Sourcecon Spring 2018 day 1 consisted of 2 presentations; Trust but Verify by Jim Schnyder and Brian Mork, and Tools for the Social Detective by me.
In the first presentation Jim and Brian purpose the question who does it better a Sourcer or a Hacker. Now being both I found this interesting. Some of the sites, tools and methods talked about were; PublicData, Facbook, Hiretual, Seekout, Prophet, Maltego, Twitter, Linkedin, Wayback Machine, Some boolean techniques around “intitle” and “inurl” operators. In the end both do it well, and come up with the answers just from different points of view.
Next came my presentation on “tools for the social detective”. Lots of tools shown but it all started with 2 pieces of advice; 1 learn the basics, tools come and go but the basics last forever; 2 Follow the breadcrumbs, use the tools you have to follow the bread crumbs to the end and you will usually find what you want. Now unto the tools; Tor Browser, Spokeo, Pipl, Amazing hiring, facebook, prophet, Whois, Email Permutator, Toofr, Email Checker, Email Qualifier, Hunter, Knowem, Nameck, GeoTrack, Oryn C Portable, Inteltechniques, OSINT Ext, Creepy, HTTrack, Scythe, Maltego, and Buscador. Now most of these are high-Level OSINT tools that are hacking type tools but they find a lot of great info.
That’s it for day 1, next week we will start with day 2 General sessions.