OsInt Opensource Intelligence
Atif Ali, Muhammad Qasim · 2023
The focus of this chapter was on dark web open-source intelligence. There are examples of open-source intelligence’s utility in the real world and its definition. The chapter then moved on to security intelligence and how the dark web can collect threat data. A slew of new businesses has sprung up to collect dark web security intelligence and alert their clients when something interesting happens. We’ve talked about how security intelligence works throughout this chapter. Hacking services, exploits and vulnerabilities for sale, intellectual property theft, financial data theft, theft of personally identifiable information (PII), and phishing campaigns for sale are just a few examples. In terms of their importance, these topics have already been discussed. This is usually where you’ll find useful information about potential threats. There is a lot of information regarding current and forthcoming threats that organizations must be aware of while selling hacking-asa-service. Organizations can exploit stolen IP, financial data, or PII to prevent further harm. Rarely can corporations prevent the sale of stolen data…. The amount of information obtained regarding the phishing scam is increasing. Phishers use phishing techniques such as cloned emails and websites. The main challenges of gathering security intelligence were discussed in this chapter. A free and open-source intelligence gathering and analysis tool has been featured in this article. For example, there are five different tools mentioned in the chapter: Google Dorking, Maltego, Recon-Ng, the Harvester, and Shodan. Open-source intelligence-gathering search engines like Shodan and Google Dorking Each of the five tools have been explained in detail. We’ve provided advanced Google Dorking queries as proof of concept, which can be used to uncover private information. The chapter comes to a close with a discussion of open-source intelligence data collection. There have been different areas identified where data can be collected. Chat rooms, direct conversations, market listings, and search queries are examples of this type of communication. Each of these data collection methods has been discussed in detail. Additionally, the difficulties that can arise when collecting open-source data were discussed. When there is a lack of language competence, access to a trusted environment, and resource limits, determine actionable intelligence. The chapter advises leaving data collection to professionals familiar with the dark web and actual threat actors.