thanks for joining we're going to have
two hours of ENT
fun I do probably think I should
probably say my uh Wann toe catchphrase
of let's do some oent
peppermint um nope that Pelican's not
the one with the sticker on it darn um
anyway uh we're GNA have some fun I'm
going to try my best to prepare you for
uh some stuff within ENT and then also
if you decide to compete in the trace
slabs event uh tomorrow uh a lot of the
stuff that I will show you will assist
you will assist you assist Trey slabs
assist the judges and the missing people
as well so true ENT for good um I can
come back to the slide if we need to but
uh to get started about me I'm the
founder instructor at the ension I used
to navigate submarines I know it sounds
like I'm joking but I'm really not um
you know I will say that submarine
racing is a spectator
sport I I've seen some high-powered
submarine races in my day um I've
written for a variety of places
including no Star Press I'll be selling
this book tomorrow during a signing uh
so if you're interested I will have
copies I think the signing is tomorrow
at noon I don't know the exact location
but I assume it'll be around the vendor
area uh so stay tuned for details on
that um so here's my competitive track
record I'm the 2017 derbycon social
engineering Capture the Flag winner I've
been on the winning team for three Trace
sles competitions during Defcon um
starting at Defcon 27 uh with the
password inspection agency and then the
Federal Bureau of oent and then the
fsbs uh before the fsbs we had a
different team that was the kgb's
spelled c a g y
bees um but all the members of the kgb's
were not available for Defcon 30
so we had to move on and well what
happened to the KGB they became the
FSB
right so standard disclaimer I'm not a
lawyer but I did stay in a holiday in
last
night either way uh the thoughts and
opinions in this are mine mine alone not
my employers past players IND or future
I am going to give you a Content warning
the content warning is basically pretty
cut and dry with the stuff we're going
to look at we're looking at finding
people these are people it is aligned to
a trace Labs competition Loosely I'll
speak both to the event and if you're
just doing it otherwise uh but some of
the anecdotes and experiences I'm going
to share with you do involve missing
people I'm not going to purposely show
you anything gory explicit pornographic
Etc just know that when you go
investigating
people you can run into some things you
don't want to see just being honest um
because at times depending on the person
you could be you could be thousands of
miles away but you could still be
staring into their soul and you can see
things dealing with trauma dealing with
being trafficked and things like that so
be aware of that um through looking for
people in a live setting such as in a
class which there is an actual missing
person in the handout that I uh gave you
the link
to there is a possibility we can come
across that kind of
stuff I don't think we will but I'm just
being upfront and honest uh and with
that I'm going to drop a reality check
as well you know I use the term subjects
when I'm talking about people I know
some people use targets I don't like
using the word Target it makes me feel
kind of slimy uh Choice Labs also uses
the word subject so it's easier just use
their
verbage um for businesses I'm totally
cool with using the term Target but you
know at the end of the day businesses
they don't have feelings they don't have
families and they can't be physically
harmed right so if you're reckless in
these types of Investigations it can
lead to identity theft it can lead to
digital harm and it can also have
have physical harm leading up to death
just being upfront that's the reality
check the person we're looking for I
have no reason to believe that any of
this is in play but be respectful of the
people you
investigate so let's start this off with
the definition so here is the lay person
ENT definition there are a lot of
definitions out there you can go read
the Wikipedia definition you can go and
search and find the CIA definition and
they are all equally correct but
to spell it out basically it is the
definition of ENT is information that we
gather from publicly available sources
that we use in an intelligence
context what is the intelligence
context well we have to understand data
versus information versus intelligence
data is a raw and arguable fact right an
anecdote that I like to use is Jane do
went missing from Denver Colorado on
February 28th
2015 okay the weather in Seattle on
February 28th 2015 on average was 46
degrees if anyone wants to look that up
I dare you to argue with me because it's
accurate it is a data point
right it does not help us in our
investigation right it's one of those
things that I would probably respond
with yes and I have a goldfish why are
you telling me this Oh I thought we were
talking about things that that didn't
matter okay information the average
temperature or the temperatures in
Denver Colorado on that day ranged
between 3 and 21 degrees Fahrenheit that
seeks to answer a question the question
being what was the weather in Denver
that day
right all right now let's enrich this a
little bit
further the weather in that on that day
in Denver Colorado was between 3 and 21
degrees F which is consider considerably
lower than the uh the historic averages
of 18 to 49°
F now does it make sense why that would
be considered intelligence more so than
everything else it can speak to what
