Hi everyone! I hope you enjoyed this video.  Please do consider subscribing so we can continue making awesome hacking content!  Below is all of the course info:

Full Course: https://academy.tcm-sec.com/p/osint-fundamentals
All Course Resources/Links: https://github.com/TCM-Course-Resources/Open-Source-Intellingence-Resources
The Creepiest OSINT Tool to Date: https://youtu.be/uBynB50liTw

0:00 - Introduction/whoami
5:13 - Important Disclaimer
7:37 - OSINT Overview
12:06 - Taking Effective Notes
20:09 - Introduction to Sock Puppets
22:52 - Creating Sock Puppets
37:19 - Search Engine Operators
1:00:39 - Reverse Image Searching
1:07:58 - Viewing EXIF Data
1:14:27 - Physical Location OSINT
1:23:43 - Identifying Geographical Locations
1:34:16 - Where in the World, Part 1
1:35:34 - Where in the World, Part 2
1:46:58 - Creepy OSINT
1:47:49 - Discovering Email Addresses
2:03:42 - Password OSINT - Introduction
2:07:25 - Hunting Breached Passwords Part 1
2:19:25 - Hunting Breached Passwords Part 2
2:29:23 - Hunting Usernames & Accounts
2:38:07 - Searching for People
2:47:54 - Voter Records
2:51:46 - Hunting Phone Numbers
3:03:04 - Discovering Birthdates
3:06:42 - Searching for Resumes
3:11:51 - Twitter OSINT Part 1
3:26:46 - Twitter OSINT Part 2
3:41:57 - Twitter OSINT Part 3
3:47:22 - Facebook OSINT
4:00:33 - Instagram OSINT
4:09:07 - Snapchat OSINT
4:11:37 - Reddit OSINT
4:17:32 - LinkedIn OSINT
4:25:41 - TikTok OSINT
4:29:05 - Conclusion

❓Info❓
___________________________________________
Pentests & Security Consulting: https://tcm-sec.com
Get Trained: https://academy.tcm-sec.com
Get Certified: https://certifications.tcm-sec.com
Merch: https://merch.tcm-sec.com
Sponsorship Inquiries: info@thecybermentor.com

📱Social Media📱
___________________________________________
Twitter: https://twitter.com/thecybermentor
Twitch: https://www.twitch.tv/thecybermentor
Instagram: https://instagram.com/thecybermentor
LinkedIn: https://www.linkedin.com/in/heathadams
Discord: https://discord.gg/tcm

💸Donate💸
___________________________________________
Like the channel?  Please consider supporting me on Patreon:
https://www.patreon.com/thecybermentor
Support the stream (one-time): https://streamlabs.com/thecybermentor

My Build:
lg 32gk850g-b 32" Gaming Monitor:https://amzn.to/30C0qzV
darkFlash Phantom Black ATX Mid-Tower Case: https://amzn.to/30d1UW1
EVGA 2080TI: https://amzn.to/30d2lj7
MSI Z390 MotherBoard: https://amzn.to/30eu5TL
Intel 9700K: https://amzn.to/2M7hM2p
G.SKILL 32GB DDR4 RAM: https://amzn.to/2M638Zb

My Recording Equipment:
Panasonic G85 4K Camera: https://amzn.to/2Mk9vsf
Logitech C922x Pro Webcam: https://amzn.to/2LIRxAp
Aston Origin Microphone: https://amzn.to/2LFtNNE
Rode VideoMicro: https://amzn.to/309yLKH
Mackie PROFX8V2 Mixer: https://amzn.to/31HKOMB
Elgato Cam Link 4K: https://amzn.to/2QlicYx
Elgate Stream Deck: https://amzn.to/2OlchA5

*We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites.

Hello everyone and welcome to this 4 and a half hour edition of open source intelligence or OSINT fundamentals.

My name is Heath Adams and I'm going to be your instructor for this course.

I'm a husband, hacker, teacher, gamer, sports fan, and owner of way too many animals.

I'm the business owner and CEO at TCM Security.

We are a cybersecurity consulting firm and educational resource.

So we do anything from cybersecurity consulting, risk assessments, and ethical hacking.

Really, companies pay us to attempt to break into their networks or attempt to break into their devices or buildings, you name it, we'll try to break into it.

On the other side of that, we educate users on how to become ethical hackers and a lot of the different things that we do in this industry.

We've taught over 200, 000 students at this point and the number seems to be growing every day.

If you're interested in following me on social media, here are the links.

