information is publicly accessible through paths other than the main interface. It can even work with videogames, discovering things like Minecraft or Counter-Strike: Global Offensive servers hiding on corporate networks where they should not be, and what vulnerabilities they generate.
+* <b>[https://www.shodan.io/ Shodan]</b> ... can monitor and search as part of an OSINT effort is impressive. It’s one of the few engines capable of examining operational technology (OT) such as the kind used in industrial control systems at places like power plants and manufacturing facilities. Any OSINT gathering effort in industries that deploy both information technology and OT would miss a huge chunk of that infrastructure without a tool like Shodan. In addition to IoT devices like cameras, building sensors and security devices, Shodan can also be turned to look at things like databases to see if any information is publicly accessible through paths other than the main interface. It can even work with videogames, discovering things like [[Minecraft]] or Counter-Strike: Global Offensive servers hiding on corporate networks where they should not be, and what vulnerabilities they generate.
 * <b>[https://www.signifyd.com/ Signifyd]</b> ... provides fraud protection and chargeback prevention solutions for e-commerce businesses. It enables users to leverage AI and machine learning to analyze customer behavior, transaction data, and network intelligence to detect and prevent fraud.
 * <b>[https://www.spiderfoot.net/attack-surface-monitoring/ Spiderfoot]</b> ... a free OSINT reconnaissance tool that integrates with multiple data sources to gather and analyze IP addresses, CIDR ranges, domains and subdomains, ASNs, email addresses, phone numbers, names and usernames, BTC addresses, etc. Available on GitHub, Spiderfoot comes with both a command-line interface and an embedded web-server for providing an intuitive web-based GUI. The application itself comes with over 200 modules

@@ Line 113: / Line 113: @@
 * <b>[https://www.dassaultsystemes.com/ Dassault Systemes]</b> ... provides 3D design, engineering, simulation, and data intelligence solutions for various industries. It enables users to create and manage digital twins of products, processes, and systems, and leverage AI to optimize performance and innovation.
 * <b>[https://www.digitalclues.io/ Digital Clues]</b> ... provides AI-powered OSINT solutions for law enforcement and intelligence agencies. It enables users to collect, analyze, and visualize data from various online sources, including social media, dark web, blogs, forums, and news sites.
-* <b>[https://espysys.com/ ESPY]</b> ... provides AI-powered OSINT solutions for security and crisis management. It enables users to automate the process of collecting, analyzing, and synthesizing information from various open sources, such as web scraping, geolocation, sentiment analysis, and image recognition.
+* <b>[https://espysys.com/ ESPY]</b> ... provides AI-powered OSINT solutions for security and crisis management. It enables users to automate the process of collecting, analyzing, and synthesizing information from various open sources, such as web scraping, geolocation, [[Sentiment Analysis]], and image recognition.
 * <b>[https://expert.ai/ Expert.AI]</b> ... provides natural language understanding solutions for various industries and applications. It enables users to extract insights and knowledge from unstructured text data using AI and natural language processing techniques.
 * <b>[https://grep.app/search?q=open%20source%20intelligence Grep.app]</b> ... search across half million git repos

@@ Line 22: / Line 22: @@
 * [[Cybersecurity]] ... [[Open-Source Intelligence - OSINT |OSINT]] ... [[Cybersecurity Frameworks, Architectures & Roadmaps | Frameworks]] ... [[Cybersecurity References|References]] ... [[Offense - Adversarial Threats/Attacks| Offense]] ... [[National Institute of Standards and Technology (NIST)|NIST]] ... [[U.S. Department of Homeland Security (DHS)| DHS]] ... [[Screening; Passenger, Luggage, & Cargo|Screening]] ... [[Law Enforcement]] ... [[Government Services|Government]] ... [[Defense]] ... [[Joint Capabilities Integration and Development System (JCIDS)#Cybersecurity & Acquisition Lifecycle Integration| Lifecycle Integration]] ... [[Cybersecurity Companies/Products|Products]] ... [[Cybersecurity: Evaluating & Selling|Evaluating]]
 * [[Large Language Model (LLM)]] ... [[Natural Language Processing (NLP)]] ... [[Natural Language Generation (NLG)|Generation]] ... [[Natural Language Classification (NLC)|Classification]] ... [[Natural Language Processing (NLP)#Natural Language Understanding (NLU)|Understanding]] ... [[Language Translation|Translation]] ...  [[Natural Language Tools & Services|Tools & Services]]
-* [[Capabilities]]
+* [[Video/Image]] ... [[Vision]] ... [[Enhancement]] ... [[Fake]] ... [[Reconstruction]] ... [[Colorize]] ... [[Occlusions]] ... [[Predict image]] ... [[Image/Video Transfer Learning]]
-** [[Video/Image]] ... [[Vision]] ... [[Colorize]] ... [[Image/Video Transfer Learning]]
+* [[End-to-End Speech]] ... [[Synthesize Speech]] ... [[Speech Recognition]] ... [[Music]]
 * [https://en.wikipedia.org/wiki/List_of_intelligence_gathering_disciplines List of intelligence gathering disciplines | Wikipedia]
 * [https://osintframework.com/ OSINT Framework | Justin Nordine] ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.

