Breadcrumbs by Trace Labs

The best way to learn is by doing and doing is easier when it's engaging. We sit down with Rae Baker to talk about KASE Scenarios. KASE offers realistic OSINT training scenarios with a narrative catalyst. KASE Scenarios: https://kasescenarios.comKASE on Twitter: https://twitter.com/kasescenariosRae on Twitter: https://twitter.com/wondersmith_raeRae's book: https://www.raebaker.net/-------------------------------------------Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Just in time for DEF CON 31....A special Training TreatIn this episode I'm joined by Joe Gray. Joe is a Trace Labs Black Badge winner, author, speaker and trainer amongst other things. We dive deep in to the world of OSINT training, discussing Joe's take on training in general as well as guidance for those new to the field. You can find Joe online at:Joe's Socials:Twitter (X): https://twitter.com/C_3PJoeTraining with Joe through The OSINTionDiscord: https://osint.mobi/discord YouTube: https://osint.mobi/youtube Blog: https://tidbit.theosintion.com/ On-Demand Academy: https://academy.theosintion.com/Joe's Book:https://www.amazon.com/Practical-Social-Engineering-Joe-Gray/dp/171850098XWant to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

The best Social Engineers do a tremendous amount of research before engaging a target. As luck would have it, we get to speak with one of them today! Chris and I talk about the pivotal role of OSINT in preparing for an SE engagement and also get a "peek behind the curtain" in relation to OSINT sources during a Social Engineering "capture the flag" style competition.  Chris Kirsch is the CEO of runZero (www.runzero.com), a cyber asset management company he co-founded with Metasploit creator HD Moore. Chris started his career at an InfoSec startup in Germany and has since worked for PGP, nCipher, Rapid7, and Veracode. He has a passion for OSINT and Social Engineering. In 2017, he earned the Black Badge for winning the Social Engineering capture the flag competition at DEF CON, the world’s largest hacker conference. If you'd like to learn more about Chris and the organizations he advocates for: Defcon 2022 OSINT & vishing research: https://medium.com/@chris.kirsch/top-osint-sources-and-vishing-pretexts-from-def-cons-social-engineering-competition-8e08de4c8ea8 Winning call from DEF CON SECTF 2017: https://www.youtube.com/watch?v=yhE372sqURU External perimeter recon using runZero: https://www.runzero.com/blog/external-scanning/ Competitive Intelligence talk at Layer 8 Conference: https://www.youtube.com/watch?v=NB-wLadJ3hk Facebook Talent Intelligence Collective: https://www.facebook.com/groups/talentintelligencecollective National Child Protection Task Force (NCPTF): https://www.ncptf.org/ Twitter profile: https://twitter.com/chris_kirsch Mastodon profile: https://infosec.exchange/@chris_kirsch LinkedIn profile: https://www.linkedin.com/in/ckirsch/ Chris' company: https://www.runzero.com/ Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

In this bonus episode, Tom Hocker and Rae Baker sit down to talk about their respective journeys in to infosec. Getting in to Infosec can seem challenging but if these two can do it so can you. With a little bit of forward momentum and a clear goal in mind you can pretty much achieve anything.Rae on Twitter: https://twitter.com/wondersmith_raePre-Order Rae's Book: https://www.amazon.com/gp/product/1119933242/ref=dbs_a_def_rwt_hsch_vapi_taft_p1_i0 Tom on Twitter: https://twitter.com/human_decodedTom and Rae would both like it if you considered supporting Operation Safe Escape and the great work they do:Operation Safe Escape - https://safeescape.orgOperation Safe Escape Donations - https://funraise.org/give/Operation-Safe-Escape/ca21cf2f-52c3-45c0-af23-fe9441b7b0b6Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

#Hack4Good can come in many different forms. The team from Operation Safe Escape works in the same "space" as Trace Labs but with a different mission. They're focused on assisting the survivors of domestic violence escape their situation and stay safe in a digital world that makes tracking and control easier than it's ever been. In this episode, I talk with some of the OSE team about the organization, how they operate and what it takes to make a Safe Escape from an abusive situation. Operation Safe Escape - https://safeescape.orgOperation Safe Escape Donations - https://funraise.org/give/Operation-Safe-Escape/ca21cf2f-52c3-45c0-af23-fe9441b7b0b6Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Paying an organization to provide you with intelligence you either don't have access to or don't have the time to collect can expedite an investigation. But how does it work? Where does the intelligence come from? How do these businesses work? In this episode, Roelof gives us some insight in to the business of breach data and people information services.Vortimo: https://www.vortimo.com/Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

In this episode we have the good fortune of sitting down with xFreed0m - AKA Roei Sherman. Roei has been a Trace Labs contributor for several years and we take some time to talk about his journey in to infosec, OSINT and the Trace Labs community. Want to know how to get started in the industry? Want to hear about OSINT's use in red team operations? We've got you covered on this episode.Roei on Twitter: x_Freed0mRoei on Github: xFreed0mhttps://betheadversary.com/Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Today we're joined by Roelof Temmingh. Roelof is the creator of OSINT tools you've certainly heard of such as Maltego and Vortimo. Roelof recently got to test Vortimo in the context of a Trace Labs CTF and his team placed very well. In this episode we discuss the history/inception of these tools as well as CTFs vs Real World investigations. Vortimo: https://www.vortimo.com/Blog post about competing in the CTF: https://www.vortimo.com/competing-in-the-tracelabs-ctf-26-march-2022/Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Spend enough time in almost any OSINT community and you'll notice that some people just keep dropping resource after resource for the community. Ever wonder where those resources come from or who these people are? Today we get to talk to ohshint_ about their professional background as a private investigator, OSINT resources and how NOT to use OSINTOhShINT_ on Twitter: @OhShINT_ OhShINT_ on Github: https://github.com/OhShINT Want to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org

Have you ever been on an investigation and thought to yourself "I can't wait to explain this to someone else!"?....The information you collect during an investigation is only as useful as your ability to communicate its meaning and value. In this episode we sit down with professional pentester and *spoiler alert* professional report writer Brian King. We'll be going over the value of communicating your findings and some basic guidance that should lead you to writing better reports. Brian on Twitter: @BBhacKingHack for Show Report for Dough: Part 2 -  https://www.youtube.com/watch?v=bJ4gJVXPAS0&t=2933sBrian's webapp pentesting course - https://www.antisyphontraining.com/modern-webapp-pentesting-w-bb-king/How To Really Use Microsoft Word (Scott Hanselman) - https://www.youtube.com/watch?v=u8CC0sng1FMPublic Pentesting Reports, from Julio Cesarfort - https://github.com/juliocesarfort/public-pentesting-reportsWant to learn more about Open Source Intelligence?Follow us on Twitter: @TraceLabsJoin our Discord server: https://tracelabs.org/discordCheck out the site: https://tracelabs.org