You can come check me out on LinkedIn or Twitter, Twitch, or even here on YouTube.

We have a ton of great ethical hacking and cybersecurity content so please do hit that like button, subscribe, comment down below.

We have full courses similar to what you're watching here today on ethical hacking and other related materials so please do give those a look as well.

If you're interested in learning more about TCM security, we have the business side which is tcm-sec.com, the educational side which is the academy, and the certification side is the certifications.

So this is going to be the first 4 and a half hours of a nine-hour course called Open Source Intelligence Fundamentals.

Looking at the curriculum, we're going to cover what is open source intelligence.

We'll talk briefly about note-keeping and we'll talk about the creation of sock puppets.

And then we'll start getting into some of the fun stuff.

We're going to talk about all different types of open source intelligence and how we can gather information through various methods.

So we'll look at search engine OSINT and see what kind of information we can gather through search engines.

And then we'll look at image OSINT and talk about reverse image searching and looking at EXIF data and identifying physical locations based on an image, which is really fun to do.

We'll talk about email OSINT and how we can identify email addresses based on certain factors.

We'll look at password OSINT and talk about breach databases.

We're gonna look at username OSINT and how we can tie a username from 1 location to perhaps another location or another website or resource and what tools are available for us to do that.

We'll talk about people OSINT, how can we search for people?

How can we look for phone numbers and birthdates and resumes and voter records.

And then lastly, we'll talk about looking through social media.

So we're going to talk about different types of social media that are out there.

Twitter, Facebook, Instagram, et cetera, et cetera.

That is where the course is going to stop.

Now the second half of the course does cover website OSINT, business OSINT, wireless OSINT, and then we build out a lab.

So we actually use Linux and we'll go into a lab and we start working with tools to do a lot of this process and automate a lot of the process that you've seen before.

And then we'll build out actual scripting and automation to automate even more of the process.

We'll talk about different OSINT frameworks.

We'll have a course challenge where you are challenged to identify different various items through open source intelligence.

And then we'll even provide more resources after that.

Now this is the only point during this whole video I'm going to try to sell you on anything.

The first 4 and a half hours of this course is free.

If you're interested in paying for the full course and getting the second 4 and a half hours, you're welcome to do so.

I will link in the description a link to the Academy again.

And just a little bit else about us is we do have tons of other courses.

We have courses on ethical hacking, escalation, pen testing, Python 101, we've got Linux 101 courses for people who are more beginner, courses on phishing and malware analysis and mobile application penetration testing.

Our authors are well vetted and we provide high quality content for no more than $30 a course, Or if you're interested, we also offer courses at a discount through bundling, and we offer courses through an all access pass where you can access all of our courses for $30 a month.

So With that being said, that's the only time I'm going to pitch you throughout this entire video.

We're going to go ahead and move on now to the open source intelligence fundamentals course.

So before we start learning about OSINT, I must make an important disclaimer.

This course is going to teach you some incredibly powerful techniques on finding information on individuals, on organizations, and just as a whole.

This information that you gather and these techniques that you gather should be used from an ethical standpoint.

At no point should you be researching anybody with malicious intent or be using this information for any other reason than you have been told or have a contract to do so.

So unless you are a part of an investigation or in part of a client that has told you I want you to research us or a person in particular, this information that you learn should only be used against yourself for the time being.

With that being said, I want to make sure that you understand again, this is a fundamentals course.

This is something that is going to teach you I would say 70 to 80 percent of the techniques that can be used.

You can absolutely take this deeper, build out your own tools and take a lot of techniques and apply them in other places.

I'm going to again, teach you the methods.

And that's what I want you to take away from this.

Make sure you're understanding that the methods here are what's important.

Make sure that you're using this in ethical matter.

Potentially that you can use this can be weaponized.

This is something that the good guys use and the bad guys use.

And I'm putting this course out there for the good guys.

So make sure that you are using this ethically, make sure you're understanding the methodologies you go through this and make sure that you're not only respecting your own privacy but the privacy of other individuals.

So with that being said, I'm really ready to start into the course.

We're going to go ahead and start talking about what is OSINT in the next video.

Welcome to the first real video in this course.

And it's just going to be a brief, brief introduction.

We've already talked about this in the course introduction, but I do want to add in an intelligence lifecycle into the conversation so that you understand what this is.

So we're going to be using a multitude of methodologies in this course, in order to gather information on people on businesses and other items that is all publicly available.

So with that being said, I've already talked about this, I really want to talk about the intelligence lifecycle just for a minute.

