NeedleStack

Cybersecurity is rife with technological solutions, but as security researcher John Hammond knows all too well, it’s people that make the difference. Hear how people make or break security intel, both as researchers and threat actors. We’ll talk sock puppets, the role of OSINT for your own OPSEC and intelligence building, cybergang leaders as businessmen and more. Plus we’ll dive into John’s recent OSINT work on the ScreenConnect vulnerabilities and how they’re being leveraged in the wild.

Key takeaways

• Using OSINT for opsec to protect your identity and enhance security intelligence
• Lurking in dark web forums, sock puppets and engaging with threat actors
• The role OSINT played in dissecting ScreenConnect vulnerabilities and exploits in the wild

Do you wish you had more training opportunities or just chances to flex your OSINT skills? We’re hosting a big event this month where we’ll talk ways to level up your tradecraft, training opportunities, take-home tips and more.

There are many paths to OSINT — one of them is through training programs and online resources! Aubrey and Shannon break down what’s available, what’s free (or not) to keep you abreast of how you can gain and further your OSINT skills.

Propublica reporter and author of the Digital Investigations newsletter, Craig Silverman joins the podcast to discuss disinformation trends on social media platforms, elections around the world in 2024 and what journalists and OSINT investigators can learn from each other.

Key takeaways

• OSINT for investigative journalism
• Disinformation trends on social media
• Documenting evidence during an investigation

DefCon speaker and host of DoingFedTime on YouTube, Sam Bent joins the podcast to shine light on operational security concerns on the dark web. The reformed darknet marketplace seller shares insights and advice for best practices when investigating on the dark web. 

Key takeaways:

• OPSEC on the dark web
• The different darknets
• Linguistic analysis in evidence gathering

Ritu Gill, or @OSINTtechniques as she’s known online, joins the podcast to give tips for social media intelligence gathering. What are the little-known platforms to look at and how do you gather safely? Tune in to hear the tips.

Key takeaways

• Overlooked social media platforms for evidence gathering
• OPSEC for law enforcement
• Tips for beginning OSINT practitioners

The chief investigations officer of the National Child Protection Task Force shares the tools and methods he trains law enforcement on, how he protects his mental health in a such a devastating field and the latest platforms and technology to stay on top of.

Key takeaways

• OSINT for child protection
• The importance of mental health
• What law enforcement need to know about trafficking

Jessica Smith, president and founder of ClickSafe intelligence and special investigations lead with the National Child Protection Task Force, joins the podcast to dispel misconceptions about child protection. From who is being targeted to where and how, Jessica Smith shares how misinformation about child exploitation can derail investigations, and how OSINT helps pave the way for child protection.

Key takeaways

• Misinformation around child protection can adversely affect investigations
• How OSINT plays a role in helping victims
• The new platforms where kids are targeted
• Tips for vigilance and education

We discuss recent Bellingcat reports on whether AI has the capability to reliably identify AI. The reporter and fellow shares his research on AI for OSINT and the results.

Key takeaways

• Testing AI’s ability to recognize AI art
• Blending journalism and OSINT at Bellingcat
• How machine learning should and shouldn’t be used in OSINT

We talk to an OSINT professional about what he learned when he applied his daytime skills to a moonlighting hobby. On YouTube, Gary Ruddell shares 3-minute tips, geolocates scenes from movies and shares the OSINT discipline he learned from the U.K. military with hobbyists and practitioners just starting out.

Key takeaways:

• Applying the intelligence cycle
• Executive protection with social media
• Geolocation clues from the shortest frame