Tag: OSINT

Don’t forget Hashtags!

Have you used hashtags in your online investigations? What is the first thing that comes to your mind when you hear the word hashtag or see the symbol (#)? Do you think of Twitter? Or maybe Instagram, LinkedIn, or even Facebook? Social media users notice hashtags within posts. Some users follow hashtags. Some create them for political purposes. Others use them to track an event or even to make a point. Millions of hashtags are used in Twitter alone each day.

What Makes Up a Hashtag?

A hashtag is simply a keyword phrase, spelled out without spaces, with a pound sign (#) in front of it. Wikipedia calls it a type of metadata tag used on social networks. Looking for the sale of a certain drug in social media? Search the hashtag. Be sure to gather the street names the drug uses, so you get a full picture.

How else can this be used in your investigations? If you are working a high profile criminal case you will want to include this in your research. I would recommend starting in Twitter. If you find a fair amount of information there, I recommend using Tweet Deck and build yourself a dashboard. This will allow you to keep track of any developments using relative hashtags in real time.

Once you have located some good hashtags related to your case, cross reference them in other platforms. Not only will it potentially produce some good information (who, what, where and why), it may also allow you to search photos attached to the post for other possible clues.

Case Study: Hashtag Led to Username

A recent scan we conducted on a person of interest came up empty. Using multiple software platforms as well as good old-fashioned hunting, led to nothing. While searching, we found an important hashtag. By researching the hashtag in each social media platform, we located our person of interest. The username was such, that is just didn’t get picked up by any software platform. It was a very unique variance of this individual’s real name. From there we found a very public profile of the subject.

It is just another example of using hashtags in online research.

Hashtags to Try for Investigations

Take a look at some interesting hashtags next time you are in Twitter. One of the best is #breakingnews. This hashtag can quickly bring you up to speed on news breaking in the moment.

There are so many more, as the photo below showcases.

Photo: https://ritetag.com/

Employees’ Rights & Social Media

Employees and social media have been a sore spot for employers over the years. Back in the early years of social media, many employers were concerned about the amount of time employees spent in social media during an average work day. Their concerns centered around productivity, rather than what the employees were posting about.

Fast forward to 2020, and we have an entirely new set of problems. During the COVID-19 pandemic, essential worker’s were posting all over social media about their work conditions and at that time lack of PPE. Everyone knows that if you want to get your concerns noticed, turn to social media. It has become one of the most effective ways in which to communicate today on a large scale. If you are lucky, you will be picked up by the news media and your story will become national news.

Social Media and The Whistle Blower

Erin Marie Olszewski is a Nurse-turned-investigative journalist, who has spent the last few months on the frontlines of the coronavirus pandemic, on the inside in two radically different settings. Two hospitals. One private, the other public. One in Florida, the other in New York.

As you can imagine, if you know her story, she has been scrutinized in the media. Some applaud her courage while others try to rip apart her story. So we wondered, who is Erin Olszewski and what does her social media story look like?

We conducted a deep web scan on Erin. Surprisingly, some of her prior “life” was still up for anyone to discover. The deep web scan revealed, as they many times they do, a story of who Erin is and what she has been involved with leading up to her fame.

You can view her entire deep web scan here. (Erin Olszewski) Taking a look at an employee’s online, publicly available, social media content, provides a story board of the person’s life to date. It can reveal a lot about a person, good and bad. In Erin’s case, one is left with the impression that she can be a bit of a rebel rouser. It also shows however, that she is also someone who stands up for what she believes in and isn’t afraid of the consequences.

Can an Employee Get Fired?

This is the new million dollar question. The short answer is, it depends. We did a little research and found the following as a place to start.

  • Some states and localities may have different laws or additional laws.
  • Federal Laws: First Amendment: Free Speech. Doesn’t state that employees or individuals can say whatever they want wherever they want without consequence.
  • According to the National Labor Relations Act: An employee’s comments on social media are generally not protected if they are mere gripes not made in relation to group activity among employees.

NLRA Board Decisions

In the fall of 2012, the Board began to issue decisions in cases involving discipline for social media postings. Board decisions are significant because they establish precedent in novel cases such as these.

*In the first such decision, issued on September 28, 2012, the Board found that the firing of a BMW salesman for photos and comments posted to his Facebook page did not violate federal labor law. The question came down to whether the salesman was fired exclusively for posting photos of an embarrassing accident at an adjacent Land Rover dealership, which did not involve fellow employees, or for posting mocking comments and photos with co-workers about serving hot dogs at a luxury BMW car event. Both sets of photos were posted to Facebook on the same day; a week later, the salesman was fired. The Board agreed with the Administrative Law Judge that the salesman was fired solely for the photos he posted of a Land Rover incident, which was not concerted activity and so was not protected.

*National Labor Relations Act’s website.

In the end, companies of all sizes should have a written social media policy in place. As an added precaution, lawyers have advised social media to be added to any anti- harassment policy as well.

If you are lucky, you will go viral, get picked up by a news outlet, and your story will become national news. Just like what happened with Erin Marie Olszewski.

Using Reverse Image in Your OSINT Research

When conducting OSINT research, don’t forget image searches, as they can reveal quite a bit. We have all heard the saying, ” A picture is worth a thousand words.” We understand its meaning and know it to be very true. However, when it comes to OSINT research, sometimes what is in the background of a picture is worth a million words!

