CORPORATE OSINT

Навігація курсу: Категорія: SOCMINT

Corporate OSINT Methodology

1. Open source intelligence (OSINT)

• OSINT basics and its application in corporate analysis.

• Sources of information: open databases, social networks, forums, state
  registers.

• OSINT tools (Maltego, SpiderFoot, Recon-ng, etc.).

2. OSINT methodology

• The main stages of information gathering are intelligence, analysis,
  and interpretation.

• Data collection methods: search queries, web page parsing, leakage
  analysis.

• Security and anonymity when working with OSINT.

3. Business investigations

• Analysis of companies, their structure, and financial condition.

• Checking related organizations and partners.

• Identification of ultimate beneficiaries and key persons.

4. Organization.

• Search for company registration data.

• Definition of legal entities and affiliates.

• Analysis of corporate documents and reports.

5. Locations.

• Identify physical addresses of companies and branches.

• Analysis of offices and production facilities.

• Geospatial OSINT (Google Maps, OpenStreetMap, satellite images).

6. 6. personnel.

• Search for employee information on LinkedIn, Facebook, and Twitter.

• Analysis of work experience and connections within the company.

• Assessment of the personnel structure and possible information leaks.

7. Contact information

• Search for corporate contacts, email addresses, phone numbers.

• Analysis of public records and databases (Hunter.io, Email-Checker).

• Checking contacts for leaks.

8. Business records

• Reviewing financial statements, balance sheets, and tax returns.

• Search for court decisions, arbitration cases and corporate disputes.

• Analysis of credit history and solvency.

9. Services.

• Analysis of the services provided by the company.

• Checking for compliance with legal requirements and certifications.

• Search for reviews, evaluate the quality of services.

10. Social networks

• Monitoring of company and employee social networks.

• Analyze customer activity, posts, and reactions.

• Identification of possible threats through social engineering.

11. Information about domains

• Analysis of domains, WHOIS records, and IP addresses.

• Search for subdomains and related resources.

• Determining the organization’s digital footprint.

12. Public registers

• Use of open state registers.

• Check licenses, certificates, and permits.

• Analysis of patent data.

13. Domain structure

• Researching the structure of corporate domains.

• Define internal and external subdomains.

• Identification of hosting providers.

14. Cloud storage

• Search for information in cloud storage (Amazon S3, Google Drive,
  Dropbox).

• Analyzing data leaks from cloud services.

• Assessment of cloud infrastructure security.

15. Email addresses

• Search and verify corporate email addresses.

• Verify email addresses in data leaks.

• Analysis of corporate address templates.

16. 16. Third parties

• Analysis of contractors, partners, and suppliers.

• Checking for possible risks of cooperation.

• Assessment of the impact of third parties on business processes.

17. Network connections

• Identify corporate networks and related infrastructures.

• Analysis of network connections and interactions.

• Identification of vulnerabilities in the company’s network.

18. Technologies used

• Researching the technologies and software used.

• Identify vulnerable components and versions.

• Analysis of the use of cloud services and CRM systems.

19. Information leaks

• Search for corporate data in leaks.

• Analysis of compromised accounts.

• Assessing the impact of leaks on business.

20. Archives

• Studying the company’s historical data.

• Analysis of changes in the business model.

• Detection of deleted or hidden information.

21. Internal leakage

• Checking insider threats.

• Analysis of information leaks from internal channels.

• Assessment of the consequences of potential leaks.

22. Hacking.

• Researching the history of cyber incidents.

• Analysis of attacks on the company and related organizations.

• Evaluation of response and recovery measures.

23. Analytics.

• Compiling a comprehensive company profile.

• Interpretation of the collected data.

• Developing strategies to protect against corporate OSINT.