Stay up to date with tradecraft tips and industry news. Our monthly edition is a curation of our weekly #OSINTNewsletter content. Free for everyone. Published every month.

https://osintjobs.substack.com/p/monthly-osint-round-up-november-2024

PS: stay tuned for our year in review ;)

The fifth iteration of the Layer 8 Conference is back! It's happening Saturday, June 14 in Boston. OSINT is a primary focus of this conference, has its own track and is being keynoted by Rae Baker. Tickets are only $50 and include lunch!

More info at https://layer8conference.com

I'm investigating threat actors who rely on onion sites and I've had difficulty unearthing most of my leads. IntelX is the only sources I've found with good data. I believe I recall seeing ads for services that allow you to search through dark web forums and sites like dread but I can't recall the name.

Also, not exactly osint, but if anyone knows where I might finds archival torrents or similar sources that'd help a lot. I've found a torrent that archives /r/darknetmarkets but have yet to see any peers seed it.

Some leads go back 10+ years, I feel the only chance of uncovering anything that might lead to something valuable would be found in data at least this old. Any ideas?

Context: I have lots of dates (over 1000), with associated l activities and targets. I’ve already taken the time to assemble in excel, but am looking for something to now analyse and visualise. What does everyone use for this? Thank you. Mod: I’ve searched the archives, but found nothing of great use.

Have tried the usual search operators to no avail. Any search suggestions would be appreciated.

Hey everyone,
I just finished the free 4.5-hour OSINT course by Heath Adams on YouTube, and it was awesome—I learned a lot from it. Now I’m considering getting the full version on TCM’s website, which adds more content and comes with a certificate of completion.

Here’s what I’m wondering: is the paid part worth the money? Does it actually dive into advanced or practical stuff I’d miss out on, or is it more like an extended version of what’s already on YouTube? And about the certificate—does it hold any real value professionally, or is it just a nice extra for motivation?

If anyone’s done the full course or has experience with TCM’s paid content, I’d love to hear your thoughts. Thanks in advance!

It's nothing serious, I was talking with a friend about something connected and we got to this point.

I'm pretty good at geolocation (or idk finding stuff online) manually, even more since in this case it's not something complicated but it takes a lot of work.

Let's have this situation: a friend writes his thesis on 20th century abandoned manors or palaces in an area of my country. He needs to make a list of them and then check up to see their present situation, if they are abandoned and in what shape (and he asked for my help since urban exploration is my hobby so I already do this).

The thing is that I research locations one at the time and I don't need to make a huge search like he needs to. And yes, simply searching on google does the trick but it takes a while since there are hundreds.

His teacher said something about automatising it, creating a program to make a list with details and links. No idea if this is possible and how it would work. I'm not looking for someone to do the job or anything like that, I just want to know if it's possible and how hard it would be. Maybe something like web crawlers without indexing or downloading things.

And I apologise if this sounds really stupid, but here's what I think we'll need to do:

1. Make multiple searches on google using some key words to find a list of locations/names.

2. Find the results and list them with some details (name, location, source link maybe).

3. Export those results in excel, I guess

We're talking about dozens or maybe hundreds of places.

Is this possible?

Edit: I found out it's web scraping, but that looks like it takes the info from a single site and I need something similar but from the web

Hi- I’ve used Spiderfoot CE for a while and am looking to upgrade to HX but cannot figure out how for the life of me. The login page has a button that says Click Here to Register but it’s just a redirect to the Intel471 website and the only option there is to submit a request for a consult.

They never call, text or email. Has anyone else encountered this. If so then how did you resolve it?

I am Canadian and I was wondering there were other Canadians on this subreddit who would be willing to exchange about OSINT in Canada. It can be about tools, techniques or share ideas on our projects. Of course, in english and french.

Hello. I'd would like to get insights about how difficult OSINT is, especially when it comes to collecting informations about someone. I never know whether an information is actually hard to find, or am I just not skilled enough. Is it always possible to find precious informations about someone ? If you find nothing, then what do you do, give up? Thank you.

I do some work with a large-ish funeral company. They often have deceased people with no family (often homeless or estranged for whatever reason), and have to go through a process to try and find their next of kin. They are sharing a single Been Verified account with their employees and want to move to something that feels more legit and allows for multiple users. Every alternative I find looks shady or does not meet the business needs...

1. Allows for multiple logins on an account so they don't have to share credentials
2. Disallows the user from making changes on the account (admin vs user permissions)
3. Is a business focused service that isn't trying to shove BS services in their face on every page load
4. MFA would be nice...

I do want to stick with a paid service for them. Training OSINT techniques is not something they are interested in. Does anyone have any specific recommendations for a service that would be a better fit for them?

Is OSINT in Europe harder than in the USA? Because we have stricter privacy EU laws regarding police stuff etc. or am i just being dumb and ignorant here? I'm kinda new to OSINT so.

[ES]
Hola, soy de Chile, y hace un tiempo hice a medias una herramienta para buscar casos legales relacionados con un sospechoso utilizando un sitio de código abierto y algo de código para automatizar.
El proyecto quedó en pausa desde entonces, pero si alguien quiere usar el código, siéntase libre de hacerlo.

El proyecto es para sospechosos de chile.

[EN]
Hi, I'm from Chile, and sometime ago I half made a tool to search for legal cases regarding a suspect using an open source site plus some code for automatization.

The project since then has been put to rest but if any of you wants to use the code feel free to use it.