someone's wearing it can speak to travel
conditions it can speak to uh snow and
other things that could be
relevant we also have to ask ourselves
is this legal and is this
ethical generally speaking ENT is mostly
legal if you work for a federal agency
if you are in law enforcement if you are
surveilling people in the European Union
Brazil California Virginia and a few
other places it gets a little tricky but
again even though I did stay in a
holiday in last night I am not a
lawyer I am not a licensed private
investigator for a
reason the reason being I would be
subjected to more restrictive laws in my
state if I were a licensed private
investigator being a private citizen I'm
not subjected to any laws the only thing
that cuts down on is my ability to do
expert witness stuff which there are
other ways around that but yeah um also
the big question how does this further
my
investigation say you were investigating
something that occurred in Rapid City
South
Dakota do you really need to know what
uh someone was doing in Orlando Florida
two weeks ago
probably not if that same person is in
Rapid City now
yes if there are discernable ties
between the person in Rapid City and a
person in Orlando yes but just because
you can collect it doesn't mean that you
need
to is it within scope and why do I care
those are important questions as well so
when we talk about people ENT what are
we trying to do there are positive and
negative use cases for everything we do
positive use
cases we use this to Pivot to or from a
business or an
organization darn I've got that under
positive and negative anyone care to
elaborate
there who hears pin testers what color
team are you
on Blue not a single one of you is on a
red team you know why you submit a
report and that assists with enhancing
the security of an
organization so the sooner you get past
that US versus them the better not
saying you personally but infos Twitter
we we'll put it there that that's where
all the controversial kids are these
days right Jonathan data one still
there I got him blocked I don't know
every now and then I'll go look just to
what see what the dumpster fire is like
if if the weather gets too cold and I've
not turned the heat on yet I'll I'll go
and look at the page just to see the
dumpster fire and warm up a little bit
all right so we can use this in the
investigative process this could be for
a criminal investigation a civil
investigation even a fraud investigation
uh it's very heavily used within
Insurance some of the most devastatingly
powerful ENT practitioners I have
encountered are certified uh forensic
accountants and insurance
adjusters because you know you might
have fallen on a banana pill and broke
your arm at work but you know if there's
any in a fraud that insurance adjuster
is going to find out when you're on that
ladder in your backyard painting your
roof they're going to get
you but yeah you've got that perspective
and finding missing people that's both
positive and negative any ideas why
there because at the end of the day like
when you go digging into someone like in
a trace lives competition or just
otherwise you can find out a lot of
things that happened you can find out
why you may understand why they are are
missing but in that scope it's not your
job to decide why um you are trying to
find the Intel and some people are
willingly missing some people are not
some people want to be found some people
don't some people can some people cannot
so you've got that whole complexity
there but you know sometimes you might
find a missing person that was missing
for a reason like the probability of
finding somebody in the witness
protection program is pretty pretty low
but finding someone that's missing
because they don't want to be found
because let's face it their family was
terrible to them you might reignite a
lot of trauma by reuniting them but you
know that's an occupational
hazard of course stalking doxing
Espionage you know um one of my current
favorite song is is by the band Ministry
and it's called disinformation and it's
literally fake news right right that's
there's a lot of ENT used for that as
well here's an example of probably how
you don't want to do
ENT anybody in here guilty of
this I mean you
laugh you really do but I'm not saying
that ENT investigators don't know that
kind of stuff it takes a certain level
of maturity and restraint to withhold
from admitting it that's what it boils
down to that's the difference between
having the intelligence and being creepy
and it is a very fine line to
walk so TR slabs I'm going to zoom
through the categories because we're
almost an hour in and I don't want to
spend a lot of your time just tell
telling you how the competition works
I'm just going to zoom through some
categories I'm going to highlight some
key points on certain ones starting with
friends well if you want to get this
information you can go to trace lab's
website go under the search party you
can find the contestant guide there I
highly recommend before competing read
it if you go investigating people for
whatever reason whether it be
competition work nosiness whatever as
long as it's legal if it's illegal you
know don't follow this guide do do it
your own way and get caught please um
but anyway I highly encourage you to use
this because these categories whenever I
work with like private investigators or
law firms to find information about
people I apply this same exact framework
this is the way I use these categories
because it helps you with basically a
