OSINT: Sharpen Your Cyber Skills With Open-source Intelligence
Вставка
- Опубліковано 1 чер 2024
- Learn OSINT if you want to get better at cybersecurity.
This is even more true if you’re new and starting out in the field.
Open-source intelligence can mean a lot of things to different people. For a lawyer, it's sifting through official government documents and court proceedings. For your mother it's going through pictures and posts on social media. Generally though, OSINT is any intelligence produced from information available to the public.
Conducting OSINT is a four-stage process:
1. Collection involves gathering data and storing it in a centralized location for access.
2. Processing cleans up data and normalizes them into a common format.
3. Exploitation is the analysis that pieces data points together.
4. Dissemination involves summarizing your findings in a common report.
As an individual researcher, you might be doing this process without even thinking. For larger outfits it’s a more methodical process that involves an entire team of researchers
In the cyber world, OSINT is becoming the foundation of digital investigation. If you’re performing a penetration test this means doing reconnaissance and target development. If you’re a defender this involves tracking a threat actor’s infrastructure and methods.
Having strong OSINT skills makes you more resourceful in general. For example, if you're new to a cyber security topic, researching the right way can let you find the right study materials. So even if you’re not technical at all, OSINT can be a great place to start learning cyber security.
See below for some awesome resources!
00:00 Into to OSINT
01:13 OSINT History
01:52 Who Uses OSINT?
02:51 How to Collect Intel
04:29 Semi-Passive Collection
05:50 Identifiers and Pivoting
07:25 Four Stages of OSINT
10:19 OSINT Application
11:37 Resources
________________________________________________________________
RAND Corporation OSINT Lifecycle:
www.rand.org/pubs/research_re...
Shodan:
shodan.io
Urlscan:
urlscan.io
IntelligenceX:
intelx.io
Hunchly:
hunch.ly
Privacy, Security, and OSINT show:
www.inteltechniques.com/podca...
Intro to Google Dorking:
securitytrails.com/blog/googl...
Google Advanced Search Operators
support.google.com/websearch/...
________________________________________________________________
FOLLOW and SUBSCRIBE!
👉 UA-cam: / cyberspatial
👉 Twitter: / cyberspatial_hq
👉 Facebook: / cyberspatial
👉 Instagram:
/ cyberspatial
👉 LinkedIn: / cyberspatial
#OSINT #OpenSourceIntelligence #Cyberspatial - Наука та технологія
OSINT is an incredible tool for understanding the reality of our day and age. Its an important tool for anyone, not just IT or cyber security. If you want to be able to investigate claims, events, trends, people, organizations - OSINT is the tool and skillset that can do it for you. Investigative journalist, red team, blue team, or just like me a hobbyist... it is one of the few tools anyone can use to discern reality and fiction, see who is behind a website or movement, and tell lies and truth apart in the sea of misinformation that is the modern world.
Absolutely. It's been such an underrated field that is only now becoming more mainstream!
I'm so glad that YT algorithm reccomended your channel
Us too! The algorithm is everything.
yeah me too
same
@@Cyberspatial ٩٩
+1
Please never stop making these tutorials. I feel like a hand is pulling my hand through a bunch of textbooks I had so much trouble understanding :"))
Debal Ghosh that’s awesome! Thanks for the support!!
@@Cyberspatial Yeah I'll sub and I'm sure others will too if you do.
I took an 85 hr course on OSINT from Michale Bazzell, and THAT was just the tip of the iceberg on learning OSINT. Thank you for the recommendation for additional reading.
Michael Bazzell has some great resources, and definitely knows his chops. But absolutely, it's just the tip of the iceberg! Many more experts out there to follow.
Hello, what do you mean by THAT?
Best
@@ferasalfarsi897 Look up "idioms" in your favourite search engine. It is common in the english language to do this, especially in rural areas, people just won't use formal english.
To answer your question: it just means that OSINT is a huge topic that cannot be covered in a single video or course.
