Difference between revisions of "Open-Source Intelligence - OSINT"

From
Jump to: navigation, search
m (→‎OSINT Companies/Tools)
m (→‎OSINT Companies/Tools)
Line 102: Line 102:
 
= OSINT Companies/Tools =
 
= OSINT Companies/Tools =
 
* [https://www.hackers-arise.com/ Hackers Arise]
 
* [https://www.hackers-arise.com/ Hackers Arise]
−
offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.   
+
* [https://osintframework.com/ OSINT Framework]  ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.   
  
 
Several companies/products are using AI for OSINT. Here are some of them:
 
Several companies/products are using AI for OSINT. Here are some of them:

Revision as of 09:59, 30 June 2023

YouTube ... Quora ...Google search ...Google News ...Bing News

Open Source Intelligence (OSINT) is the collection, analysis, and dissemination of information that is publicly available and legally accessible. OSINT operations, whether practiced by IT security pros, malicious hackers, or state-sanctioned intelligence operatives, use advanced techniques to search through the vast haystack of visible data to find the needles they’re looking for to achieve their goals—and learn information that many don’t realize is public. OSINT operations use advanced techniques to search through visible data to find information that many don’t realize is public. OSINT differs from other types of intelligence gathering in several ways, OSINT:

  • is focused on publicly available and legally obtainable information, whereas other forms of intelligence gathering may involve confidential or classified sources.
  • uses various sources, including social media, news articles, public records, and government reports. In contrast, other forms of intelligence gathering may focus on a specific source type, such as human, signals, imagery, or geospatial.
  • is accessible and affordable to anyone with an internet connection and some basic skills, whereas other forms of intelligence gathering may require specialized equipment, training, or authorization.
  • is dynamic and diverse, as it reflects the changing and heterogeneous nature of the open source environment. However, this also means that OSINT may be inaccurate, incomplete, or unreliable, as it depends on the quality and credibility of the sources. Therefore, OSINT needs to be verified and validated with other forms of intelligence or evidence.

AI can be used to turn the challenge of large data volumes into an advantage and ultimately create a symbiotic relationship with OSINT. AI, machine learning and automation tools are able to scan massive amounts of data and conversations, proficiently identifying connections and risks that warrant further investigation. AI has dramatically increased the volume of data that can be analyzed in real-time. Today’s AI-enabled platforms empower intelligence analysts to leverage OSINT as the foundation that can help uncover hidden threats, corroborate classified reporting, and pinpoint the targets that warrant resource-intensive, traditional intelligence gathering.

OSINT is in many ways the mirror image of operational security (OPSEC), which is the security process by which organizations protect public data about themselves that could, if properly analyzed, reveal damaging truths. IT security departments are increasingly tasked with performing OSINT operations on their own organizations to shore up operational security. - 15 top open-source intelligence tools | J. Fruhlinger, A. Sharma & J. Breeden - Foundry


The most common OSINT resources are as follows;

  • Metadata search
  • Search Engines
  • Social Media
  • Online Communities
  • Email Addresses
  • Usernames
  • People Search Engines
  • Telephone Numbers
  • Online Maps
  • Code search
  • Documents
  • Images
  • Videos
  • Domain Names
  • IP Addresses
  • Government & Business Records
  • Virtual Currencies
  • Advanced Linux Tools
  • Geospatial Research
  • Data Breaches & Leaks


Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT!
This course focuses on Open Source Intelligence (OSINT) tactics and techniques designed to help you improve your investigative game.

OSINT: You can't hide // Your privacy is dead // Best resources to get started
You cannot hide. Your privacy is over. Want to learn OSINT? Want to learn how easy it is to find information online? Time to learn Open Source Intelligence from the best. - OSINT Curious

OSINT Companies/Tools

  • Hackers Arise
  • OSINT Framework ... offers a web-based interface that breaks down different topic areas of interest to OSINT researchers and connects you to the tools that can help you sniff out the info you need.

Several companies/products are using AI for OSINT. Here are some of them:

  • Babel X - Babel Street ... a multilingual search tool for the public internet, including blogs, social media, message boards and news sites. It also searches the dark web, including Onion sites, and some deep web content that Babel X can access through agreements or licensing from the content owners. The product is able to geo-locate the source of information it finds, and it can perform text analysis to identify relevant results.
  • BuiltWith ... lets you find what popular websites are built with. Different tech stacks and platforms power different sites. BuiltWith can, for example, detect whether a website is using WordPress, Joomla, or Drupal as its CMS and provide further details. BuiltWith also generates a neat list of known JavaScript/CSS libraries (e.g., jQuery or Bootstrap) that a website uses. Further, the service provides a list of plugins installed on the websites, frameworks, server information, analytics and tracking information, etc. BuiltWith can be used for reconnaissance purposes.
  • Cellebrite ... provides digital intelligence solutions for law enforcement, military, intelligence, and enterprise customers. It enables users to extract, decode, and analyze data from various digital sources, including mobile devices, cloud services, computers, and IoT devices.
  • Cobwebs Technologies ... provides mission-critical AI-powered OSINT solutions for law enforcement, government, financial institutions, and corporations. It enables users to search and analyze the web's big data using machine learning algorithms, and generate real-time intelligence reports.
  • Dassault Systemes ... provides 3D design, engineering, simulation, and data intelligence solutions for various industries. It enables users to create and manage digital twins of products, processes, and systems, and leverage AI to optimize performance and innovation.
  • Digital Clues ... provides AI-powered OSINT solutions for law enforcement and intelligence agencies. It enables users to collect, analyze, and visualize data from various online sources, including social media, dark web, blogs, forums, and news sites.
  • ESPY ... provides AI-powered OSINT solutions for security and crisis management. It enables users to automate the process of collecting, analyzing, and synthesizing information from various open sources, such as web scraping, geolocation, sentiment analysis, and image recognition.
  • Expert.AI ... provides natural language understanding solutions for various industries and applications. It enables users to extract insights and knowledge from unstructured text data using AI and natural language processing techniques.
  • Grep.app ... search across half million git repos
  • Hensoldt ... provides sensor solutions for defense and security applications. It enables users to collect, process, and analyze data from various sources, such as radar, optical, electronic warfare, and cyber systems.
  • Intelligence X ... preserves not only historic versions of web pages but also entire leaked data sets that are otherwise removed from the web due to the objectionable nature of content or legal reasons.
  • Lampyre ... provides a platform for conducting OSINT investigations. It enables users to collect data from various sources using queries or scripts, analyze data using filters or graphs, and export data in various formats.
  • Maltego ... provides a visual tool for conducting OSINT investigations. It enables users to gather data from various sources using transforms or integrations, analyze data using link analysis or clustering techniques, and share data using reports or collaboration features.
  • [https://github.com/laramies/metagoofil Metagoofil ... is optimized to extract metadata from public documents. Metagoofil can investigate almost any kind of document that it can reach through public channels including .pfd, .doc, .ppt, .xls and many others. Searches return things like the usernames associated with discovered documents, as well as real names if available. It also maps the paths of how to get to those documents, which in turn would provide things like server names, shared resources and directory tree information about the host organization.
  • Mitaka ... Available as a Chrome extension and Firefox add-on, search over six dozen search engines for IP addresses, domains, URLs, hashes, ASNs, Bitcoin wallet addresses, and various indicators of compromise (IOCs) from web browser.
  • NexVision ... provides vision solutions and optronic systems for various applications, such as defense, security, cinema, and industry. It specializes in electronic reference design, especially in complex vision processing systems. It uses AI and computer vision to extract insights and metadata from video data, such as object detection, activity recognition, and scene understanding
  • Owlint ... centralizes the digital footprint from the Clear Web, Deep Web, and Dark Web. Its proprietary AI OwlAnalytics assesses a level of risk on each detected element.
  • Recon-ng ... provides a modular framework for conducting OSINT investigations. It enables users to gather data from various sources using built-in or custom modules, store data in a local database, and visualize data using interactive reports.
  • searchcode ... is a highly specialized search engine that looks for useful intelligence inside source code.
  • Shodan ... can monitor and search as part of an OSINT effort is impressive. It’s one of the few engines capable of examining operational technology (OT) such as the kind used in industrial control systems at places like power plants and manufacturing facilities. Any OSINT gathering effort in industries that deploy both information technology and OT would miss a huge chunk of that infrastructure without a tool like Shodan. In addition to IoT devices like cameras, building sensors and security devices, Shodan can also be turned to look at things like databases to see if any information is publicly accessible through paths other than the main interface. It can even work with videogames, discovering things like Minecraft or Counter-Strike: Global Offensive servers hiding on corporate networks where they should not be, and what vulnerabilities they generate.
  • Signifyd ... provides fraud protection and chargeback prevention solutions for e-commerce businesses. It enables users to leverage AI and machine learning to analyze customer behavior, transaction data, and network intelligence to detect and prevent fraud.
  • Spiderfoot ... a free OSINT reconnaissance tool that integrates with multiple data sources to gather and analyze IP addresses, CIDR ranges, domains and subdomains, ASNs, email addresses, phone numbers, names and usernames, BTC addresses, etc. Available on GitHub, Spiderfoot comes with both a command-line interface and an embedded web-server for providing an intuitive web-based GUI. The application itself comes with over 200 modules
  • Spyse ... Relied on by projects like OWASP, IntelligenceX, and Spiderfoot, Spyse collects publicly available data on websites, their owners, associated servers, and IoT devices. This data is then analyzed by the Spyse engine to spot any security risks in and connections between these different entities.
  • theHarvester ... uses include popular search engines like Bing and Google, as well as lesser known ones like dogpile, DNSdumpster and the Exalead meta data engine. It also uses Netcraft Data Mining and the AlienVault Open Threat Exchange. It can even tap the Shodan search engine to discover open ports on discovered hosts. In general, theHarvester tool gathers emails, names, subdomains, IPs and URLs.
  • Verint ... provides customer engagement and cyber intelligence solutions for various sectors and organizations. It enables users to use AI and analytics to optimize customer interactions, enhance workforce performance, and protect from cyber threats.
  • Voxel51 ... provides video analytics solutions for various industries and applications. It enables users to use AI and computer vision to extract insights and metadata from video data, such as object detection, activity recognition, and scene understanding.