mind map and in the handouts that I gave
you via the zip file there's a file
called blank. mm you can use that on a
website called cogle Cog
l.it you drag and drop it there and all
the categories are pre-populated for you
all you've got to do is start filling in
the blanks also there's uh missing
person templates it's a zip file that is
an obsidian notebook that already have
the categories populated for you and all
you have to do is fill in the
blanks so feel free to copy reuse
plagiarize pass it on so the first
category is friends I'm not going to
spend a lot of time here it's a 10-point
category if you scroll up on someone's
Facebook and it says they have 3,000
friends don't start licking your chops
you're not going to get 30,000 points
out of that we only care about the
friends that you frequently interact
with the people who like comment share
check in with if if someone is missing
and they are sharing hey my friend is
missing I don't care they shared it
that's good enough to be a friend for me
I'll give you 10 points that's what
you're looking for there but you're
going to see a recurring theme Here of
name Alias birth date address phone
number this is universal for what we are
looking for whether it be friends family
or the person themselves will see these
specific data points
again employment same thing here's a
gotcha there say someone works for
Walmart
right stores have their own Facebook
pages now right if you go on Facebook
and you search for like say Walmart
8675309 you are going to find a Walmart
store probably not that store but a
store
and in doing
so it's a unique environment because
when you talk about corporate
Walmart they have people who work in PR
it's their whole job they're trained
they know how to keep quiet about things
they know how to express things in a
professional sense people doing it at
the store level that's a collateral
Duty I don't think someone that used to
uh have to run the trash compactor that
just happened to get promoted
is going to do more than about an hour
training before they give them access to
the Facebook page they're going to post
things that normally would not pass the
pr sniff
test check those things out and then
also you can double down on address and
phone number because say Walmart for
example you can put 702 Southwest 8
Street Bentonville Arkansas not that I
have their home office address memorized
or
anything and you could say for 79352
8000 not that I have that memorized
either I've done this demo a time or
two just a few
times you could do that but then if you
also have 555
8675309 double points so there's your
employment stuff also look for the
manager uh you might be able to see some
stuff on manager social medias but
largely no you the probability unless
someone's working for like a mom and pop
place you're not going to find a whole
lot of intelligence about a missing
person or a person in general off the
social media unless the social media is
ran by them or they are a key employee
in the
organization family same thing here's
the thing with family um I don't care
about your father's brother's cousins
former
roommate I care about your parents
grandparents children or grandchild
sibling spouse in-laws first cousins
Aunt uncle niece nephew that's about it
like oh fun fact here um did did anyone
in here know that Tom Hanks is
legitimately related to Mr
Rogers no you did you fell down the
Wikipedia Rabbit Hole
too they're six
cousins if Mr Rogers went missing do not
submit Tom
Hanks actually you probably should
because Tom Hanks played him in a movie
so that means that
there there's some similarity there but
yeah but either way that's that's an
example
thereof if you're into ENT also might I
recommend you just stay off Wikipedia in
general stay off a Wikipedia stay off a
Belling cat I block both of those at
home via my pie hole not because of
anything malicious if I catch myself on
either page my productivity is gone for
the day it's like
I go reading about Mr Rogers and then I
find out that the creator of Blues clu
studied under Mr Rogers and then created
Daniel the tiger and then I start
reading about tigers and then I learned
that tiger in Russian is Tigre and then
I get on du lingo and then I come back
and I'm like what's going on in Israel
and then I start reading about like the
differences between Arabic and Hebrew
and it's
like oh crap I a meeting 20 minutes
ago not that that really happened at
all basic subject info this is
everything about the person themselves
so it's everything we've talked about
before but uh we also mention right here
personal dating adult type profiles so
that's going to include things like
Tinder Bumble Okay Cupid all those
things feetfinder FetLife o uh only fans
all the only fans type sites that will
include PornHub x hamster all that stuff
so you probably don't want to do this
off a corporate
network if you're competing I would not
go looking on a corporate
Network just saying Craigslist and kigi
same
thing uh Reddit that also would include
two Chan 4chan 8 supposedly there's
a 16 and a 32 Chen or coming I
don't know that deals with Japanese
honorific titles If This Were an 8 hour
class I would explain it but I I don't
want to bore you with Japanese
honorifics when we're looking for
missing people
here Advanced subject info this is where
the rubber meets the road this is 100
points uh the last time my team competed
our final score I believe was like about
4,000 it's either 4,000 or 7,000 because
we we competed in an era that had way