This is exactly the video I've been looking for. Perfect. A clear and concise overview of OSINT and many great resources to continue my education. Thanks!
This is what I call quality. Got this recommended and subscribed 5min into the video.
Thanks to UA-cam algorithm for bringing you here. Welcome aboard! 😊
Me too!
your channel is a goldmine!
I love the fact that you look like you've been doing UA-cam videos for ages, keep up!
Thank you for the kind words. Glad to have you here :)
My new UA-cam Number 1 channel. Thank you for the most important stuff.
Appreciate it!
My favorite story of osint was rhe time 4chan tracked down the you will not divide us flag. They used flight trackers, star positions, sounds in the video and social media to track down where it was located. Not totally supporting what they did but sorta opened my eyes to what was possible. Internet historian did a whole series on it. It was so ridiculous that it ended up just being funny.
The quality of these videos is top notch..!
Just...clean and a perfect tutorial. Don't change the theme that you follow for all the videos. Keep going...Doing a great job..!!
Thanks, will do!
Amazing awesome super Duper Phenomenal Explanation
Good job! I'm roughly 95% knowledgeable of the material posted, I learned a couple new things. Your presentation was articulate and very well done!
Glad it was helpful! 🙌
You've got great potential man! Amazing production quality. Keep it up and this channel will blow up in no time!
Rochana Rajapakse thanks!!
Thanks for this video. I am intersted in cyber secuirty but I just started learning. This looks like something I could actually learn and do now.
Omg ..omg... A real content .. almost everyone drift the real content but u told us prply .. tq so much man ..u r amazing
It's a pleasure!
WOW! the coherent way you put together your content! AMAZING!!!
Thank you so much!
im a teenager deeply interested about cyber space and computers,just found this channel and honestly im really glad i did.Im reading Michael's book what it takes to disappear and it is awesome.Keep up the good work man and never stop making interesting and informative
videos!
Appreciate it! More to come!
Tell me about the book,thanks
This guy and network chuck are both amazing. Thank you good sir, it'll be easier for me to get an apprenticeship
Humbled by your comment!
This video and your channel is one of the best resources I've found and I've searched through a lot! Currently doing a degree in cyber and I've been doing osint on all the students in my class lol 😂 it's shocking how all their social is public open and they are doing a cyber degree!!
Thanks for the compliment! Yes a lot of people operate with high-trust for online services. We're entering a world where privacy and security are becoming more aligned. Gather information is the step one to targeting someone!
Best intro tutorial I've found yet. Really cool~ A full demo on pivoting would be highly useful for someone learning OSINT 😍
Thanks! Will keep that in mind :)
seconded!
@@bluestarguardian7554 Thank you :)
So many good resources! Thank you!
Thank you so much for your knowledge and time. I'm a new subscriber to your channel. Please keep sharing.
Another learning another skills . Thanks 🙏🏻
Hope it helped you LEVEL UP!
I'm starting to love this channel, I'd love a video listing good resources to learn what blue team, red team and everything cyber security mean and stuff
Great idea! Is there a list of terms you would be interested in seeing to start off with?
@@Cyberspatial not really as im really new i don't know where to start but im not bad with computers, I know basic python and some java/kotlin and learning rust a bit atm
Red team attack blue team defense purple team combination analysis of the two. Red team is active exploitation and pen testing and blue team is responsible for threat mitigation.
I'm an intel and social engineering junkie. Computers? Not sure yet but hope this helps in your search n.n
@@OZMus ❤️ thanks
great video really well explained, when someone asks me in the future what OSINT is I'm 100% directing them to this video.
Appreciate it. Thank You!
Plz continue to make osint videos, very intresting.
Thanks for your sharing!
Glad yt algorithm recommended this channel to me. Subbed.
I am not looking to cyber security. But looking into BI which I think osint will be very useful.
Looking forward to unpack this.
