Modern OSINT Investigations: From Website Analysis to AI-Powered Threat Intelligence

In this session, SANS instructors Matt Edmondson and Ngô Minh Hiếu (Hiếu PC), CEO of ChongLuaDao, will demonstrate how modern OSINT techniques and AI-powered workflows are transforming cyber investigations. Through real-world examples of fake news websites, scam infrastructure, and suspicious domains, you'll learn practical methods for analyzing WHOIS records, historical DNS, certificate transparency logs, hosting infrastructure, page structures, and other digital artifacts to uncover hidden connections.

The session will also explore how AI can automate repetitive investigation tasks while maintaining accuracy through source attribution, verification, confidence scoring, and operational security (OPSEC). Whether you're new to OSINT or an experienced investigator, you'll leave with practical techniques, reusable workflows, and actionable playbooks that you can immediately apply to your own threat intelligence and digital investigations.