higher Point values and then the point
values kind of corrected a little bit
so we did the math on it and our average
submission as a team was somewhere
between Advanced subject info and day
last scene
which is the next category but unique
identifiers tattoos scars piercings of
course what else can you think of that
would fall under this
category birth mark yes what
else posture and gate
yeah there was somebody in Philadelphia
that got caught uh throwing moltov
cocktails into cop cars because of a
tattoo and because of her gate when she
walked she looked like she was Slam
Dancing Yeah some people dye their hairs
their hair more often than some people
change underwear unfortunately I mean
I've been to
Defcon my my nose is still
recovering my first year at Defcon there
was a guy he was probably like 65 66 he
was walking around like this the whole
time like he was not wearing deodorant
and he was ripe my buddy we'll just call
him the the bird and me got in the
elevator with him and my buddy's like
hey man I don't know if you know this
but uh they don't charge you anything
extra to use the shower in your hotel
room and it was that day I decided that
if I ever make it big and I have a
vendor booth at a con and I hand out
swag I am partnering with
Mitchum because it's so good you can
skip a
day that's what we're doing I've not hit
it that big yet
anyway I wish I could say body odor
would be on there but if if you're close
enough to smell the person you probably
have the location flag which is 5,000
points um contact lenses who here wears
contact
lenses okay who here listen to like new
metal in like the
mid90s like Marilyn Manson type stuff
like you remember all of the uh the
focal about him and all of
that the reason he had the white eyes
cuz he burn it on stage or something
it's a contact
lens I had the same color contact
lenses but yeah contact lenses that
change your eye color that would be fall
under that category as well uh another
thing that would fall under there uh
distinct jewelry such as like a rosary
or um a
Sentimental we'll say necklace or or
bracelet or something that they have
worn repeated repeatedly in photos that
you can discern that would be an example
uh medical
conditions uh that's pretty
self-explanatory habits smoke and
drinking Hangouts what else would fall
under
this yoga yeah that could that could
actually go even bigger but yeah what
else
regular Hobbies yep what
else just say
it are they wearing red shoelaces is
that what you're getting
at I was unaware of this but uh someone
wearing boots with red shoelace is an
indicative of being a
Neo-Nazi so membership of things like
biker gangs the clan proud boys that
kind of stuff uh
if they subscribe to the opposite side
of the aisle right if they are part of
the Communist Party of the United States
and such a thing does exist um something
to that effect uh that would count um do
they subscribe to any particular
subculture are they a
punk do they subscribe to like the
Industrial
Music uh
subculture um going back to some of the
websites we talked about before I mean
are they into the whole fetish and BDSM
thing are they a swinger are they part
of a BDSM
Club I remember when I was stationed in
Connecticut in the early 2000s there was
a club in Rhode Island that I could
never go to because I was not 21 but
apparently Wednesday nights was fetish
night and I never got to go and I always
heard the stories of like the weird
things people would come in
wearing if you know they live in
Providence Rhode Island and they are
into like fetish and that kind of stuff
check out club hell I don't know if it's
still
around but it used to
be have they went missing
before brand make model and carrier of
cell phone how can we find this
information
out what's
that you're not incorrect but in these
types of
Investigations May the odds be ever in
your favor
because most platforms scrub it flicker
does not Myspace universally does not
and with um I admittedly I have not
checked truth. Soo and I have not
checked Mike lindell's Super secure
website called
Frank don't worry though I do have an
account
there um that's one way what's another
way I I thought I heard it selfies yes
what
else come
on presidents are temporary these are
forever what what am I talking
about no actually Twitter used to have
the source tag that would say uh Twitter
for iOS they've taken them away but yeah
um all right one of my favorite memes
it's Spider-Man and he's got a camera
and he goes like this it says neat what
is that indicative
of
screenshots if you have a if someone
takes a screenshot of an interaction you
can possibly see the carrier along the
top and you can look at the icons and
determine if it's Apple or Android and
if it's Apple well you already know the
brand and the model it's an Apple iPhone
with Android it's going to get a little
bit
trickier so that's something else that
you look at you can also look at
iMessage
versus
SMS although there are non-apple methods
for iMessage
now make model vehicle license plate
yeah um if you can find their obituary
or proof that they are un alived yeah
that too uh video game handles why do
video game handle why do we treat those
differently than social media handles
gaming is more of a
lifestyle to to the point of their
escaping reality they are not trying to
portray themselves
as like Joe gray the ENT guy I'm Joe
gray the most lethal as sniper on Call
of Duty whatever right I it's been
forever like The Last Call of Duty game
I played was World at War if that tells