Awesome! Welcome aboard :)
I'm a tradesman and like watching these type of videos. IMO it's useful for most people to have a basic understanding of this stuff to protect yourself. Darkness diaries is another channel I've been binge watching.
Great help! Especially in covid, cybersecurity jobs seekers will gain immensely from appealing video on how to forward their careers!! :)
Glad it was helpful!
Amazing content. Thanks for sharing.
Thanks, Dereck! There's more to come, so make sure to subscribe to our channel. 🙂
OSINT aka Cyber-Stalking 😄
Great content bud! Keep up the good work. 👍
This really was amazing. Thank you for ur work dear sir
My pleasure
This video is amazing just amazing. Content is Informational. Thank you so much. :)
You're so welcome!
Tou are brilliant!
You Are The BEST!!
Thanks for this. It provides a possible answer I had to a question about how a client whose account info was compromised might have ended up in that situation, even though he swore he changed his pw regularly, shredded old bills and credit offers and was "careful" not have his PII floating around on the web.
after this video i am your fan .great work
shahmeer khan thanks so much!
AMAZING CONTENT! Thank you so much.
Thanks!
Hoping more videos like this best information and explanation
Movie Clips thanks!
What a great presentation!!!
Glad you liked it!
You have great way of explanation. Keep up the good work.
Thanks a lot!
This is great. More OSINT videos please
Kas S great idea!
3 videoclips from your youtube channel and I've learned more than an entire semester on school....Bad jokes aside, they don't teach the good stuff like this in highschool...moral, they should...regardless, your videoclips are amazing edited, scripted, and I love the way you teach...you should become a teacher:)
Awesome!! Please create more such stuff!😊
Thank you, we will :)
Super cool video. I just got into IT (sorta) and i enjoyed learning from you.
Awesome! Thank you!
Keep those videos up , your channel will grow big soon !
That's the plan!
A beautiful video.
i dont know why but i am loving your channel
Thank you. Happy to have you here!
Your videos are amazing
Thank you :)
thank you!
your so good at explaining i really love your channel
Thank You!
Excellent video.
Thanks for watching!
Love your contents!
Thanks for the love!
Great channel 👍👍
Thank you!
your explanation is super clear and its led me to build a good learning strategies. brother please if you can please talk about any malware in technical level. for example explain in depth level about keyloggers to understand how real world malwares looks like and how they work in technical level.
Happy to help :)
Thanks for the recommendation. Will add it on our project list.
Thank you Robert David steele for your work on this
👍
Great video!! Just found your channel you Definitely have a new sub👍💯
Thanks! Welcome aboard! :)
Great video not sure how I clicked on it but I am subscribing.
Welcome aboard! Happy to have you here. 🙌
You have really cool thumbnails and very good production quality
Thanks so much :)
Amazing content!!!
Thanks so much!
@@Cyberspatial Absolutely!
🔥🔥
iam crazy about your channel
excellent content well order and great teaching
keep doing with new content and video sure you will get million subscribers
Great to have you along for the ride!
If there's any videos you're interested in seeing, let us know!
@@Cyberspatial start a hacking series in order from scratch with your teaching skill that would be excellent.
well apparently most hacking channels are irrelevant
ethical hacker good idea, we’ll look into it!
Very useful information.
Glad it was helpful :)
you are a genius
Too generous 😅
Awesome 👍
Thanks!
Very helpful!
Thanks!
thanks mann this is very helpful
Happy to help :)
Quality!!
Thanks!
Bro, it's awesome and worthy for time being spent to watch this.
But haven't mentioned Sherlock tool while you shared shodan...
Great recommendation! There's really too many to cover them all...
Your channel popped up just after I decided to seriously get into cyber security and start out...coincidence? I THINK NOT.
Thanks for your help! 😏
GREAT!
Thanks!
@@Cyberspatial TRUELY WELCOME
Great video as a normal 👍
Thanks!
Thank you!
