Agenda

In-Person Conference Registration

Learn from Tony Daly as he gives an overview of OSINT tradecraft and workflows. He'll be tailoring this session to focus on the Open-Source Certification (OSC) exam that will be running throughout the conference as well.

A Capture The Flag (CTF) event with Trace Labs!

In an increasingly interconnected world, the ability to leverage open-source intelligence (OSINT) has become essential for cyber intelligence investigators, researchers, and analysts. This presentation hones in on the critical role of location intelligence in modern OSINT practices at OSMOSISCon 2024. This session will delve into cutting-edge techniques for integrating location-based intelligence with traditional OSINT methodologies. Attendees will gain insights into how to effectively utilize location data to expose fraud, identify unknown users, and anticipate current and future threats. During this presentation, I will share real-world case studies and best practices that demonstrate the transformative impact of location intelligence on investigative outcomes. Participants will learn how to: Integrate location intelligence with OSINT to enhance investigative capabilities. Utilize AI and machine learning tools to analyze and interpret location data. Apply advanced techniques to identify and track fraudulent activities and cyber threats. Collaborate with interdisciplinary teams to maximize the effectiveness of location-based intelligence.

In this presentation, we'll explore the cutting-edge technique of utilizing linguistic markers to profile subjects within the realm of Open Source Intelligence (OSINT) investigations. Attendees will be introduced to the fundamental principles of linguistic profiling, including how unique language use, syntax, and discourse patterns can serve as digital fingerprints. We'll delve into real-life case studies where linguistic analysis led to breakthroughs in identifying individuals behind anonymous accounts, authorship attribution, and predicting potential threats. Participants will gain insights into the tools and methodologies used for extracting and examining linguistic data from public sources such as social media, blogs, forums, and other online communications.

Proctored open-source certification exam.

Artificial Intelligence has made its way (some would say intruded) into nearly every facet of our lives. It is offering to write our emails, drive our cars, plan our vacations, create our art, do our research, and conduct our analysis for us. While there are certainly valuable use cases for the implementation of AI, there are enormous shortcomings that OSINT practitioners should be aware of when they begin to make the decision to hand over critical thinking and analysis to an algorithm-no matter how artificially intelligent it may seem. This presentation is not intended to scare users and decision makers away from the implementation of AI completely, only to make listeners fully aware of how valuable and, at the moment, completely irreplaceable the well trained human mind is.

Rakia puts more information in front of you faster so you can work in virtual real-time. The team will show use cases harnessing the full spectrum of OSINT capabilities including target profiling, mass collection, DarkNet exploitation, avatar design and management, fake account identification and mitigation, no code crawlers, and cross-domain link analysis between targets. Rakia's industry-leading data access makes the work hyper-real, and deeply rewarding. Because Rakia helps you get the right outcome faster.

Whether it’s pseudo-anonymous email addresses or phone numbers sending threats of violence, unidentified WhatsApp users that are perpetrators of pig butchering or other crypto and romance scams or simple due diligence exercises into potential business deals, often OSINT analysts and investigators are tasked with identifying and, often more importantly, understanding unknown potential bad actors and their backgrounds. This talk will discuss many of the pitfalls, challenges and OSINT sources used to work through the problems posed in these situations. These sources include social media platforms, messaging applications, court records, Freedom of Information Act requests, data breach information and other open source resources that are freely available. Examples of this research and sources culminates in case studies of real-life investigations that have unearthed the true identities of criminals or provided significant leads to law enforcement for further investigation.

Proctored open-source certification exam.

Celebrate excellence in Open-Source Intelligence at the OSMOSISCon Awards, recognizing leaders who have made significant contributions to OSINT. Join us as we honor individuals and organizations that champion innovation, diversity, and #OSINTforGood.

In the fast-moving world of generative AI, our behaviors for how we search for & interact with data are changing. This presentation will explore & teach new techniques for leveraging generative AI for OSINT tasks effectively with prompt engineering. We will understand how LLMs work and then dive into techniques such as chain-of-thought, formatting & parameter techniques, reasoning, reflection & how to establish constraints for the most effective outcome. The talk will tie these into contemporary OSINT workflows so you can apply them immediately & keep pace with this rapidly advancing technology. Key takeaways include understanding the “how” & “why” of prompting for OSINT, contrasting existing search techniques (“googl’ing”) with Gen AI approaches to understand where it adds value, knowing which model in the sea of models applies to your mission requirements, and where to find these resources & employ them with ease. We’ll distill this to an easy-to-follow exploration with tangible outcomes at all levels, from analysts to decision-makers to evolve modern OSINT skillsets & build new capabilities within organizations.

Digital ads and ad systems provide a wealth of open source information for investigating companies, products, online campaigns, scams, and other activity. They can also provide critical information to assist with attribution. This workshop provides a hands-on guide to tools and techniques used to investigate digital ads on websites, apps, and social media networks. Learn the fundamentals of programmatic ads, how to distinguish between display, content, and affiliate ads, and how to use ads.txt and other information to uncover ownership and other connections.

Proctored open-source certification exam.

Publicly available information is abundant, yet not all public data is created equal. During internet investigations, OSINT professionals face the challenge of discerning disinformation, misinformation, and attempts by subjects to mislead investigators, along with unreliable narratives. The recent advancements in AI technology have further complicated the role of OSINT professionals, as analysts must now scrutinize AI outputs for bias, inconsistencies, and falsehoods. Consequently, ensuring the accuracy and credibility of collected information has become more critical than ever. This presentation delves into the methodologies and techniques necessary for verifying and authenticating public data to ensure the generation of relevant, timely, and accurate OSINT. Skopenow’s in-house investigator, Steve Adams, will explore actionable strategies for assessing the credibility of digital information. From corroboration and contextual analysis to digital forensics techniques, Steve will provide you with proven practical workflows to empower you to generate OSINT that decision-makers can rely on with confidence.

In the evolving landscape of mobile applications, understanding the digital footprint left by new and lesser-known apps is crucial for digital forensics and cybersecurity. This talk presents a comprehensive analysis of the data residue and online public data (OSINT) associated with a selection of emerging mobile applications, including OnlyFans, BeReal, Whizz, Yubo, Hily, and Peeps. The presentation will delve into the process of finding the dark horse apps, what makes them tick, and what data to look for. Two perspectives on the data and processes will break down these Apps from the forensic and OSINT sides. The forensic side will break down the data that is left behind by the App, and what you do with the artifacts will help lead you to the next point in your investigation. How you can add in data through privacy collections and explore that value from forensic and security concerns. The Open Source Intelligence (OSINT) side will demonstrate techniques for gathering publicly available information related to these applications, which can include user-generated content, metadata, and network footprints. This dual approach of digital forensics and OSINT provides a holistic view of the digital traces left by these applications.

Proctored open-source certification exam.