So when we talk about the intelligence lifecycle, there are 5 parts to the intelligence lifecycle.

So those are your who, what, when, where, why type deal.

So let's say that somebody has instructed you to gather information.

Maybe you have signed a client and the client says, I want you to gather as much information about us that you can.

These are all identified in the planning and direction phase.

Once you have identified and your target, you've done your planning, you're ready to move on, then you go into the collection phase.

And majority of this course is about collection.

That is the methodology that we're going to be doing.

How do we gather names from an organization or people that work at an organization?

Or how do we gather information about people?

So the majority of our time in this course is going to be spent in the collection phase of the intelligence lifecycle.

From there, we're gonna move on to processing and exploitation.

We're not gonna do any exploitation or really any processing.

Processing is about taking the data that you've gathered and starting to interpret it.

You're starting to process the data, okay?

That moves into analysis and production, which is similar in the sense that you're analyzing the data and you're putting it into, I guess, an intellectual form.

You're starting to take all the data points that you've gathered and you process and you're saying, hey, this data point ties to this data point that ties to this data point.

You produce some sort of document, you provide that, and you put that into the last phase, which is dissemination.

And you present that to your client or your customer, whoever it may be, that requested the information and you make sure that they can understand it.

So from the get go, this is a never ending life cycle.

And this doesn't have to be done in a specific order, you can start doing your planning, right.

And then when you get into the collection phase, you might realize, okay, I'm starting to gather some data, but I don't know how to what to do with it, go back to planning and add more stuff in, right, Do more planning, go back to collection.

Or you can be processing the data and analyzing the data as you're collecting it.

And then going back and collecting more data to provide more evidence for what you're collecting.

I just want you to understand that this lifecycle exists.

This is 1 of the core things I think that are taught in most intelligence type courses.

course on this, I just want you to understand that this lifecycle exists.

And we're briefly going over it, I feel like you

could do an entire course on this, I just want you to understand that in this course, we are primarily going to be on the collection phase, we're going to do a challenge that gathers some information, and we'll analyze some of the information.

And then we will put that into a report and understand what a report looks like.

But we're not going through the full lifecycle in the in a true sense, we're going to work work more on collection phases.

But I want you to be aware that the lifecycle exists, and that it's super important for the intelligence field.

So that being said, we're going to go ahead now and move on to the note taking part of our course.

Before we can start diving into the meat of this course, I want to make sure we talk about taking effective notes.

There are a lot of different note keeping tools that are out there.

And I kind of want to show you some of the favorites that I have show you a little bit about how I take notes and just give you an idea of how you should be working through this course and taking notes and even with your OSINT.

And when you're doing OSINT on somebody else, how you should be taking those notes as well.

So the first thing I wanna point out is I'm gonna show you my notebooks and then we'll kind of get into tools.

If you've ever taken a course with me, you've probably seen me point this out and this is called Keep Note.

I think it's 7 or 8 years old since the last time it's been updated.

So there is a little bit of dating to this, but it's still very effective.

I like using it, and it's just very, very simple.

So you can see here, at 1 point I was studying, and I have group notes in here for different things, but I was studying for CyberArk and I was studying for Thykotic, which are different privilege access management tools, and I was taking notes on these.

So I was watching some videos and there were different things for these different potential exams or courses that I was doing for cyber art.

So what I like to do is like to come in here and say, Okay, here's this exam I'm taking.

So you could see a CSP and then they have different subtopics.

And in those subtopics, you can have, see, I just numbered them 123, whatever, but you can also come in here and just create a node.

You can also come in here and just create a new child page and have a subtopic here, And you can just say something like subtopic, right?

So what I come in here and say is I'll take maybe screenshots of something that was interesting, like a slide.

I might put some notes in here for myself.

And I'm not gonna come in here and tell you exactly how to take notes.

I'm coming in here and telling you how I take notes and giving you ideas.

If there's something that works better for you, if you're not visual, I'm very visual.

So I like to see, instead of typing this all out, I like to see kind of a picture of everything.

So you'll see me take a lot of screenshots and pictures of different tools, and then put them into my notes, because that's how I remember things, unless it's something that specifically, I want to copy and paste.

But it's good to have good notes, organized, easy to click on.

If I want to know something about DevOps, I just come in here and click on it and read more about the CyberArk DevOps.

But I understand people don't wanna use an outdated tool or they're not on Windows or something else.

So, oops, I just pulled it up and then clicked off of it.

So maybe you wanna use something different.