@@ Line 42: / Line 42: @@
 * [https://usnwc.libguides.com/c.php?g=494120&p=3381426 Types of Intelligence Collection | Intelligence Studies - LibGuides]
 * [https://www.sciencedirect.com/topics/computer-science/intelligence-gathering Intelligence Gathering - an overview | ScienceDirect Topics]
 Open Source Intelligence (OSINT) is the collection, analysis, and dissemination of information that is publicly available and legally accessible. OSINT operations, whether practiced by IT security pros, malicious hackers, or state-sanctioned intelligence operatives, use advanced techniques to search through the vast haystack of visible data to find the needles they’re looking for to achieve their goals—and learn information that many don’t realize is public.  OSINT operations use advanced techniques to search through visible data to find information that many don’t realize is public. OSINT differs from other types of intelligence gathering in several ways, OSINT:

@@ Line 26: / Line 26: @@
 ** [[End-to-End Speech]] ... [[Synthesize Speech]] ... [[Speech Recognition]] ... [[Music]]
 * [https://en.wikipedia.org/wiki/List_of_intelligence_gathering_disciplines List of intelligence gathering disciplines | Wikipedia]
-* [https://osintframework.com/  OSINT Framework | Justin Nordine]
+* [https://osintframework.com/ OSINT Framework | Justin Nordine] ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.
 ** [https://github.com/lockfale/osint-framework OSINT Framework GitHub]
 * [https://www.economist.com/ukraine-osint-pod How has open-source intelligence influenced the war in Ukraine? | The Economist]
@@ Line 101: / Line 101: @@
 = OSINT Companies/Tools =
-* [https://www.hackers-arise.com/ Hackers Arise]
+* [https://osintframework.com/ OSINT Framework | Justin Nordine] ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.
-* [https://osintframework.com/ OSINT Framework]  ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.
+** [https://github.com/lockfale/osint-framework OSINT Framework GitHub]
 Several companies/products are using AI for OSINT. Here are some of them:

@@ Line 102: / Line 102: @@
 = OSINT Companies/Tools =
 * [https://www.hackers-arise.com/ Hackers Arise]
 Several companies/products are using AI for OSINT. Here are some of them:
 * [https://builtwith.com/ BuiltWith] ... lets you find what popular websites are built with. Different tech stacks and platforms power different sites. BuiltWith can, for example, detect whether a website is using WordPress, Joomla, or Drupal as its CMS and provide further details. BuiltWith also generates a neat list of known JavaScript/CSS libraries (e.g., jQuery or Bootstrap) that a website uses. Further, the service provides a list of plugins installed on the websites, frameworks, server information, analytics and tracking information, etc. BuiltWith can be used for reconnaissance purposes.
 * [https://www.cellebrite.com/ Cellebrite] ... provides digital intelligence solutions for law enforcement, military, intelligence, and enterprise customers. It enables users to extract, decode, and analyze data from various digital sources, including mobile devices, cloud services, computers, and IoT devices.
@@ Line 117: / Line 119: @@
 * [https://lampyre.io/ Lampyre] ... provides a platform for conducting OSINT investigations. It enables users to collect data from various sources using queries or scripts, analyze data using filters or graphs, and export data in various formats.
 * [https://www.maltego.com/ Maltego] ... provides a visual tool for conducting OSINT investigations. It enables users to gather data from various sources using transforms or integrations, analyze data using link analysis or clustering techniques, and share data using reports or collaboration features.
 * [https://chrome.google.com/webstore/detail/mitaka/bfjbejmeoibbdpfdbmbacmefcbannnbg Mitaka] ... Available as a Chrome extension and Firefox add-on, search over six dozen search engines for IP addresses, domains, URLs, hashes, ASNs, Bitcoin wallet addresses, and various indicators of compromise (IOCs) from web browser.
 * [https://nexvision.com/ NexVision] ... provides vision solutions and optronic systems for various applications, such as defense, security, cinema, and industry. It specializes in electronic reference design, especially in complex vision processing systems. It uses AI and computer vision to extract insights and metadata from video data, such as object detection, activity recognition, and scene understanding
 * [https://owlint.fr/ Owlint] ... centralizes the digital footprint from the Clear Web, Deep Web, and Dark Web. Its proprietary AI OwlAnalytics assesses a level of risk on each detected element.
 * [https://github.com/lanmaster53/recon-ng Recon-ng] ... provides a modular framework for conducting OSINT investigations. It enables users to gather data from various sources using built-in or custom modules, store data in a local database, and visualize data using interactive reports.
 * [https://www.signifyd.com/ Signifyd] ... provides fraud protection and chargeback prevention solutions for e-commerce businesses. It enables users to leverage AI and machine learning to analyze customer behavior, transaction data, and network intelligence to detect and prevent fraud.
 * [https://www.spiderfoot.net/attack-surface-monitoring/ Spiderfoot] ... a free OSINT reconnaissance tool that integrates with multiple data sources to gather and analyze IP addresses, CIDR ranges, domains and subdomains, ASNs, email addresses, phone numbers, names and usernames, BTC addresses, etc. Available on GitHub, Spiderfoot comes with both a command-line interface and an embedded web-server for providing an intuitive web-based GUI. The application itself comes with over 200 modules

@@ Line 161: / Line 161: @@
 * [https://www.socialpilot.co/social-media-analytics-tools Best 12 Paid and Free Social Media Analytics Tools for 2023 | Manvi Agarwal - SocialPilot]
-Some of the most popular and recommended tools:
+Some of the most popular tools:
 * <b>[https://blog.hootsuite.com/social-media-analytics/ Hootsuite Analytics]</b>: This tool allows you to track performance data from every social network in one place, with easy-to-understand reports. You can measure metrics like reach, followers, engagement, clicks, and conversions. You can also compare results across multiple networks and create custom reports based on your KPIs.