Hunting Cyber Criminals

Part IVPeople Hunting

In This Part

• Chapter 15: Researching People, Images, and Locations
• Chapter 16: Searching Social Media
• Chapter 17: Profile Tracking and Password Reset Clues
• Chapter 18: Passwords, Dumps, and Data Viper
• Chapter 19: Interacting with Threat Actors
• Chapter 20: Cutting through the Disinformation of a 10‐Million‐Dollar Hack

This section focuses on the art of investigating people. The next few chapters will cover a wide array of technologies and techniques that range from simple social media research to leveraging information contained in breached databases. Throughout this section, I will also cover building a “tracking matrix,” which will help keep your information organized and, if done properly, will also help you organize your research in a way that will help you visually spot clues faster.

What better way to start this section than with a tip from the “Human Hacker”?

EXPERT TIP: CHRIS HADNAGY

When conducting an investigation or a penetration test, there really isn't a one‐size‐fits‐all model for investigation tools and techniques that will work every time. It really depends on what the target goal is. Is it a spear phish or general phishing? Are we OSINTing a whole company or just a person? Or are we trying to get a shell versus just a click?

There are just so many avenues. If we're trying to get a shell, let's say, it may be a multi‐staged attack for us when it comes to OSINT. We take the time to research and find something where it makes sense for ...