OSINT for Fun & Games

uh my name is brian martin for those of you that don't know me already for those of you who know attrition not that brian martin oh we do know each other not that guy he's scary um i own politico which used to be known as digital trust we got soon had to change the name now we have this cool logo uh it doesn't really matter but that's the name change in case you're wondering what's going to happen there we're a forensics company we deal primarily with litigation which makes the topic all the more funny because we're used to dealing with eeoc and medical malpractice and people like osn how does that factor into everything oh i said he's in everything

osn is open source intelligence if you didn't already know which would be surprising but the stuff is your everywhere anybody red team nobody's red team okay red team uses this stuff constantly it's stage one of your attack right go out get as much information as you can about the company figure out where the computers are what the names are what continuous are blah blah blah everything that you can get from the outside without alerting them to your activities blue team uses it too kind of in reverse because attack and they want to know more about it put together different bits of information to figure out so this stuff shows up everywhere we use it in putting together profiles about the

people involved in the lawsuits

we may want to know more about an expert on the other side we may want to know more about who is involved in the lawsuits on the other side as a way to gain advantage because information is power my allergies are kicking my butt so if i can't breathe and i cough i'm fine i can get through it if i fall over by all means call somebody but it's just allergies usual disclaimers not a lawyer what else is there to say you can read the slide right don't use anything you learn here not because there's all that much to learn it's mostly about well you'll see as we go through everybody we're not going to teach you

how to hack the problem

can everybody hear me okay let's get back am i like miked up so we're gonna go through it in terms of almost like a history you start at the beginning it's been called slides on history stuff which is really cool stuff osn in case you don't know this stuff has been around forever since the first cave man crossed a ridge into the next valley and saw the next driving with they look better fit than we are i wonder what they're doing he took off on their hunting trails to figure out where the best sheep were or whatever anyways it's just knowledge it's just what sort of intelligence can i get my hands on to give me an advantage over the

competition uh we're gonna talk about aggregates all the stuff here on the list again one of the key things that i was liking about this was i'm going to tell you about employment opportunities but if you all have jobs it's going to be a little bit of value but take it back to your interns and say hey intern you're interested in this kind of stuff you can actually work in this field as a professional instead of just as a red team or where it's like a side piece of what you do on an everyday basis okay so what is it um oh i said specifically is the information that is available to us publicly it's stuff that

we can get our hands on in old school terminologies our newspapers our books our radio publications um broadcasts things like that as such historically osn was not as easy to deal with as it is to us today when we think of osu today we think of what can i google but in the traditional sense it's what can i glean information was from your local newspapers that are written in your local language they have your local idioms which means i have to have an intelligence apparatus so that i can have people that can understand your language well enough to be able to grasp and glean the information that's contained in those sources which that's why we have this right

and that's why we have the nsa this was a huge aspect of what they did they didn't really consider it osn as precise to them it was just intelligence osm came about fairly recent technology but the concept has always been there now we've got access to modern technology we've got radio traffic the internet everything that you guys can think of including business publications legal publications government publications um the stuff just goes on and on and on and the complexity of it is one of the things that makes it so much fun to deal with because it's almost like if you can get enough information sources you can know almost anything but getting them is the trip

and of course the social network besides how could i forget linkedin i'm sure we all get one or two hits a month from natasha what was the name of the profile on linkedin for all that was hitting everybody up robin sage sage okay um so what the intelligence collection occurs whenever we go and we phone information um the thing that separates modern osn and just os in general from traditional intelligence work is how hard you have to work to get it if it's legal for you to get it if it's easy if it's exposed it's open if it's not exposed that's traditional intelligence work you're stealing information the gray area is where things get interesting

if it's a closed linkedin group and you have to claim to be a cissp to gain admittance but you're not a cisco is it osa it depends on who you work for as to how they view that kind of stuff you're presenting a false front you are fraudulent in what you're doing um which makes it really easy as people who are skilled in certain dark arts and computers to find yourself in a place that you shouldn't be in because it was there and you wanted the information back in the day if you happen to access att computers using default passwords that were available in manuals that you found in the dumpster it's not osn right that's obviously what

we call hacking today but for crown allows default passwords um if you owned that system and accessed another system using that same truck still not always in but you're getting into this area where yeah it's common knowledge what happens when the information is exposed by somebody else for example ashley madison that's definitely not always it to begin with but once that database is out there and available you're still using criminal goods that are still obtained through criminal act so it's still not clearly osm but the stuff is out there to make for you to make use of whether it's legal or not lawyer lawyer but this stuff is out there now it's like saying i'm not going to include a password list