Now, Notion is a little bit different from a note-taking perspective, but you could still resolve the same thing.

There's a lot of nice templates here where you can actually have it.

You can say, Hey, I want to share my notes with somebody.

You can have that out there, or you can make these private.

It's very, very flexible, but you'll see that I do similarly the same thing.

These are just my notes, but you can see I have some notes on GraphQL.

I came through here and again, I'm very visual.

And then I take some notes here if I need it.

If I'm looking at cross-site scripting, maybe I come in here, and I have different things I wanna look at, like here's more within cross-site scripting, stealing cookies.

Okay, now here, I've got actual code put in here.

And I could just come copy this code if I want to.

And these are different ideas about stealing cookies that I've written in my notes.

So there's different ways here to do this, right?

Now, before we get into the note-taking tools, I also want to go back and I wanna show you 1 other part that I think is very important.

Let's say you're typing some stuff, typing some stuff, right?

You got notes and you wanna take a picture, a screenshot of something.

You can see that this comes up now on the screen.

And if I want to like copy something like this and this copy, actually that was terrible.

Let's copy like the side of the notebook here.

Like I use this to this day when I'm doing assessments or any sort of just nice picture taking, you can come in here, you can add a border, you can invert this if you want to, or re-invert it there, have your border, right?

You can highlight different areas, like say I wanna point something out specifically, this is very nice.

If I wanna obfuscate some data, I can come in here and say, Oh, that's very sensitive.

So there's a lot of flexibility in the tool.

I'm not going to walk you through every single thing.

I'm just saying that there's a lot of flexibility and ease of use here that is great for note taking.

Then you can save the file or you could just say copy.

Now I can take it back and put it in my notebook.

So you're able to snip exactly what you want.

You can take full screen pictures, all kinds of stuff just with this tool.

I've highlighted a few and I've highlighted Keep Note.

So keepnote.org, you can come here, you can download it.

It does work on Windows, Linux and Mac OS.

If you want to use that, absolutely fine.

Cherry tree is kind of like the updated keep note, you can see it's very similar.

Let me make this a little bit bigger here.

You can see that it's very similar on the side here where you have kind of that parent node, the child node, extra children underneath, whatever the verbiage is for that.

So you can come in here and type all your stuff.

There's different themes and stuff that you can organize here as well.

If you don't like the dark theme or the light theme, however you want to take it.

If you use Microsoft OneNote, I think it's awesome.

Notion is the 1 I was showing you, notion.so, same deal.

Being able to publish your notes in the cloud.

I've never used this, but here are very good things about Joplin.

If you use 1 of these great, If you're not into note-taking, get into note-taking.

I'm gonna provide you a bunch of options.

If you look below this video, you will see the references.

The references will have all of these there.

Play with them, see which 1 works best for you.

GreenShot, I believe, is for Windows only.

If you do not have a Windows PC, then there is a tool called Flameshot.

You can see the different options it has, like where you can click and just grab screenshot here.

It's showing you right here about all the different things that you can do.

Same thing as green shot, flexible, easy to use.

Very, very awesome when it comes to note taking.

I just wanted to kind of walk you through these things.

Again, I will provide the links and the references below, but if you aren't taking notes, take notes now.

There's gonna be a lot of information that I'm gonna provide to you, and it's gonna seem potentially overwhelming.

There's a lot of websites, a lot of methodology, et cetera.

You're going to want to have a good, concise notebook when it's all said and done.

I can't force you to take notes, but I strongly recommend it.

So That is it for this video and this section.

I will see you in the next section when we start talking about sock puppets.

All right, now let's talk about sock puppets.

If you've never heard the term sock puppet before, you can think of it as this online identity that is not who you are, or it's a misrepresentation or somebody you're not.

You think of a sock puppet as a fake account, alternate identity, etc.

And the point of having a good sock puppet is to not draw attention back to yourself.

Okay, so if we're doing say an OSINT investigation or if we're looking into research, we're looking at other people, our goal is to never let the person know that we're looking into them.

So ideally, we're going to create this fake identity or fake person.

And this fake person might have a Twitter account, might have a Gmail address or proton mail or something along those lines, they might have a Facebook.

Meaning it should never really tie back to your IP address.

It should never be used on a device that links to your personal information should never be used on a phone that ties to you.

There's a lot of depth that we can go into to avoid tying our name to a sock puppet.

See all The Cyber Mentor transcripts on Youtube

Open-Source Intelligence (OSINT) in 5 Hours - Full Course - Learn OSINT!