DAY 1  - Digital hygiene and tradecraft, best practice, understanding and tricking the networks. 

Monday 12TH  OCT

09:00 EST

Tradecraft Covert (non attribution) and non-identifying search methods.

Deep searching and analysis. Alternative tool and site searching. footprint reduction and incognito browsing. Non identifying profile creation using virtual mobiles and emails to allow registration. OSINT legend building. Tricking the social networking sites into giving us access to data. viewing and monitoring of closed accounts. 

​

Deep searching of links and connections into a website; common or accessed sites sharing the same server space. Identifying IP and owners of sites and upload location. Possible server vulnerabilities and exploits.

Alternative sources of data sets relating to subjects. ±How and where we can find social network data without approaching the site directly.

Network infrastructure and identifying flaws. 

​

Considerations regarding Intercept , Privacy and AP. Also cover the transition to evidence from intel online, Business data without applying for it, and identifying company interests and ownership which were not available or known. Impact of GDPR and DPA.

​

DAY 2. - Deep open sourcing. covert , safe and secure searching. Best tools practice and use. 

Tuesday 13TH OCT

09:00 EST

Open source investigation is not a simple task anymore.  This module will enable the delegate to stay ahead of the curve, and is intended for the internet cybercrime investigator and researcher, in order to take them from the basic researcher who understands the basics of internet investigation, to advanced open source researcher, able and proficient in providing high quality reports and evidence relating to online investigations and intelligence.

Analysing and understanding data sets and integrating them in other software such as I2

​

Topics include clever searching, best tools use ( over 300), Boolean equations, automated multi search tools, auto monitoring , historic and deleted data . Walkthrough and live exercises in finding and harvesting deep embedded open source data. Auto scrapers, Understanding the target. Multi lingual searches. Understanding and using social engineering against servers and targets to obtain best results. OSINT and SOCMINT correlation and best tools

​

Identifying which sites are used by the target quickly, then interrogation of the sites by searching the data not by using the site. Links between targets on the same and different SN sites. Direct and historic chats between multiple profiles to prove association and analysis.

​

DAY 3 - Image tracking, tracing image sources . Digitally profiling targets and geolocation through SN

Wednesday 14th OCT

09:00 EST

Images, Exif and meta tabs

Tracking duplicates, sources uploading, meta data and exif data interrogation and identifiers to establish device, location, source and tracking. Hashing and searching for sharing and uploading Significant images. Providing sufficient data and intel to support dissemination to active teams and support warrants .

Identifying which SN sites are used by the target quickly , then interrogation of the sites by searching the data not by using the site. Links between targets on the same and different SN sites. Direct and historic chats between multiple profiles to prove association and analysis. Analysis online of a subjects location when uploading / tweeting/ blogging AND the identity and location of the people in their online group. API harvesting 

Tracing historic and deleted data and images. 

Identifying targets by their device movement and location. Identifying public wifi spots used and interrogation. Tracking and identifying devices on the internet and their speed direction and use by the target.

Includes vehicle telematics, association, speed, data sources and non-visual surveillance. Identifying buildings/ locations (public and private) that the device uses and frequents.

Identifying target human behaviour through online posts, and using that to identify commute routes, workplace, home location and associates

DAY 4  - Dark web, crypto tracking, money laundering. Maltego as an investigation tool

Thursday 

15th  OCT

09:00 EST

Do you do investigations involving bitcoin? Need to understand how to track the funds through various Cryptocurrencies? How do wallets work and is there any evidence I can use when I find one? This session will provide you with the ability to understand and deal with Bitcoin and other cryptocurrencies during you investigations. Identifying and locating transactions. Disrupting channels and transactions

Darkweb investigations

Understanding the environment of Tor. Methods to track and identify users on Tor. Public key exploitation to identify users.

​

Identifying organised criminal activity online and disrupting/ infiltrating.

​

Identifying paedophile use of the system and chasing the user down.

​

Maltego training for best use as an investigation tool

​

​