in my dictionary file because it was obtained illegally and stuck on paper the information is out there for you to use whether or not you use it depends on who you are and what you're doing but there are things that are coincident and there are things that are not and you need to understand the difference before you start making use of them in the public eye because it can land you in a lot of hot water

one of my favorites uh tools to use for this is polka anybody else like foca really of you this stuff is bomb it still works you point focus on a website and it just digs documents and then it grabs those documents that they were kind enough to put on the internet for you and it pulls out the metadata so you can point it at an organization and get a list of user ids and a list of network resources if you haven't played the focus

so what makes osun special is the things that you can do with it and this is where having a creative mindset and imagination the talent of this sort of stuff will pay off in spades using this information for gain is very easy well it's easy and it's on the one hand we don't know exactly how much osn is generating as a field right now but we know it's like upwards of five billion dollars a year who's our biggest user in this stuff anybody they're a little town south of here big roads and white buildings right the intelligence community specializes in lsat and you know companies coming companies go but this is a fantastic field to be in

in terms of opportunity you take the stuff you dig out of the internet like professor bob here and you put this stuff together and now you're in possession of a piece of information that's not plainly available professor bob is now going to work at the savannah research facility i'm into the intelligence community proper that's a potential asset for me to take if i'm if i'm at the savannah facility or work for the feds that's an asset i need to be watching but he is a piece of information to be traded by various interested parties

one of the things that comes up regularly in the intelligence community and this is a former military he's curious um his military changes a local newspaper that has a military base in their town will publish an article about housing going up for sale tracks of land being purchased by the military base but having some little piece of information that does not plainly say the fifth cavalry division is moving here but that's going to be the end result if you know that information ahead of time you can make moves based on that for example i could buy a property if i know the government's putting in an airstrip here i know they're going to need this land to buy that for

less money now than i can after they're already here i wouldn't have any reason why that's already here that's a commercial profit off of something the government's doing but if you're the russians and you find out that we're closing a nuclear facility that's important information we didn't come out and put it in usa today we're closing barksdale air force base but we may be moving parts of it little bits of information that show up in newspaper are regularly used that's why the intelligence community gets all of those papers from overseas and has translators to turn them into real information that goes into their computers which then they can't reach before we're better at that stuff so it's it's

about mining the information because if you're not going to get paid for this stuff it's not good right billions and billions of dollars is spent on this we're keys we can be really good at this stuff really effective and turn it into crazy for-profit companies that put out the beltway and make enormous amounts of money or we can sell it to commercial nutrition but this stuff isn't always spooky it's not always the government although they are the primary driver as i mentioned there are commercial interests lately in the last couple centuries with the growth of big business and this goes back to the expansion of the cold minimalism era british shipping interests um business competitors primarily in that

vein think pirates and stuff what's the best intelligence pirate can get the fact that the ship contains gold as opposed to wool you know if you're a pirate you hit a ship and you contain cool blankets you're like yay within the tropics there's gold and you're really having pirate that's intelligence pace spies classic intelligence or just get it through newspaper publications um what have you but the stuff has a commercial aspect to it um everybody's heard of industrial lesbians right we may not know what elon musk is going to make his next generation of batteries out of but if we know that he is going down to bolivia to talk to some people about land in the salt flats we can be pretty

sure that it's going to involve lithium and we can act on that information commercially we can block his move as a hostile company we can take advantage of it and intercede to try and gain some financial advantage from it it's hard to really explain without concrete examples which of course you can't get but classic intelligence is going into the hotel in paris and stealing the laptops of the ford executives during the auto show that's classic intelligence open source intelligence is looking at designs that they're showing in the car shows in ema looking at publications and extrapolating what the next model series is going to be about

there's actually stuff in the sun tzu the art of war about spies and intelligence so he goes back as far as we can think the last 20 years though well we'll get to that in the next slide you can use it for personal stuff checking on the backgrounds of the person you're dating yes about 20 years ago um or maybe a little less i used to hear the term data mining all the time how does the book sense differ from that are they does the name just changed they're similar functions um osn uses open intelligence like he wouldn't data mine newspapers he would data mine a google database of newspapers data mining is the technical process of

dealing with the databases but os hint is where are these databases what they contain are the actual newspapers databases it's the intelligence aspect of it which includes data mining but isn't necessarily data mining for example let's talk about an aggregate chip we'll come back to that later and see if we can clarify some more for you

