Breadcrumbs by Trace Labs

Paying an organization to provide you with intelligence you either don't have access to or don't have the time to collect can expedite an investigation. But how does it work? Where does the intelligence come from? How do these businesses work?

In this episode, Roelof gives us some insight in to the business of breach data and people information services.

Vortimo: https://www.vortimo.com/

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Check out the site: https://tracelabs.org

In this episode we have the good fortune of sitting down with xFreed0m - AKA Roei Sherman. Roei has been a Trace Labs contributor for several years and we take some time to talk about his journey in to infosec, OSINT and the Trace Labs community. Want to know how to get started in the industry? Want to hear about OSINT's use in red team operations? We've got you covered on this episode.

Roei on Twitter: x_Freed0m

Roei on Github: xFreed0m

https://betheadversary.com/

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Check out the site: https://tracelabs.org

Today we're joined by Roelof Temmingh. Roelof is the creator of OSINT tools you've certainly heard of such as Maltego and Vortimo. Roelof recently got to test Vortimo in the context of a Trace Labs CTF and his team placed very well. In this episode we discuss the history/inception of these tools as well as CTFs vs Real World investigations.

Vortimo: https://www.vortimo.com/
Blog post about competing in the CTF: https://www.vortimo.com/competing-in-the-tracelabs-ctf-26-march-2022/

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Check out the site: https://tracelabs.org

Spend enough time in almost any OSINT community and you'll notice that some people just keep dropping resource after resource for the community. Ever wonder where those resources come from or who these people are? Today we get to talk to ohshint_ about their professional background as a private investigator, OSINT resources and how NOT to use OSINT

OhShINT_ on Twitter: @OhShINT_

OhShINT_ on Github: https://github.com/OhShINT

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Check out the site: https://tracelabs.org

Have you ever been on an investigation and thought to yourself "I can't wait to explain this to someone else!"?....

The information you collect during an investigation is only as useful as your ability to communicate its meaning and value. In this episode we sit down with professional pentester and *spoiler alert* professional report writer Brian King. We'll be going over the value of communicating your findings and some basic guidance that should lead you to writing better reports.

Brian on Twitter: @BBhacKing

Hack for Show Report for Dough: Part 2 -  https://www.youtube.com/watch?v=bJ4gJVXPAS0&t=2933s

Brian's webapp pentesting course - https://www.antisyphontraining.com/modern-webapp-pentesting-w-bb-king/

How To Really Use Microsoft Word (Scott Hanselman) - https://www.youtube.com/watch?v=u8CC0sng1FM

Public Pentesting Reports, from Julio Cesarfort - https://github.com/juliocesarfort/public-pentesting-reports

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Check out the site: https://tracelabs.org

OSINT investigations aren't always glamorous. In this episode we talk to Rae Baker about some overlooked (although incredibly practical) applications of OSINT as well has her journey in to the field.

Rae on Twitter: @wondersmith_rae
Rae's Blog: https://wondersmithrae.medium.com
Organizations Rae donates time to:
https://safeescape.org/
https://www.innocentlivesfoundation.org/
https://osintcurio.us/

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

OPSEC. By the time you realize you need it....it's probably too late. Where should a new person get started with OPSEC? How much do they need? In this episode we talk to Sinwindie about the OPSEC spectrum, good advice for beginners and share our favorite OPSEC fails.

Sinwindie on Twitter: @sinwindie

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Discord server: https://tracelabs.org/discord

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

Chase Matheson is a student, artist, hacker and creator behind the iconic Trace Labs badge artwork. Today we talk through his 15 month journey from complete outsider to landing his first infosec gig. Chase shares his journey, lessons learned and the strategy that got him where he is today.

Chase on Twitter: @ChaseMatheson

Chase on Linked In: Chase Matheson

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Slack Channel: https://tracelabs.org/slack

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

OSINT is a valuable skill. There are a number of organizations you can volunteer your time with to make the world a better place while leveraging something you're good at. Contributing to such a noble mission does come at a price though. In this episode I'm joined by volunteers from Trace Labs and the National Child Protection Task Force (NCPTF). We talk through the highs but also the lows that come with giving up your time to walk through the darkness.

National Child Protection Task Force: https://www.ncptf.org/

Jessica on Twitter: @scarlettsleuth

Alex on Twitter: @UlicBelouve

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Slack Channel: https://tracelabs.org/slack

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

Whether it's a Defcon talk, a training or Twitter, the researcher known as Levi is best known for their expertise navigating and investigating on the Darknet. In this episode, we'll be talking other things! Hear us chat with Levi about some of the (often unconsidered) mental health aspects that accompany their investigations and how they stay safe and healthy online. 

Levi on Twitter: @levitannin

Levi would like you to check out the Innocent Lives Foundation: https://www.innocentlivesfoundation.org/
If you'd like to support the Innocent Lives Foundation AND enjoy Levi's book recommendation check out their affiliate link to Amazon:
"Lurking: How a Person Became a User"

Want to learn more about Open Source Intelligence?

Follow us on Twitter: @TraceLabs

Join our Slack Channel: https://tracelabs.org/slack

Learn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4

Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party