DEF CON 32 - Physical OSINT - Lukas McCullough
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 15:44
This presentation provides an overview of Open Source Intelligence (OSINT), explaining what it is, how it's used, and demonstrating practical tools and techniques for gathering publicly available information.
Key Takeaways:
• OSINT involves collecting information from publicly accessible sources without hacking or paying for access 0:22
• Social media is a primary OSINT resource, allowing investigators to piece together personal information from multiple platforms 1:26
• Key OSINT tools include Maltego for data correlation, Shodan for server information, and Wigle.net for Wi-Fi network mapping 2:30
• Google Dorking can reveal sensitive documents like floor plans and contracts by using advanced search operators 5:16
• OSINT investigations often combine multiple data sources, including images, reviews, and physical location details to build comprehensive intelligence 8:22
The presentation demonstrates how OSINT can be applied for both security research and social engineering, highlighting the importance of being aware of what information is publicly available.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hello hello so I have just about a minute till I start but uh I'll get started now good morning everyone uh hope you had a good Saturday night some parties and stuff so just a little bit of background on me uh I'm from physical security Village my name is Lucas I'm a grad student at bu uh cyber security and criminal justice major so I'm just going to go over a little bit of what is ENT so osen is really anything on the internet that you know can be classified as you know usable right uh as long as you don't have to break into anything or pay for it uh because I'm a broke college student um you know that is what I consider open source intelligence um so you know don't not hacking into anything etc etc so where you can apply the information right uh there's tons of organizations that use ope…