-
Using OSINT to Investigate Arson Incidents and Gang Violence in the Haiti Crisis
This blog post was based on research and analysis conducted as part of the final assignment for the bespoke Knowmad OSINT training for the International Masters in Security, Intelligence, and Strategic Studies (IMSISS) offered by the University of Glasgow, Dublin City University, Charles University, and Trento University. Over the past two years, Haiti has experienced…
-
OSINT Issues: Pesky Clouds are Blocking my Satellite View!
Are you into Open Source Intelligence (OSINT)? Have you ever found yourself eager to obtain satellite imagery of a specific area, only to hit a wall of clouds? As an OSINT analyst with extensive experience in open-source geospatial intelligence (GEOINT) resources, I’ve encountered this situation more times than I can count. Having worked on projects…
-
Be an OSINT Hero: Recognize the EU’s Most Wanted?
Did you know that Europol is an Open Source Intelligence (OSINT) powerhouse? Europol is not only one of the organizations where OSINT skills are very relevant and valuable, but it’s also at the forefront of fostering collaboration with OSINT sleuths from the public. Just recently, Europol and ENFAST launched their annual #EUMostWanted campaign, putting out…
-
OSINT In Germany: Google Maps Street View Returns!
Open Source Intelligence (OSINT) in Germany is about to get bolstered thanks to the return of Google Street View. Geolocation and visual investigations overall will get turbocharged as Google Street View is resurfacing in Deutschland. For over a decade, Google Maps’ Street View has been transforming the way we explore – and investigate – the…
-
Investigating the Karma Massacre using OSINT
This blog post was based on research and analysis conducted as part of the final assignment for the bespoke Knowmad OSINT training for the International Masters in Security, Intelligence, and Strategic Studies (IMSISS) offered by the University of Glasgow, Dublin City University, Charles University, and Trento University. Disclaimer: viewer discretion is advised Increased online chatter…
-
Visualising MISP galaxies and clusters
MISP Galaxies and Clusters The MISP galaxies and clusters are an easy way to add context to data. I’ve previously written an article “Creating a MISP Galaxy, 101” that describes how you can create your own galaxy and cluster. Apart from the context, galaxies and clusters also allow you to describe relations between individual elements.…
-
Creating a MISP Object, 101
MISP Objects I published an article on the blog of the MISP project on how to create your own custom object: Creating a MISP Object, 101. This is a follow-up to a previous post on how to create your own MISP galaxy or MISP cluster (Creating a MISP Galaxy, 101). Go to Source
-
Difference between MISP REST API search for events and attributes
MISP and REST API MISP includes a powerful REST API that allows you to automate the dissemination of threat intelligence and threat data. If you aren’t familiar with the API you can explore its features (and the inline documentation) via Event Actions, REST client. In the latest versions of MISP the REST API client supports…
-
Incident Response: 5 Steps to Prevent False Positives
I published an article on the IBM Security Intelligence blog : Incident Response: 5 Steps to Prevent False Positives. The article describes how false positives look like and how they can interfere with your incident response and threat intelligence processes. I propose 5 steps to prevent false positives, including Prevent false positives from being added…
-
BelgoMISP Meeting 0x01 : Belgian MISP User Group Meeting
Interested in sharing your MISP usage experiences? How did you integrate MISP in your incident response workflow? Have anything to say about threat sharing in general? There’s a BelgoMISP Meeting 0x01 for all Belgian MISP users. Submit your proposals via Github or contact us via Twitter. Go to Source