Primer.ai

Using Machine Learning (ML), computer vision and Natural Language Processing (NLP) transformers focused on software for DoD/IC customers with real-time news and social media insights, situational reporting, intelligence gathering, and faction analysis. Lists its customers: U.S. Air Force, Army, and U.S. Special Operations Command, and Fortune 500 companies. - Military contractor Primer announces $69M to build AI for ‘those who support and defend our democracy’ | Carl Franzen - VentureBeat

Some of Primer.ai services include:

  • Threat Detection: Early detection of kinetic and cyber threats from social and news media to improve response time
  • Strategic Analysis: Structuring messy data for exploration to reduce time to insight
  • Semantic Search: Securely and fluently search, summarize, and explore data at scale with greater precision

Primer Command - By leveraging high-scale streaming data, you can detect kinetic and cyber threats up to several hours earlier than traditional methods and respond quickly. Primer Command is a real-time threat detection tool that analyzes tens of thousands of sources in 100 languages, including news and social media. With Primer Command, teams can monitor, respond, and maintain situational awareness of fast-breaking global events, such as kinetic and cyber threats. Primer Command can:

  • detect and summarize the "Who, What, When, Where, and Why" of every scenario, providing contextual intelligence and actionable insights.
  • generate situation reports that can be downloaded, edited, and shared, saving time and facilitating collaboration.
  • perform location-based searches and computer vision capabilities, such as identifying faces, objects, logos, and text in images.
  • filter and flag items of importance, and delegate responsibilities among team members.
  • integrate with Large Language Model (LLM).
  • operate in a secure and compliant manner, respecting data privacy and sovereignty.


Tools for Analyzing Social Media

Some of the most popular tools:

  • Hootsuite Analytics: This tool allows you to track performance data from every social network in one place, with easy-to-understand reports. You can measure metrics like reach, followers, engagement, clicks, and conversions. You can also compare results across multiple networks and create custom reports based on your KPIs.
    • Pros: Comprehensive, user-friendly, and customizable.
    • Cons: Paid tool, requires a Hootsuite account, and may not support some niche networks.
  • BuzzSumo: This tool helps you discover the most engaging content and influencers on social media. You can analyze topics, keywords, domains, and authors to see what resonates with your audience. You can also monitor mentions, trends, and competitors to stay ahead of the curve.
    • Pros: Powerful, insightful, and easy to use.
    • Cons: Paid tool, limited free version, and may not cover all social platforms.
  • Google Analytics: This tool is a cloud-based web analytics service that delivers different tools to optimize digital marketing. You can use it to track social media traffic, conversions, and campaigns. You can also integrate it with other Google products like Ads, Search Console, and Data Studio.
    • Pros: Free, reliable, and versatile.
    • Cons: Complex, requires technical skills, and may not provide all social media metrics.
  • Keyhole: This tool is a hashtag analytics and social media monitoring platform. You can use it to track keywords, hashtags, accounts, and URLs across Twitter, Instagram, Facebook, YouTube, and TikTok. You can also measure sentiment, engagement, reach, impressions, and share of voice.
    • Pros: Accurate, real-time, and comprehensive.
    • Cons: Paid tool, limited free trial, and may not support some niche networks.
  • IZEA: helps you track your social presence.
    • Pros: Its VizSearch feature, which matches visual content to keyword searches for influencer discovery and for your content library, and its private network of influencers, which means competitors won’t find them when you get them to sign onto the platform and work with you
  • quintly: This tool is a social media analytics and benchmarking platform. You can use it to analyze your own and your competitors' performance on Facebook, Twitter, Instagram, LinkedIn, YouTube, Pinterest, and Snapchat. You can also create custom dashboards and reports with over 400 metrics.
    • Pros: Flexible, customizable, and scalable.
    • Cons: Paid tool, no free version available (only a demo), and may not cover all social platforms.
Retrieved from "https://primo.ai/index.php?title=Open-Source_Intelligence_-_OSINT&oldid=30069"