you
anything um I don't video game but
that's indicative of it and often times
will also tell you platform and it can
also tell you when someone was active
not every social media platform will say
this person has been inactive for eight
months you've got the face what I call
the Facebook porch light which is if
you're friends with someone you can go
into messenger and see if it says
they're online and if not it says oh
they were online eight hours ago oh well
they should be waking up here in a
minute no I'm going to call them let's
wake them up wakey
wakey so yeah uh um and then passwords
fall under this as well whether it's
clear text or hash whether it's from the
clear net or onion sites it's
here um day last
scene uh if you can find uh anything for
CCTV I've only got credit for this one
time and that's because the subject's
sister shared CCTV
footage details of their physical
appearance what were they wearing had
they recently dyed their
hair something to that effect their
state of mind were they having a
psychotic break were they off their
medications had they just had an
argument with their significant
other significant weather
events who were they last seen
with h especially in like little Podunk
towns like where I live there's always
somebody who's got like a nickname like
tiny and Tiny is Almost Never small in
stature they're usually like 67 68
or an amateur sumo
wrestler authorities may know that a
missing person had a friend named Tiny
they may know about tiny in any Town USA
they may not know about tiny in other
City USA five cities
over that could be important were they
going to meet someone were they going to
sell TV off Facebook
Marketplace anything else related to
that
date advancing the timeline this is
stuff that doesn't meet the other
categories but it's strong uh the best
examples of advancing the timeline would
be if the subject likes a Facebook page
that was created after they went
missing I've seen that happen a few
times
have they posted after they went missing
there was a missing person that was
missing
from
Texas I
believe and during the 2hour exercise in
a class we were actually looking for
this person they were on Facebook live I
was like why could this have not
happened to me during competition this
is 5,000
points except it wasn't
them somebody had found their phone
under an underpass and was using it to
taunt the subject's
parents but that would have hit
advancing the
timeline
because this drunk dude in Birmingham
Alabama with an out of tune guitar
trying to play
Freebird I wish I was
kidding I'm toned deaf and it was bad
like I even thought it was
bad it was that kind of bad like I
probably couldn't have played it any
worse
myself um based on that lead though uh
they were able to discern that the
person was in custody so they were found
safe so positive outcome
there but if you have any evidence of
someone being somewhere between the date
they went missing and right now that's
more than say three days to a week in
the past that counts for advancing the
timeline
and then you know sometimes the judges
you might submit something and say ah
this is just basic subject info and the
judge because most of the judges have
done this before will be like no this is
not basic subject info congrats my
friend you just got 600 extra points so
judges can change your point
values in competition you've got dark
web I'm not covering it in this I don't
cover it in The 8 Hour course there's
too much liability with it there's too
many ways for it to go sideways I can't
ensure that you have the appropriate
mitigations in place and I don't want to
be responsible or reliable for any bad
things that could happen that being said
the dark web is not like it's a Cess
pool don't get me wrong but it's not the
big boogey man that a lot of people
think it is um trivia question in all
the investigations I've
done how many times do you think I've
actually found meaningful stuff on the
dark web
yep just one and the only reason it was
meaningful is because uh it involved
some
appointed bureaucrats politicians we
I'll stay vague and uh it was going to
litigation and the client was like leave
no stone uncovered and I was like you
sure and they're like uh one of these
people is a judge you probably want to
check the dark web duly
noted because this was a few hundred per
hour
and they're like money is No
Object say no more
fam twist my arm I'm G to get one of
those big old VPS instances on digital
ocean I'm not messing with one of those
$5 doll ones on this
one this one's going to cost at least
32 but yeah um but with it if you can
find any evidence of trafficking of them
selling anything whether it be drugs
themselves or PlayStations or scratched
off steam gift cards any evidence of
that it's a thousand points uh yeah you
can find passwords there but they still
count as advanced subject info and they
they must include the onion URL location
basically you have
about in some cases it could be a
three-day window in some cases it could
be up to a week realistically I like to
say probably between three days in this
very moment um you get it it's 5,000
points I'll ask Belo but the last time I
asked for this stat was probably a year
and a half ago through the years that
Trace lives had been running the
competition I think they had fewer than
five accepted submissions for this a lot
of a lot of teams get in they're like
we're looking for location location
location here's the thing the flags in
this competition are not
predetermined not every person is going
