Columbia's Information Security Group
A free and informal gathering of information security professionals and enthusiasts in Columbia, South Carolina at the Richland County Public Library on the 3rd Tuesday of every month at 6:00 PM (click on the YouTube bubble).
Founded 2014 (COVID can’t stop us)
Image credit: Zach Pippin
zachpippin.com
We had a really good meeting for our last ColaSec meeting at IT-ology. We set a record for attendance with 22 people showing up for Tuesday's meeting. Josh Huff also gave an excellent talk on OSINT. His slides can be found here. The recording of the meetup can be found below.
We're excited for the opportunity to look for a new venue. We hope to have something locked up in early April if not sooner.
This month one of ColaSec's own, Josh Huff, will put on a presentation regarding Open Source Intelligence (OSINT).
Open Source Intelligence is defined by the Army as an intelligence discipline that pertains to intelligence produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for the purpose of addressing a specific intelligence and information requirement. That’s a pretty intense way to say that once we find the Open Source Information we use it for a specific purpose. My talk will show you some of the purposes for finding Open Source intelligence and the tools we use to gather it. OSINT is everywhere… for example what information can we pull from a social media post showing a great deal at the gas pump? How bad are those pictures of debit cards where people obscure some of the digits on their card? What can we learn from the Internet of things and what can we do to protect ourselves from leaking this information all over the place? The bonus round includes locating places that our heroes from The Walking Dead snuck around when filming in Atlanta.
Join us for networking from 6:00 - 6:30 at IT-ology. Then the OSINT presentation by Josh Huff beginning at 6:30. Food and beverages will be available. We look forward to seeing you there!
We had a really good meeting to kick off 2016. We defined some goals for 2016 including, but not limited to:
Then Josh gave a presentation on OSINT, using me as the target. Here are some of the resources he used:
These are some of the links to the facebook OSINT techniques from Michael Bazzell's website I mentioned in my talk last night.
This is a 75 minute demo where he teaches you the basics of OSINT on facebook
https://inteltechniques.com/intel/demo-FB.html
This is the custom facebook search link that includes the PIPL/API search that I've found usually yields some decent information on most targets:
https://inteltechniques.com/intel/OSINT/facebook.html
Finally, we got into the SANS Holiday Hack Challenge. We had some connection issues and didn't get very far, but we definitely had some fun.
I figured out how hard it is to get scapy on Windows 10.
Here's the recording of our meetup.