and of course government and business are always tied um the intelligence gathering collection was mostly static i mean since the printing press up until the 60s there hadn't really been any improvements in the process you sent spies to get newspapers to do translations to put stuff together to steal data for the steel design cleaners traditional intelligence and then we got computers or i mean then we got the printing for us and we had that lead forward of instead of verbal observation or physical observation now we've got a printing press we can find the data out of that and as it's as technology has brought us forward in time the curve for os has gotten steeper and steeper and the

processing has gotten faster and better et cetera et cetera the last 20 years has seen an explosion of this stuff around the beltway companies popping up left and right to do this what's interesting about it is that it's sort of gone back a step our domestic enemies of a number of countries don't use technology to a great degree so you need native speakers to do this sort of open source intelligence people on the ground collecting the intelligence instead of just running the resource but it's still the same process it's still the same stuff now we've got more technology you can do amazing things with just the computers and the stuff that they give you for example focal montego all of the

tools that we use in terms of penetration testing and security work all contribute to this and we feed each other's discipline on a regular basis where we used to have to know the language for a while there it seemed like we wouldn't have to technology was going to be a great benefit to us oracle had translators head translators and then in the intelligence community they said yeah yeah you guys are doing a backup job you love all the lights but you're missing the final points of the discussion we need native speakers and that's really hard to do with computers because dialects change slang changes i mean just in the us alone the slang crosses youtube on monthly basis

chapters so how are you going to deal with gangs ms-13 coming up from south america talking about stuff on public forums for halo that involves drug trafficking if you can't manage the dialect so there's a certain encoding there that requires native speakers people who are traditional spy types but there's still room for the stuff for starters if it's in a chat room and you can collect it and then give it to that person they don't necessarily have to participate directly technology is wonderful

one of the downsides of the physical process of course that makes osn in particular the electronic so desirable is that physical assets are expensive they also have a shelf life they also have lifespan one of my relatives worked in one of the tlas and told me at one point that the lifespan of an undercover agent over in europe was approximately eight weeks it didn't mean you got killed or anything it just meant that they could use you for eight weeks and then they had to pull you out because now you're unknown person to the other side that's a lot of training a lot of effort to go through for eight weeks of work and then they

pull them back and put them in a language or someplace but still that's a lot of investment to get a week's collection out of an asset whereas always said we can all sit in our cubicles all day long get paid and no one's going to shoot us well actually that's quite true so the last 20 years have been insane we have no idea how it is because a lot of it's classified all we see these buildings going up around the beltway and we know they're doing intelligence we don't know what it is they won't talk about it the fact that 150 000 people with security clearances just doing slips it's very interesting i don't know what

they were in but the job market in intelligence was probably going to be a little hard to get into right now anyways so because of technology we have fewer local papers to read how many people had a newspaper in their town shut down i know i had a couple what remains now is primarily driven through electronics you'll probably have a skeleton stack remaining that doesn't local news but you've lost a lot of content um the obituary the quality and the obituaries the quality of the local announcements um a lot of stuff has gone downhill meaning that the technology has degraded that asset and it hasn't shifted to the web right it's just banished those feature articles on uh mary who was

peach cobbler just went away i mean she might blog about it now but there's not an asset at the newspaper running it now um there's the changes in the intelligence and in particular how osm works have been extensive during our lifetime one other interesting aspect of how technology has influenced this is that because we can do everything better faster cheaper the disinformation ability has gone through the frigate roof it used to be that disinformation was an inconvenience you had people that would come up to you and ask you if you knew who had killed kennedy or the moon landing was fake or some of the things that goes on like that that's disinformation it's not

purposeful disinformation except for the guy who's selling the book to you at the convention of nutjobs that tells you who killed kennedy but it's still disinformation but if you frequent twitter or you frequent facebook you see this stuff going by constantly boycott so and so write your congressman about so and so this guy's fake this guy's a fraud i don't want to get any specifics but we've seen politics and so on all of the political parties use this stuff constantly to try and discredit each other to try and blow up their own candidate they use these osn sources for political needs they use these osn sources for government means and they use them for commercial needs

if i happen to be an electron an electric car manufacturer discrediting uh another manufacturer by talking about how their cars keep blowing up or accelerating that would be of interest to me because it would increase my market share i wouldn't say for certain that the toyota fiasco was perpetuated by a machine for disinformation but i'd say it's a distinct possibility yeah the way we phrase this when we're doing red team stuff is you're paying me a hundred thousand dollars or fifty thousand dollars to red team your company why wouldn't i take a thousand dollar iphone and hand it to one of your executives as a write-off president it's a thousand dollars out of the job and it

