Intelligence Sources

  • Cyber Security Intelligence: How secure are we?

  • Cyber Threat Intelligence: How threatening is the world outside?

  • Intelligence Sources:

    • Narrative sources

    • Threat feeds

  • Historical/Trend Analysis

  • Reconnaissance

    • What could a potential attacker find out about us?

    • Where would they look?

      • Open Source (OSINT)

        • The WWW

        • Dedicated tools

        • Feeds (free)

      • Closed source

    • Whois and DNS

      • whois

      • nslookup

      • dig

      • host

      • zone transfer

    • OSINT Dedicated Tools

    • FOCA - Document Metadata

    • The Harvester tool in Kali Linux

    • Shodan - Search engine for internet things

    • Maltego - OSINT for relationships

    • recon-ng - python tool

    • Census - Device search engine like shodan

    • Website rippers - clone websites to local machine

    • Google

      • "exact match"

      • -exclude

      • this AND that (or is implied)

      • filetype:

      • allintitle:

      • allinurl:

      • Google hacking database

    • Confidence levels

      • Timeliness

      • Relevancy

      • Accuracy

      • Fake news?

      • Admiralty System - method for evaluating reliability

Last updated