www..com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

Plessas Experts Network informs, trains, researches, and consults on Open Source Intelligence (OSINT), technology, information extraction, security and worldwide internet usage. Let us help you navigate the languages and technologies of the internet.

Independent Investigative Support Add relevant leads and data value to your case with our OSINT Investigative Support. Let the PEN team perform your high tech investigative methodology. We specialize in attribution for: • Websites • Dark Web • Cryptocurrencies • Use our investigative support to find preliminary evidence, to use toward legal proceedings, compel service providers, and support subpoenas.

Open Source Intelligence Training • Investigation Techniques for Social Networking Sites • Investigation Techniques for the Dark Web • Cryptocurrency Attribution • Automated & Advanced Search • People Search • Operational Security for Investigators • Monitoring and other Social Media • OSINT Support for Cyber Investigations • OSINT Support for Counter Terrorism • OSINT Support for other Intelligence Disciplines • Internet Search in Foreign Languages for the Non-Linguist • Online Learning Portal

Internet Privacy and Brand Monitoring Need to train your team in best practices for safer use of social media? Or how to avoid phishing attempts and malware? Even with privacy settings in place, social media and search engines leak potentially exploitable data. Contact us to stay on top of the latest changes to privacy settings and operations security. www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

INTRODUCTION TO OPSEC Course Reference Packet Web Address Description browserleaks.com ip-adress.com Check your IP address and browser leakage ip2location.com browserspy.dk wigle.net geowifi/ ssid map shodan.io Internet of things search engine; find out what is connecting from censys.io an IP address or location Extremetracking.com Statcounter.com Free stats tracking services Sitemeter.com canarytokens.org IP honeypot grabify.link urlcanary.com ghostery no script Helpful Anti-tracking Add-ons adblock plus

How to turn off wifi sniffing in Firefox permanently: How to turn off referrals on Firefox permanently: 1. Type about:config in the address bar and hit enter. 1. Type about:config in the address bar and hit enter. 2. Click "I'll be careful" and don't worry about the warranty 2. Click "I'll be careful" and don't worry about the warranty 3. In the filter or search bar at the top of the following page, 3. In the filter or search bar at the top of the following page , type:geo. type:network.http.send 4. There will be two choices. Double click the word true so that it 4. There will be a number of choices: Double-click anywhere it says true so that it toggles to false; double-click the URL and says false and double click the 2 and change it to a 0 delete it. 5. Done! Close the tab and happy referral-less browsing! ANONYMIZATION Web Address Description nordvpn.com protonvpn.com Virtual Private Networks

Torproject.org The Onion Router (TOR) – free anonymization service geti2p.net I2P the invisible Internet project NOTES:

Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com

1 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

NO-TECH ANONYMIZATION Web Address Description Archive.org Archived versions of websites across the internet Archive.is

PDFmyURL.com Grab a snapshot of a page in its current form, but leave cloud bounceapp.com server footprints. Page will be returned as a JPEG or PDF. browsershots.org

Strip Cache of images and www.google.com/search?q=cache:www.example.com/&strip=1 graphics to view Google’s database only:

ADVANCED GOOGLE SEARCH Search Terms Find pages that have

Memphis gangs the words Memphis and gangs Nashville OR Memphis either the word Nashville or the word Memphis (Nashville OR Memphis) gangs either Nashville gangs or Memphis gangs "Nashville crime organization" the exact phrase Nashville crime organization Nashville-crime-organization all hyphenated words together or within a paragraph

Memphis-crime -organization the words and crime but NOT the word organization

Memphis AROUND(4) crime finds the words Memphis and crime within 4 words of each other

intitle: (search for keywords in a page title) intitle:Nashville crime organization (only Nashville would need to be in the title) inurl: (restrict search to page URLs) inurl:Memphis site:.edu (specified domain search) site:edu, site:gov, site:org, etc. site:countrycode (restrict search to country) site:uk "organized crime statistics" site:facebook.com (search only one website) site:facebook.com filetype: or ext: (restrict search to specific filetype) filetype:pdf organized crime statistics identify file types filext.com database of file extensions and the various programs that use them Special - Insert the following code at the end of any Google search result URL and change the country code to &restrict=countryUK the desired country: worldatlas.com/aatlas/ctycodes.htm reference for country codes Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com 2 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

EVALUATING WEBSITES Web Address Description alexa.com Measures web traffic and ownership of websites app.buzzsumo.com Detailed back links search

whois.sc centralops.net Internet registration website ViewDNS.info nerdydata.com pgp.key-server.io builtwith.com w3bin.com Gather more information about a website securitytrails.com

safeweb.norton.com Check for reported malware/spamming related to a website

PEOPLE SEARCH Web Address Notes pipl.com People Search 411.com familytreenow.com truepeoplesearch.com spokeo.com namechk.com namecheckr.com Searching for usernames knowem.com haveibeenpwned.com viewdns.info Searching for Email Google: "hellokitty.aol.com" Facebook Messenger www.linkedin.com/sales/gmail/profile/viewByEmail/[email protected] the.osint.ninja/optoutdoc Opt-outs learnallthethings.net/blog/2018/1/23/opting-out-like-a-boss-the-osint-way stopdatamining.me/opt-out-list NOTES:

Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com

3 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

WORKING WITH IMAGES

Web Address Description exif.regex.info Scrape/View EXIF data from images online metapicz.com elevenpaths.com/labstools/foca/index.html is.gd/exif4chrome Chrome exif viewer is.gd/send2regexexif Chrome "Send to Exif Viewer" stolencamerafinder.com Search for camera serial numbers embedded in jpegs is.gd/flickrbear and is.gd/pillz Example photos for EXIF data Google Image Search Tineye.com Find the same photo elsewhere on the internet bing.com/images Fotoforensics.com Error Level Analysis for edited images

camfindapp.com (iPhone) Apps that allows user to search by taking a picture

google.com/maps/timeline Phone tracking of your location via Google phone google.com/takeout Download your Google data TWITTER Investigative Twitter Tool Web Address Twitter www.twitter.com near:Memphis Location search using search.twitter.com near:38103 within:5mi geocode:35.137742,-90.048350,1m (no !) i geocreepy.com Tracking users tinfoleak.com socialbearing.com Monitoring Twitter tweetdeck.com twitonomy.com Alternative Twitter Tools tagboard.com doesfollow.com tweettopicexplorer.neoformix.com tweetbeaver.com

Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com

4 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

FACEBOOK is.gd/facebookmatrix Facebook example searches and variations findmyfbid.com Facebook ID finder stalkscan.com Facebook ID finder and search starter facebook.com/search/100000001/photos-tagged photos of a user facebook.com/search/100000001/photos-liked Photos a user has liked facebook.com/search/100000001/stories-commented Posts a user has commented on facebook.com/search/100000001/photos-commented/2018/date/photos/intersect Photos commented on in specified year facebook.com/search/100000001/places-visited/ Places visited but not "checked in" by a user facebook.com/friendship/username/username Compare commonalities across Facebook facebook.com/browse/mutual_friends/?uid=100000001&node=100000001 Display mutual friends facebook.com/search/100000001/friends/100000001/friends/intersect Display mutual friends in a way to allow other variables facebook.com/search/100000001/friends/groups/100000001/friends/groups/intersect Groups joined by mutual friends of two people Try these combinations: facebook.com/search/4/stories-commented/717545176/stories-by/2016/date/stories/intersect facebook.com/search/8891783019/students/past/20531316728/employees/present/intersect facebook.com/search/106003956105810/home-residents/109664349052931/employees/present/intersect https://www.facebook.com/ search/110148382341970/residents/present/photos-by/str/stan/users-named/photos-by/2018/date-1/photos/intersect https://www.facebook.com/search/single/users/20531316728/employees/present/353659601370498/likers/intersect facebook.com/ search/str/bombs/groups-named/members/110970792260960/visitors/intersect facebook.com/search/high-school/students/present/105637269469145/likers/intersect facebook.com/search/138819462821564/photos-in/last-month/date/photos/intersect facebook.com/search/281961363188/likers/109664349052931/employees/present/intersect

facebook.com/username/map Check-ins facebook.com/livemap Facebook Live developers.facebook.com App developer information facebook.com/ads/manage/powereditor/creation Ad targeting tool NOTES:

Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com

5 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

INSTAGRAM Helpful Addons Web Address Helper Tools for is.gd/IGhelpertools Gramspy.com Chrome IG Story is.gd/IGstory Google searches: site:instagram.com keywords, usernames or -site:instagram.com instagram -"twitter username" (finds scraper sites)

SNAPCHAT - Fast evolving! More to come - Snapmap map..com Snap Search Tool story.snapchat.com Google search site:snapchat.com keyword or place somesnapcode.com Tagged-based snapchat username and snapcode catalog REDDIT Google search site:reddit.com keyword or username or any google operators Special Tools redditinvestigator.com ceddit.com Reddit User Analyzer is.gd/redditusers LINKEDIN Search String on Google Description site:LinkedIn.com Mike Smith People Search site:LinkedIn.com Google Company Search site:LinkedIn.com -intitle:Dell Dell Search for people who work at or who have worked at a company but not for official company pages site:LinkedIn.com -intitle:Dell "law enforcement" Same as above, but looking for other keywords or job titles in the -intitle:enforcement Dell search (also can use educational facilities or locations) Email Search www..com/sales/gmail/profile/viewByEmail/[email protected] YOUTUBE geosearchtool.com YouTube Geo Search EMULATORS Nox bignox.com Bluestacks bluestacks.com Andyroid andyroid.net Memu memuplay.com Genymotion genymotion.com ARCWelder is.gd/arcwelder

Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com 6 www.facebook.com/PlessasExpertsNetwork 202.684.8101 [email protected] plessas.mykajabi.com

AUTOMATION Web Address Description RSS Reader Needed to receive and translate RSS to readable text theoldreader.com Feedly.com Popular RSS Readers Netvibes.com Bing Search RSS Every Bing search is an RSS feed. If using Outlook as an RSS Reader, add &format=rss to every Bing URL Ifttt.com stringify.com Automate many tasks, including RSS flow.microsoft.com automatethatshit.com EMERGING & NICHE SOCIAL MEDIA Name Description Diaspora Discord RocketChat FireChat Signal Gabai Slack An always changing number of mobile apps, some based on their Kik Telegram popularity, some on emerging trends, and some on the technologies MeWe WhatsApp and methodologies they use. Musical.ly Wickr YouNow alexa.com Lists the most popular websites for demographics such as countries and speakers of certain languages applyzer.com Identifies most popular apps by language, location and type MORE TO KNOW screengrab (fix version) scrapbook Firefox add-ons video downloadhelper Preyproject.com Tracking tool sophos.com Free Antivirus (Mobile)lookout.com osintframework.com technisette.com More OSINT Resources github.com/Ph055a/awesome_osint github.com/jivoi/awesome-osint hunch.ly paterva.com/web7/buy/maltego-clients/casefile.php virtualbox.org vmware.com Cloud computing and platform virtualization software test-ipv6.com Test your IPv6 connectivity Plessas Experts Network uses Creative Commons to license all handouts. Please photocopy and share as much as you like! For a PDF copy, send request to [email protected] with 181022TN in the subject line. For more training, webinars, news related to Open Source Intelligence, subscribe to the PEN Portal! plessas.mykajabi.com

7