gets the job done why would we do that if you're talking millions of dollars in the auto community why wouldn't i give a company a million dollars to run a disinformation campaign if you're the best selling vehicle it just makes business sense it's just another form of marketing it's bad it's evil but it's just business this stuff is going on we know industrialistic um that's a sort of different topic but the stuff is out there and it's available and it's gone crazy just like with the government when you have a bunch of people in dc who knows who are they gonna sell to commercial world i mean there's already people just focus on the perfect world why because you

don't have a security clearance maybe you're evil by nature and you can't get a security clearance you still don't work in intelligence to make money this does it for you hopefully that wasn't terrible um the classic on the internet nobody has your dog internet intelligence is more of a stuff but of course with the disinformation comes the problem of understanding what pieces of information you have that are fake everybody knows what honeypot is right what's honeypot it's disinformation it's an opportunity to learn about the enemy without exposing your key assets the funny thing about information

is that when you ask for information from a source whether it's google or a russian native or your congress people hear it when you ask them for information you are giving them intelligence you are telling them something about what it is you're after so there's layers to this that makes intelligence games so much fun one of the reasons i like it is that there's information there's disinformation and then there's other information about what you're doing

information on the internet has problems just because there's so much of it out there some people perpetuate stuff it rolls over and it gets copied and pasted and stolen and you can't google the topic without getting back 75 percent garbage google's trying their best to make that kind of stuff go away but it's out there so there's limitations on how much you can use things google for your intelligence work but you can do it manually if you know where your targets are you can use foca you can use multiple you can go out there and find that stuff yourself it's slower it's more tedious until you write a tool to do it sell it to the pentagon

remember me when that happens please the difference between modern data mining and intelligence collections with all of this technology is the leverage before i had to have an asset it was a very slow process now i can use essentially the mechanical turn right i can turn loose 100 red teamers who have no idea what it is i'm asking them to do to collect little bits of information and pull together a piece of open source intelligence for me without exposing the asset back here we don't even want to get into the layers about who's doing what to whom and how it all ties together but if you're not careful with that like say i just gave the information out to a

single person that person can now sell the fact they can tell that information to somebody else because of information about information it's crazy intelligence is fun i love it but you can do more with technology faster for example when we were doing some research for this topic in another place um we're using polka we're using we heck we use messes for some of it you can be one person sitting in a keyboard doing this work by hand or you can write a script and do it all for you almost everything is scriptable right so if you can do it with the tool you can do it 100 times with the tool even better so there's leveraging that goes on that

makes it fun which is why people write the tools the fun aspect of it on the c portion is is it cost effective if i use all of this technology to go get this little piece of information and it cost me a hundred thousand dollars would it have been better to use an asset that i haven't feel to break them off for a half a day to just steal it for me which one's more costly that's for the boys to decide uh from a commercial aspect of it if i'm selling this to general motors as something it's just dollar figures if it's cheaper for me to send you to detroit to go get that information

the old-fashioned way that's what i'm going to go with because it's all about money

the concept of meta intelligence brings the thing i was thinking before when you ask a question you have conveyed information

it's one of those areas where you start thinking about it your brain just goes rapidly on this drain hole of well if i'm telling you this and you're asking for this the other thing pretty soon we've got layers and layers and layers of intelligence trying to do analysis and at some point somebody's going to stop stuff that sort of thing is great for automation and rule sets and ai not ai expert systems sorry you can for example build a data center in utah and essentially copy the internet and then you can run whatever you want nobody can be the wife unless they've got an actual spy in your organization this was actually a problem for a while

we had um intelligence assets that were using google and then using aol and then we were using places like that to do data and it was showing up because what happens when you start having a search removal how do i find halle berry photos how do i find pentagon photos and auto populates the search based on what other people are asking but when you're asking about civilian city in siberia and nuclear assets or something there's only three of you asking that question so you're gonna see that on the list i don't think it does that anymore but um that was a known problem for a while

i assume everyone's reading the slides

i don't want to read the slides if that happened so some interesting sources for this stuff in case you haven't played this field at all the opensource.gov this is a government website devoted to open source information that you can get access to it's almost like the publications from the library of congress that circulate if you get those if if you qualify and now it's a lot harder to gain access they actually want you to be affiliated with the government somehow or the british government or any of our allies um but it's not too terribly hard for example if you work at an intelligence sort of company or forensic company you generally you can access if you are

