Breadcrumbs by Trace Labs

Today we're joined by Roelof Temmingh. Roelof is the creator of OSINT tools you've certainly heard of such as Maltego and Vortimo. Roelof recently got to test Vortimo in the context of a Trace Labs CTF and his team placed very well. In this episode we discuss the history/inception of these tools as well as CTFs vs Real World investigations. Vortimo: https://www.vortimo.com/Blog post about competing in the CTF: https://www.vortimo.com/competing-in-the-tracelabs-ctf-26-march-2022/Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Spend enough time in almost any OSINT community and you'll notice that some people just keep dropping resource after resource for the community. Ever wonder where those resources come from or who these people are? Today we get to talk to ohshint_ about their professional background as a private investigator, OSINT resources and how NOT to use OSINTOhShINT_ on Twitter: @OhShINT_ OhShINT_ on Github: https://github.com/OhShINT Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Have you ever been on an investigation and thought to yourself "I can't wait to explain this to someone else!"?....The information you collect during an investigation is only as useful as your ability to communicate its meaning and value. In this episode we sit down with professional pentester and *spoiler alert* professional report writer Brian King. We'll be going over the value of communicating your findings and some basic guidance that should lead you to writing better reports. Brian on Twitter: @BBhacKingHack for Show Report for Dough: Part 2 -  https://www.youtube.com/watch?v=bJ4gJVXPAS0&t=2933sBrian's webapp pentesting course - https://www.antisyphontraining.com/modern-webapp-pentesting-w-bb-king/How To Really Use Microsoft Word (Scott Hanselman) - https://www.youtube.com/watch?v=u8CC0sng1FMPublic Pentesting Reports, from Julio Cesarfort - https://github.com/juliocesarfort/public-pentesting-reportsWant to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

OSINT investigations aren't always glamorous. In this episode we talk to Rae Baker about some overlooked (although incredibly practical) applications of OSINT as well has her journey in to the field.Rae on Twitter: @wondersmith_raeRae's Blog: https://wondersmithrae.medium.comOrganizations Rae donates time to: https://safeescape.org/https://www.innocentlivesfoundation.org/https://osintcurio.us/Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

OPSEC. By the time you realize you need it....it's probably too late. Where should a new person get started with OPSEC? How much do they need? In this episode we talk to Sinwindie about the OPSEC spectrum, good advice for beginners and share our favorite OPSEC fails.Sinwindie on Twitter: @sinwindieWant to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

Chase Matheson is a student, artist, hacker and creator behind the iconic Trace Labs badge artwork. Today we talk through his 15 month journey from complete outsider to landing his first infosec gig. Chase shares his journey, lessons learned and the strategy that got him where he is today.Chase on Twitter: @ChaseMathesonChase on Linked In: Chase MathesonWant to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Slack Channel: https://tracelabs.org/slackLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

OSINT is a valuable skill. There are a number of organizations you can volunteer your time with to make the world a better place while leveraging something you're good at. Contributing to such a noble mission does come at a price though. In this episode I'm joined by volunteers from Trace Labs and the National Child Protection Task Force (NCPTF). We talk through the highs but also the lows that come with giving up your time to walk through the darkness. National Child Protection Task Force: https://www.ncptf.org/Jessica on Twitter: @scarlettsleuthAlex on Twitter: @UlicBelouveWant to learn more about Open Source Intelligence? Follow us on Twitter: @TraceLabsJoin our Slack Channel: https://tracelabs.org/slackLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

Whether it's a Defcon talk, a training or Twitter, the researcher known as Levi is best known for their expertise navigating and investigating on the Darknet. In this episode, we'll be talking other things! Hear us chat with Levi about some of the (often unconsidered) mental health aspects that accompany their investigations and how they stay safe and healthy online.  Levi on Twitter: @levitanninLevi would like you to check out the Innocent Lives Foundation: https://www.innocentlivesfoundation.org/If you'd like to support the Innocent Lives Foundation AND enjoy Levi's book recommendation check out their affiliate link to Amazon: "Lurking: How a Person Became a User"Want to learn more about Open Source Intelligence? Follow us on Twitter: @TraceLabsJoin our Slack Channel: https://tracelabs.org/slackLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

As the saying goes: You can't spell Pentest without "preparation"! OSINT collection is an important (and perhaps under-appreciated) part of penetration testing. In this episode we talk to John Strand about OSINT's place in a pentesting toolkit, what pieces of OSINT don't belong in a final report as well as the Black Hills approach to training (spoiler alert: They suck at capitalism). John Strand on Linked In: https://www.linkedin.com/in/john-strand-a1b4b62/Black Hills Information Security: https://www.blackhillsinfosec.com/Want to learn more about Open Source Intelligence? Follow us on Twitter: @TraceLabsJoin our Slack Channel: https://tracelabs.org/slackLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party

Open Source Intelligence isn't just for civilians. Law Enforcement can leverage different aspects of OSINT to further an investigation. Nicole will walk us through examples of OSINT being used for evidence collection, understanding the "why" behind a crime and so much more.Nicole on Twitter: @NicoleBeckwithWant to learn more about Open Source Intelligence? Follow us on Twitter: @TraceLabsJoin our Slack Channel: https://tracelabs.org/slackLearn how to get started with Trace Labs: https://www.youtube.com/watch?v=7OrI4MYv9i4Learn about our Search Party CTFs: https://www.tracelabs.org/initiatives/search-party