30+ domain & IP address OSINT resources
List of web based OSINT tools for domain and IP address research.
domain
How to investigate phishing campaigns – resources for the SANS OSINT Summit 2022 talk
List of helpful resources to use in support of various OSINT methods I described during the SANS OSINT Summit 2022 presentation.
My upcoming talk at SANS OSINT Summit 2022
I have been selected as a speaker at the upcoming SANS OSINT Summit 2022. I will talk about website OSINT in the context of investigating phishing campaigns.
How to investigate a massive phishing campaign
Investigating a large phishing campaign against Irish users – while laying out step by step the methodology and the workflow.
List of darknet markets & vendor shops for investigators #3
Part 3 of my DNMs for investigators research is out – this time with a slight twist…
Hydra darknet market on a server in France?
After an anonymous tip off from a reader I investigated two IP addresses seemingly associated with the Russian darknet market Hydra. What happened next might surprise you…
List of darknet markets for investigators #2
DNMs Part 2 – the continuation of my previous research into darknet markets.
The curious case of the perl.com domain hijack
An OSINT driven research into how the perl.com domain ended up in the hands of cyber criminals who then attempted to auction it off…
OSINT Iran: passive reconnaissance of Iranian IP space, IoT, WiFi networks, social media and more
In this quasi-investigative piece I explore various layers of Iranian digital ecosystems, providing a good deal of resources for starting open source enquiries into Iran.
List of darknet markets for investigators
Investigating darknet markets? Here’s a list of the main DNMs in operation right now. Care to guess which one will be taken down next?