All language subtitles for 2. What is OSINT

In this video, we're talking about what is isn't so Wikipedia's entry about URLs that I really like

a lot.

And it states open source intelligence.

Olson is data collected from publicly available sources to be used in the intelligence context in the

intelligence community.

The term open refers to overt, publicly available sources such as covert or clandestine sources, is

not related to open source software or public intelligence.

So what are some things that we could actually find with those?

Well, using those whom we could find things like email addresses, phone numbers, addresses, identities

we could do, background checks we could use social media account when social media accounts and information

on social media accounts, criminal records, we can investigate potential scams and other things such

as passwords, deleted content from the internet and whatnot.

There's quite a variety of things that we could actually use open for and to search for.

So who uses Ozone?

Well, a lot of people will use Olsen, such as law enforcement security professionals, most attackers

even use illicit businesses, investigators, journalists and home users.

Now, using the different tools of Open-Source tools and open source records and whatnot, such as trace

like Linux, which we're going to be getting into later in the course Maltego, Google fans, operators

et cetera, we could take all this data and actually begin to build a larger picture.

So.

By taking this information again, we can piece together the information into a bigger picture.

So see a Facebook user name.

We're doing an investigation on a Facebook user.

Well, that Facebook user could potentially lead to a specific Facebook post.

The fact that Facebook post may have been what originally brought us here the specification.

So from the Facebook post, we might be able to generally find their Facebook name.

Their Facebook may name a lead of the user's email address, location, listing work and so on and so

on.

And from there, we might be able to take that email address and then research a data breach, don't

that data breach don't will most likely come up with a user's password hash that password hash on hashing.

It will most likely reveal that a unique password, hopefully.

And that unique password could then be used and searched to find a user's real email address, potentially

that real email address could potentially lead to the user's real identity in location.

And this would all start from, say, a Facebook username or a specific post on Facebook.

Now.

As we gather and analyze this data on our target, again, the data can lead to and to other users in

that in that can Iraq, whether that particularly Iraq with our target rather and by collecting information,

we ultimately build a broader picture of what we're looking for.

So again, all these little pieces that we're finding username a post somewhere.

Well, password, a data breach.

A unique, unique username.

All these little things will potentially splinter off to other places in other information they will

find and ultimately when we bring all the information back together again.

It helps build a larger picture.

Now, people that use Olsen, for example, employers might check their social media so.

Employer checks or social media, it could be potentially be for, well, finding out what people think

about their company potential grievances people have with the company in this case.

KFC worker fired after Facebook show photos show her looking potatoes and also the person that took

the photo, so doing some investigation potentially could lead to this.

I'm sure some like this would quickly hit the news and come up in their radar anyways.

But being proactive, a company doing an investigation, runny nose and searches on a periodic or regular

basis may potentially get a hold of this before it actually gets out and damages her reputation.

So again, employers may use those in to monitor social media activities related to their company and

or its employees, for example.

It can also be used for, say, dating sites like Tinder or any number of online dating services.

And this can be for in this in this representation, it's a woman sort of going on online dating, and

of course, it can be anyone but individual may use open to verify the individuals who are considered

going on a date.

With that, they're accurately representing themselves.

Again, people being online tend to, well, exaggerate sometimes or flat out lie.

And when it comes to online dating, they can be especially dangerous.

Unfortunately, more so for women.

So again, a woman may use it to if they see someone that that there seem to be getting along with,

they might use those and actually dig deeper into this purse and find out will they say they work here

and they and they have a home and in this and that and it does he know something maybe potentially dig

through and go, well, OK.

And our photos fake.

They use some stock photo.

Oh, that's not really them.

That's not really the location that they say they're coming from.

Or they may have a criminal background that they denied.

Things like that it could help protect a person from potentially potential.

Well, we could say fraud or misrepresentation of themselves.

Now, law enforcement or network admins could potentially use those to go after a malicious hacker.

So who can help track down malicious hackers a compromised network or try to compromise the network

again by taking the information such as wherever they have email address, a IP address, whatnot?

They could potentially use that to trace back to whoever attacked their network or again attempted to

protect their network.

So these are all different things that.

That also could be used for essentially what Osama is.