The project only works for Chilean suspects.

https://github.com/MrMisterGD/scraping_pjud

I'm looking for recommendations on the best leak search APIs available for online investigations and cybersecurity purposes. As someone diving deeper into this area, I've come across a few options, and I'd love to hear your experiences or insights about these (or any others I may have missed). Here’s a quick rundown of the ones I know:

1. LeakOSINT
   • A straightforward tool for querying leaked data via API.
   • Offers a solid set of features for searching emails, usernames, and domains.
   • Anyone have feedback on its reliability and coverage compared to others?
2. LeakCheck
   • Claims to have over 9 billion leaked records indexed.
   • Supports searches by email, username, keyword, or domain.
   • They also offer a Telegram bot, which seems handy. How does it perform in bulk checks?
3. Snusbase
   • Often praised for its fast API response and clean UI.
   • Searches emails, usernames, phone numbers, and IPs.
   • Do you think their database size is competitive with others?
4. DeHashed
   • Known for its broad search parameters, including IPs and VINs (vehicle identification numbers).
   • Offers advanced filtering options and API integration.
   • Is it worth the premium pricing for OSINT projects?
5. IntelX
   • Broad OSINT platform with breach data, paste monitoring, and dark web scraping.
   • Anyone using their API for leak searches?

Each of these has unique strengths, but I’m trying to figure out which one is the most reliable, has the best API performance, and provides the largest and most up-to-date database for serious investigations.

Would love to hear your thoughts! What do you use and why?

I'm looking for an app for collecting info that I gather about people. It would be good if it had folder option or something like that so I could differ two groups together. It needs to be safe and private.

Is there a way too see old instagram username instead of “this person changed their username X amount of times”. Any ideas, examples, advise would be helpful

Is there a website where I can input an email address preferably free if I can. And it show me the x.com/twitter/who gives sh!t whats even called now, profile linked to that email address? Sorry ive been up for over 60 hours and my brain is likley liquid by now and dont make a ton of sense 🥴

Thanks 🤙

A few years ago, Google removed options as usual. These included the option to click on the dots in the chat from the YouTube livestream to check up the profile from a User's comment.

Is there a way to check up a profile of one?

Unfortunately, this procedure does not work: https://www.reddit.com/r/youtube/comments/i88qvd/cant_click_to_go_to_a_channel_from_stream_chat/

Hey guys, I was wondering if anyone knew of any good Australian OSINT resources. I have a few good ones but I was hoping to learn of some new ones.

As in the subject... Looking for communities,, especially active and experienced communitiew that are willing to share their knowledge and tools. Plus, for some things, Reddit is nice, but somewhat to open.

Thanks!

I have recently become interested in identifying and exposing accounts that are created for psy ops/influence operations. I use «bots» because these are sockpuppet accounts that just spew out inflammatory news and opinions, but few seem to be completely autonomous bots.

With this post I want to ask of anyone has found good ways to identify these bots, especially here on reddit. What I have so far is:

1. Created short time ago
2. Spent some time farming easy carma through low effort posts like posting AI-created images related to different subreddits.
3. Posts 5-10 posts in a subreddit each day for a few days in a row (clustered like it is a work day)
4. Most posts are copy pasted text and links from Twitter and even supplemented with related comments from twitter that has a lot of likes.
5. 10-20 comments/interactions related to their own posts each day with low effort responses, but likely made by a person (That also speaks the language of the community - in my case Norwegian)

Does anyone have other thoughts and experience on how to identify these «bots»?

I’m trying to find a group of people to join to help locating news or providing context, etc mostly for social media use. I don’t see this anywhere in France whereas it does happen a lot in english speaking countries. Do you know to whom I could volonteer ?

Hi everyone,

I’m a freelance investigative journalist working on a how-to piece aimed at helping journalists with disabilities make the most of OSINT (Open Source Intelligence). I’d love to hear your insights, especially if you’re an OSINT practitioner living with a disability—broadly defined.

For instance, I’ve heard from people with ADHD about how OSINT aligns well with their detail-oriented and curiosity-driven mindsets, bringing a sense of accomplishment. OSINT is also transforming investigative work by enabling remote access, which can open up opportunities for exposing human rights violations and more. Would you agree with them?

How does OSINT fit into your work? Do you find it empowering in some ways or frustrating in others? I'd love to hear what you think! Please feel free to share them in the comments, or message me directly if you're open to a conversation in any encrypted channel or whatever works for you.

Suggestions for OSINT tools to introduce to disabled journalists are also welcome!

Thank you all for supporting efforts to make investigative journalism more accessible.

Hello,

I am searching some help about a problem I have. I have a part of a picture, I know the website where the full picture is, but I didn't find a tool to search where my extract is located in the website.

There is the path of the solution I would like to find :

I give the part of the picture to the program/website/code.
I give the URL of the website or if it's in my computer, the path of the folder.
The thing will search in all folders, subfolders, links, sublinks, etc ... A picture with some similarities with the extract of my picture.
It will give the URL or the path to find the original picture.

I will try to make a scheme to show you the thing, because I am really bad to explain what I want.

I wish you a wonderful day and thank you so much for your help !

P.S.: I already searched a solution with google, GitHub, and ChatGPT, I didn't find anything.

https://preview.redd.it/vr5vg1ge4v1e1.png?width=1000&format=png&auto=webp&s=1621caaffa3032e97a757c1695d7916beb7eaada

Proposing to my work soon to send me to an OSINT certification course. I was looking at SANS GIAC Open Source Intelligence (GOSI) ($8,780) and IntelTechniques Open Source Intelligence Professional (OSIP) ($1,000). There’s a huge price difference but I was curious if anyone had any insight on what’s a well respected OSINT Cert, what’s worth the money, etc.

I'm looking for an old video and the official search is a complete joke. Are there any 3rd party searchers? Using google with site:twitter.com or x.com isn't helping.