OSINT for Proactive Defense
summary
Covers using Open Source Intelligence (OSINT) tools and techniques for defensive security: discovering and continuously monitoring internet-facing assets (domains, cloud storage, code repos, Certificate Transparency), finding sensitive data leaks and breached passwords, running periodic attack simulations with OSINT data, and using SOCMint for proactive incident identification. Targets blue teams and practical perimeter-security use cases with concrete TTPs for monitoring the surface and dark web.
AI-written summary · about
chapters (14)
- 0:00Start
- 1:50What is OSINT?
- 2:14Why OSINT?
- 4:19Why Security Teams should worry about OSINT?
- 7:12What is an Asset?
- 12:24Project Sonar
- 13:38Subdomains
- 16:55Cloud Storage Objects
- 18:05Custom Python Script
- 18:23Leaked Creds
- 21:36Social Media Monitoring
- 23:15Identifying Relationships between Domains
- 24:12Periodic Attack Simulation
- 25:36OSINT Countermeasures
related talks
17mOSINT: The Art of Finding What Shouldn't Be Found
29mOSINT: A Practical Guide to Safe and Effective Threat Investigation.
15mOSINT: The Art of Finding What Shouldn't Be Found
43mOpen Source Intelligence Based Intrusion Detection System
17mOSINT to Compromise
27mUnderstanding the Threats to Intelligently Defend
33mFree SOC? — how open source tools can come to our aid
01h 27mOpen Data (OSINT) and Threat Intelligence Sharing Platforms and Tools