Posted on Leave a comment

Triaging OSINT Pivots with OSINT LIAR


While conducting research it is really easy to accumulate too many pivots to explore. For example, when we extract usernames from a conversation in a forum that can generate 10 to 30 new leads to follow up on. Over the span of several different conversionsations on forums this can lead to hundreds of pivots to identify. Always of these potential leads are always appreciated during the collection phase, but pose a challenge when doing the analysis because each pivot must be identified and assessed on its true value. This can lead to a lot of work for an individual.

OSINT LIAR provides 4 mechanisms to reduce the overhead in collecting, managing, exploring and auditing your pivots.

  • OSINT LIAR provides a internal Javascript engine for performing targeted data extractions from the content that you save into your collection. This saves you the tedious task of identifying each username or pivot in a capture. This approach saves you time, but generates additional data
  • During the assessment phase of the pivot, we typically need to leverage tools for looking the up the pivot across many social media and data aggregation sites. This can readily be achieved by leveraging the “Discovery Plugin” functionality within OSINT LIAR. The “open all” feature allows us to quickly explore multiple sites for additional information on the selected pivot.
  • If the pivot does not add value to your research, it can be quickly deleted from the analysis. When a pivot is deleted a record is made in the audit log. This helps us if we need to backtrack and re-explore dead ends, removing the need for us to keep great notes or relying upon memory.
  • Recorded pivots are identified across your collection, thus giving you insight into potential connections, trends, and patterns that may otherwise remain hidden in your data.

Here is short video demonstrating username extraction from Reddit and how to quickly triage the data after looking at username across several social media and data aggregation sites.

Leave a Reply

Your email address will not be published. Required fields are marked *