❣️🔥
❤️
Man, you're the best! Question from a dummy: I see that you like to use macOS. Do you think it's better than Windows 10, security-related?
It's best to be pretty OS-agnostic overall. All of them are exploitable. A good rule of thumb to follow is to pick a brand that makes both the hardware and software. Better compatibility and faster security updates.
@@Cyberspatial thank you!
Bazzell knows his stuff.
He's an operator. He's got to!
Hello would there be virtual job vacancies for beginners ? Where would we begin
Useful
Dustin Baird thanks!
❤️
🙌
This video is too good NOT to download. Do you have it available for download anywhere? I noticed you don't appear to have a website or anything.
Back in the day one could easily get a lot of information by just googling someone's email or using quotes for specific phrases. Are there any entities apart from Google that are still able to use the search engine the old way?
You can still do that with Google's advanced search operators. The functionality definitely, depends on the search engine, though there's value in trying all of them. There's a lot of data-specific search engines now too. Pipl > people, for example.
Alternate title: Whiterose describe OSINT
Mr robot fan can undertand this
Wow...
I have questions. Is Osint legal and is it harmful to use it(through apps or websites) eg: when you search someone's name or email would your informations or the person's that you investigate get leaked or tracked?
Putting out very good content. Is there a discord available?
Hi Influx,
Not yet but we're looking to set one up!
Discord up.
@@Cyberspatial thanks!!
Are you planning to start any course ? I would like to be your student.
Muhammad Nadir stay tuned in to our channel and we may just have what you’re looking for in the near future!
How does OSINT facial recognition handle the emerging technology of CGI facial mapping which is increasingly becoming a common feature for play and meme time? While good for those things, the efficacy for this in committing a fraud or framing a person can't go unnoticed.
One day there's going to be a data breach leaking facial recognition databases. OSINTers will be able to use that for investigations privately on their own computers.
As someone starting out with OSINT, is it good to simply make yourself a research target? Id imagine so
Yes it is! Discover your own attack surface and try different methods to dig deeper.
Does VRChat counts?
For those who want a brief explanation of what OSiNT is, it's basically the good ol' Facebook stalking but a professional version of it
How to stop my self being a experiment or application help me to stop
sir pls tell me where should I start first to become an ethical hacker and cybersecurity expert. pls, help me, sir.
Best way to start is to learn "what's out there?" Find out what you don't know first.
What are the different sub-fields related to cybersecurity and which ones interest you?
Books are a great way to gather broad knowledge.
University of Cambridge Professor Ross Anderson teaches Security Engineering and makes it available for free to read:
www.cl.cam.ac.uk/~rja14/book.html
The CISSP All-In-One-Guide by Shon Harrris' (RIP) you might be able to find in a library somewhere. Great background learning
www.amazon.com/CISSP-All-One-Guide-Eighth/dp/1260142655
@@Cyberspatial ohk sir..and i also know the python and java...and practice the linux shell
@@alltimeperfection921 those are good places to start, now just continue leveling up your skills!
Damn! He ain't gonna be in Rush Hour 3.
Ricky tan great content 🔥
Could u please give ur any social media id? To gain more knowledge from u bro
Hello Naveen, you may connect to us by following our social media channels listed in the description box.
This was legit!
🙌
Can you please share this book
***Help Help!!!!
Do i need to learn Programming Languages?😮😮
Raghav Kumar it depends on where you are in your cybersecurity journey and what your goals are. If you just want to level up your personal security, then you may not need to learn programming languages. If you’re early in a career, it’s probably more important to learn the skills in our “Top 5 Skills” video. But if you’re looking for a long term career, it’s certainly valuable to learn programming languages.
You can see the recommendations from a current red team operator here: ua-cam.com/video/nSTAkhe-gh0/v-deo.html
Thanks!
You're not the guy from the thumbnail. That guy was cool.
Not here to be cool, if that's what you're looking for. 🤔
可以分享一些好的网络安全社区、论坛、群、TG...