A recent Netflix show comes to mind as I write this blog post. Have you seen The Tiger King yet? Some people can watch it, while others I have heard just can’t get through the series. At any rate, one thing I recall very well is how several social media posts worked in the favor of an investigation to find the fugitives who were on the run. The main character (who was on the run) and his husband posted many social media photos trying to make it look like they were in Mexico. Upon further attention, it was noticed that the background of the images made it very clear that they were indeed in Florida. Certain identifying clues led law enforcement to their exact location.

The more photos found when using OSINT research the better. Bing has an excellent built in option.

Bing’s Reverse Images

  1. Bing: Bing search engine has an image search that allows an upload of an image in the same way Google Image Search does. Below you will see what is produced when we uploaded the image on the left. All the images on the right are instantly populated.
Bing Reverse Image how to
Normal image search reveals a good amount of results.

If nothing comes up, try the cropping the image using the “visual search”. Let’s say we want to focus on one area of the image. The visual search allows you to crop the image in a way that may reveal different results.

Bing Visual Image as an additional search method.
Visual Image

You can see the difference between the two. This can be very helpful when you have a picture of someone in a public place. You may not be able to pinpoint exactly where they are. Using this Bing feature may produce more photos with an exact location.

Pinterest Image Search

  • Log into your Pinterest account.
  • Click on any pin in your home feed (or on any profile or board).
  • Click the icon in the bottom-right corner of the pinned image.
How Pinterest does search of photos
From Search Engine Journal

Simply click on the visual search icon, you can see everything else in Pinterest that is similar.

Instagram Has Over 95 Million Photos Uploaded Daily.

One of our recent blog posts discussed just how many photos are in the social media platform and how it can be used in investigation. In fact, we were recently able to help a client by identifying a person was at Walt Disney when they were trying to locate him to serve papers. It can be quite valuable!

Facial Recognition Apps

In the near future, facial recognition apps may be more readily available. Especially if companies like Clear AI has anything to say about it. An app that lets you identify anyone from a photo, and it is currently being used by law enforcement. Their mission, as stated on their website is:

Clearview AI is a new research tool used by law enforcement agencies to identify perpetrators and victims of crimes.

Clearview AI’s technology has helped law enforcement track down hundreds of at-large criminals, including pedophiles, terrorists and sex traffickers. It is also used to help exonerate the innocent and identify the victims of crimes including child sex abuse and financial fraud.

Using Clearview AI, law enforcement is able to catch the most dangerous criminals, solve the toughest cold cases and make communities safer, especially the most vulnerable among us.

What trick of the trade do you use?

OSINT Research: The Devil’s in the Details

For those unfamiliar with the term OSINT Research, it is explained this way by Wikipedia

Open Source Intelligence (OSINT) is the collection and analysis of information that is gathered from public, or open, sources.[2] OSINT is primarily used in national security, law enforcement, and business intelligence functions and is of value to analysts who use non-sensitive intelligence in answering classified, unclassified, or proprietary intelligence requirements across the previous intelligence disciplines.

OSINT sources can be divided up into six different categories of information flow

Open Source Intelligence

OSINT Resources Reveal the Details From the Deep Web

Many times our clients want to better understand the difference between a social media scan and a deep web scan. Taking a close look at the image above explains a lot and kind of surprises most people in terms of the data on the web that is openly available.

eChatter Case Study Examples of Deep Web Details

  • Recently, we were trying to find out whether a POI (person of interest) was married. He had no Facebook clues other than he was in a relationship. After conducting a deep web scan we found a local newspaper article in which he was named along with “his wife”. The wife chose to keep her maiden name.
  • A deep scan was ordered by a client to determine what happened to a deceased person’s body. We found an association letter that was published online indicating the person was cremated and buried at sea.
  • A client needed to know if their POI had any business affiliations that wasn’t disclosed in a divorce settlement. After a deep scan was conducted, we located quite a few businesses tied to the POI.

Does it always work out this way? Not at all. Mainly because some people are much better at hiding this than others or because they were advised to delete everything online by advice of counsel. However, these are the kind of details OSINT research is all about. You will not find this in a Google search.

Corporate Use of Open Source Intelligence

Corporate responsibility and risk management for any corporation goes well beyond what happens within the walls of everyday business. A very overlooked practice for companies of all sizes is digital research on their unique business and industry. With the rise of user generated content and social media, reputation management takes on an entirely new level in 2018.  In comes OSINT, or, Open Source Intelligence (the collection and analysis of publicly available data in an intelligence context).

Frank Figliuzzi, Chief Operating Officer of ETS Risk Management, Inc., which consults with global clients on intelligence analysis, insider threat, and investigations puts it this way:

 

“Increasingly, security leaders systematically incorporate OSINT analysis from proven experts not only to get results, but because it is has become the new professional standard in the industry.”

 

Of course with the EU Privacy law in effect, hiring an expert in this area is key to be sure your firm is in compliance.  With the digital universe doubling in size every two years, the time is now to be sure your business has a plan in place. Archiving and preserving  your own online data may be beneficial down the road as well. Lawsuits pop up all the time, and having this data collection secured may help your case. In fact, many corporate attorneys are now insisting on this type of data capture for their clients.

 

Pew Research updated the stats on the U.S. consumption of social media sites online or on their cellphone. 

 

Pew Research and OSINT