Join us for the FREE Cyber Defense Forum | Live Online on October 9

Open-Source Intelligence Summit

Alexandria, VA | Tue, Feb 18 - Mon, Feb 24, 2020
This event is over,
but there are more training opportunities.

Moving Past Just Googling It: Harvesting and Using OSINT

  • Micah Hoffman
  • Thursday, February 20th, 7:15pm - 8:15pm

Every single day we use search engines to look for things on the internet. Defenders research a domain or IP that contains malware. Attackers look for email addresses for an upcoming phishing campaign. DFIR people examine locations and usernames that they acquired from a subject's computer. Policy and compliance people examine the risk that employees in their organizations might bring to work. Recruiters scour the internet looking for candidates. And "normal people" shop, date, geolocate, post, tweet, and otherwise send a huge amount of data to the public internet.

While search engines harvest, store, and index billions of web site data points every day, there is much they do not contain. These pieces of OSINT data can, when put in perspective and analyzed, reveal target geolocations, friends and associates, alcohol consumption, user passwords, and more. This talk will be a series of hands on, live demos where we put our OSINT skills to work in unconventional places to harvest this unindexed OSINT data.

Using free web sites, built in web browser tools, and free python scripts, Micah will show attendees how to harvest data from social media applications, the "whois" system, and from breach data that will not appear in search engine results. Students will gain a better understanding of JSON, APIs, reverse whois, and how to run python tools.

Come join Micah as he examines how to move beyond "Googling it" in your personal and professional lives.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Lunch & Learn: Short presentations given during the lunch break.
Tuesday, February 18
Session Speaker Time Type
Using Skopenow to Automate OSINT Practices Robert Douglas, CEO Tuesday, February 18th, 12:10pm - 1:30pm Lunch and Learn
OSINT Summit Reception Tuesday, February 18th, 5:15pm - 7:15pm Reception
Wednesday, February 19
Session Speaker Time Type
Living Off the Land: Red Team Survival Tactics Alissa Torres Wednesday, February 19th, 6:15pm - 7:15pm SANS@Night
You don't know HIPAA! Doc Blackburn Wednesday, February 19th, 7:15pm - 8:15pm SANS@Night
Thursday, February 20
Session Speaker Time Type
Moving Past Just Googling It: Harvesting and Using OSINT Micah Hoffman Thursday, February 20th, 7:15pm - 8:15pm SANS@Night