in in regard i think i don't know if it depends on what mood during that day but that's the government's portal to open source intelligence it does not work as well as it used to they've dumbed it down and everything goes into the secret thing now the government has a nasty habit of collecting osm and producing something that is entirely illicit for example the wire report and then once they get it together they look at it and they go shhh and they classify it and take it off in that terror were we worked the case with a transportation agency and they wanted to know if certain things were possible that would lead to a mass casualty

incident and we went data mining and we found a published report from a government agency about the exact sort of mass capital the incident they were talking about and it was available on the net for anyone to download and the ability to duplicate it and act on it was very very low which meant that if a bad actor had found that they could have done holy cow this is awesome go get me some copper cable and that would have been the end of that they could have repeated it a number of times it would have been really ugly and so we told them about it and about a month later of course that source vanished

thankfully why was it ever out there in the first place because risk management and classification are two things that are difficult to do when everybody makes mistakes out of it it's just like finding a sales brochure with next year's pricing on a website for a company everybody makes mistakes one of the reasons why this field will never get old is that there's humans involved in it so just like security and testing all of that we have employment for a long time um the hawaii report was really cool um go get a copy of it still on the network whatever open source show that angle google scout website these are sources of information as opposed to tools pure tools like

focus ego that let you manipulate this sort of stuff and then by no means any sort of lengthy source at the end of the presentation there's a long list of source material that you won't get there okay aggregate intelligence we're talking about this pulling stuff together a huge aspect of osm can have lots of value depending on who you are this stuff is basically limited to your imagination i mean if you want to corner um a market in some sort of commodity whether it's houses or peaches this stuff is valuable it just depends on what you can leverage however be careful what you do because when you're talking about messing with other people's livelihoods bad things can happen

um we have found stuff in our efforts that we have quickly deleted in its um one of the things that we thought of a long time ago about six years ago was we went through a briefing with the feds and they told us how human trafficking happens and what they see in terms of the physical world when human trafficking comes to town when they move in when they move on what happens things like they go to costco and they buy paper towels by the pallet that they buy certain brands of condoms by the pallet by the case things which if you have access to data mining technology make it very very easy to figure out where the human

traffickers are where the human traffickers are about to go into business and where they've been that's to me as a human being on the planet that's awesome information we need to go close those people down but we don't want to call attention to ourselves because you know that i was like well why don't we run this on our hometown and see what's going on because we knew there was some stuff there but you don't want vlad showing up on your doorstep with a shotgun to remind you that he doesn't want to be exposed when you're talking about exposing criminals through knowledge you've got to understand that criminals are not nice people well it turns out that governments are

not nice people either and if you go data mining and you look at government websites and you find out that there are documents there that list their intelligence assets in the field what we call a dock list would they call it off list which is basically your undercover assets in the field

but it's not in the form of a single document which would be what was in the james bond movie a decade 15 years ago i forget that anyways was that impossible this was a distributed set of materials and it had helped their intelligence assets we knew where everybody on the planet was and we stopped doing that really fast because we didn't want to call attention to ourselves that's the sort of bad things that we find when human beings make mistakes now admittedly you had to go and look at the documents and figure out which documents and where and to going using google and using focus and using a couple different things and pulling some scripts together to get it all to boil

down to hey look i've kind of not listened to this large garden but they're dangerous so we just think everything forgot about it but this stuff is out there were we being drama queens to be so panicked about it i don't know the intelligence community and when you're getting into that level of sensitive information i don't know just be careful uh if you get a bug in your hat to go digging in government sites that you're messing with development and they do things so one of the things in the field that you usually talk about is the fact that the people who pickpocket are not really fun people that google and the people at google

think the people the pickpocket are a waste of time but in reality there's not that much bias but it shows up ironically more often at the management level than it does at the age because we all like to make fun of each other red versus blue geeks versus spies but in management they're talking about life dollars and proof and what makes me look good to management and they have a tendency to minimize open source intelligence because it's not a useful bias they think that if they steal a fact using an asset that it is more actionable more factual than if we put that same information together using google when they do osm they will frequently use another source

to confirm i'm all for confirmation i think that's a good business practice it has to expense but dismissing os is out of hand which is one of the things that happens in certain government circles depending on management always goes back in hand they dismiss the stuff out of hand i think there's a huge waste because there's a lot of value there we know there's value because we've seen it this means that if you're a company selling this stuff to a certain government agency and the director of that arm changes and the new guy coming in is more or less favorable to how you do business your time are you your boss could live with this business can improve

you can find yourself with a pink slip ask all the people looking for pc right now but studies have shown that there's a lot of effectiveness here so one of the things that is a strange question in the community is well if we know it's

you thought we were going to get through this whole presentation without pictures of course as i mentioned because of the level of disinformation the quantity of players on the internet there's a huge signal-to-noise ratio which means opportunity if you can write an algorithm that will dig through twitter and pull out crud or use multigo to figure out which people are running which accounts so you can shut them off and narrow down your information sources you're refining your information set you're providing value you can make a lot of money and of course because technology changes so fast and we go from twitter to snapchat to facebook to xbox one messaging um you're constantly shifting your information sources from one platform

another way you're writing a huge one but this is outreach in utah and sucks all that stuff at all i'm the baseball contractor with people i'm sure to bring in new modules when new stuff shows up i mean wouldn't you want to be the guy that goes to the cia and says hey you know that new social networking thing that's over on peru that everyone started using i've got a plug-in for your machine here you go that will be a million dollars please

so most of the organizations for example we went back after a couple years of reading down a couple of the sources that we had found some interest upon including the one that was a government agency and we're glad to see that they had buttoned up their droppers and were no longer exposed to the world however it comes and goes everybody makes mistakes and a company that was formerly clean of interesting information can suddenly be right with it and hopefully they'll pay you to help them solve that problem but it's a it's a vigilance thing you have to keep going with this stuff just like security you can't put a firewall in place you're like oh we're secure

it goes on and on and it never ends which is good for our careers

so for those of you who get into the community here is the splat-dot business plan it's really really easy design a tool sell the tool bank the money go back and do it again so you can retire an agreement i mean come on when they're valuing things like twitter and facebook and billions and billions of dollars there's money to be made in this infinite possibilities some more people came in is anybody else's student here students any more of you no okay yeah we won't talk too much about that private political interests everybody knows who karl doyle is right karl rove has a huge data machine well he feels up and down his eyes but the man

knows how to play himself i assume everybody else has the same interest now after the humiliation that he dealt out in that one election obama had a huge information machine it went away with his election and then it formed a private company and probably doing the same thing for other people there was an in the article month or two about that political machine and how they were moving into commercial interests to do this

okay the aspect of this that we always have to be careful with is general harm um the obvious one is the ashley madison database that created some harm that was not how it is now when you find stuff and you expose it thanks odin people can lose their lives if it's military-grade stuff people can really lose their lives if it's not military-grade stuff people can still suffer we don't want cough suffering well maybe some people do but if you're doing this stuff do it for money and give your money or give the file to the company that is paying for you if you're doing this for your own notification and you want to publish the results think really

carefully before you do think a lot about anonymizing it if you don't know how to do that get help don't just dump this stuff to paceman because you may find yourself on the receiving end of the lawsuit and as people deal with lawsuits as our daily job you do not want to have lawsuits are terrible release findings of care those sleeping dogs lie the snowden thing is one of the almost obvious i mean stuff is still coming out that the international tension was the other kid that dumped all the data chelsea manny

i'm not gonna say it was good or bad i'm just gonna say that's a lot of information to put on the open market and not be ready for what happens

ignorance is not bliss we see daily on my feet at least showdown notifications from dan tyler hey look what i found out showed on today that's a lot of fun weekly data exposures they're constantly churning out stuff from secrets and links from the government side of things there's great

after this is over i'll look it up um for anybody that's interested at the end uh the source for some of the intelligence that we look at

so if you want a career in this this is actually one of the interesting fields in security and intelligence that you can get into as an entry level one of the problems with forensics and security is that there's not a lot of entry-level positions you go in assistance admin you work as a network admin you go as a programmer and then you start getting into security and forensics you can go to work in intelligence today doing next to no technical work as a flunky they have to sort through stuff as a coder that has to write interfaces or somebody with a genuine intelligent background interest there's lots of opportunity there you want to go that

way you like it it's not even our primary business there's commercial clients government clients you know there's no academic programs

don't have to have a degree don't have to have clearance it's used by the security people since this is sides we're all familiar with security to one extent or another red tv is extensive new teams use it extensively it's a way to get into those teams and companies doing something that is less demanding than some of the more advanced you can provide this for a service for a number of companies we outsource some of our intelligence collection to a number of people who are bored in the meeting instead of playing halo they go do our focal runs or our montego runs and put together the aggregate data for us here's a report that we then plug back

into the machine to go do the rest of the security work okay the rest of this is biblio that you can't read and doesn't matter until you get slides those are all of the sources that were used for this presentation don't place your eyes

you