to have every flag in fact most people
are not going to have this one if you
want my honest advice don't don't even
worry with this flag if you come across
something and you think you might be
able to shoot the moon on it go ahead
dislocate that shoulder with that reach
I do it I did it all the time I was
Infamous I mean I would argue with
judges and I encourage you to as well if
you do decide to compete immediately
make contact with your judge so that
your judge knows hey if I have a
question about this team ask this person
uh because sometimes it may just be you
need to explain something a little bit
better in your submission that's really
all it boils down to but sometimes
judges do get things wrong and sometimes
I'm right I mean most of the time I mean
I did help author the judge and
contestant guide so I mean there was
that but you know it disagreements
happen but sometimes you do have to
escalate it and if you when you do
compete if you don't agree with what
your judge is saying escalate it to
someone like human decoded or
B there's a joke that even though I
never competed in the same building as
them during competition that they could
hear me coming down the
hall it happens uh mvo this is an award
that they hand out it's one single award
per competition if you compete at Defcon
this is what gets the black badge but
you have to be nominated by your judge
and it's something it could be a lowo
value it's an Innovative
technique that arrives at a conclusion
more so than the face
value so
let's talk about
tools how about that mayor James Keenan
right he's about to turn 60 and believe
he's about to get his purple belt or his
brown belt in
Jiu-Jitsu okay anyway all joking aside
uh what's your favorite ENT tools for
looking for
people what was that Google I agree what
else
you you technically are correct maltego
is an ENT tool that allegedly can help
you find people but in the few times
I've used both the free and the paid
version of maltego I've gotten far too
many data points to consider valuable
you put in a cryptocurrency address and
like you get like 10,000 things back
it's like I just wanted to know the
transactions it's too noisy in my
opinion but some people thrive with it I
personally just
I heard something else back there what
was it social media
yes Judy records yes I actually uh
recorded a uh YouTube video about that
big fan of Judy
records love it what
else tax records tax records yes you
know I always heard this from old people
there's two things guaranteed in life
you're going to pay taxes and you're
going to die and guess what they both
create public
records especially if you don't do the
first
one that tends to create multiple types
of public records that you can find on
Judy records or Pacer or Court
listener what
else voter records that's going to be
hit or
miss I will say that in some states I've
tried to find voter records and it's
like enter the last four of the social
it's like well I know the last four
I'm not about to put it in though
because again I'm not a lawyer but I
would fear that that could be construed
as violation of the
cfaa I wouldn't even test
it or if you're going to test it talk to
a lawyer first one that you're
paying um what
else yeah if you can come across it what
else
Inc competition that's inadmissible but
in the real world yes but more
importantly the comment sections from
those because in competition if it comes
from law
enforcement Media or other missing
person sites like missing in America uh
the Charlie project or webs it's
inadmissible generally
speaking but but you know what is
admissible on all of the above the
comments you got to wait through all the
people thoughts and prayers are shared
in insert City here and people putting
the high five emoji thinking it's the
hands like
this once you get past all of that you
could actually get some legit Intel out
of the comments so you've got things
like LinkedIn Twitter Facebook Snapchat
I mean parlay it's gone right now it'll
be better back I'm sure I mean it's a
company that every single employee is a
software developer how can it not come
back I mean they had the most Stellar
code that's why I wrote a 60-page report
after I found their
bugzilla via
DNS I didn't even do anything sneaky I
literally dropped their domain and
security Trails that's how I found
it um parlay miwe truth social Frank gab
all of that Blue Sky all the mastadons
can anyone name every single Mastadon
server I'll give you a coin if you can
um search engines who here has heard
of
metager who here has heard of gigablast
Kid Rex dog pile who here uses Duck Duck
Go who here uses Duck Duck Go because
they do things for your
privacy who here
uses
Bing everybody that put their hand up
for Doug dug go put your hand back up I
don't have a big problem with duck ducko
but I have a problem with duck ducko my
problem with duck ducko is they're
commercials number one their company
that's charging you
nothing to give you search results yet
they have money to license a sting of
the police song for a National
Commercial they have money for
billboards
how are they getting said money where
are they
based anyone know what state they're
based
in and if you're if you're of the
tinfoil hat persuasion the fact I said
what state they're based in should
probably it is
Pennsylvania yeah so they're based in
the US which I'm not anti-American by
any stretch of the imagination but if
I'm doing something that's privacy based
I prefer it to be in Switzerland
Because unless the Swiss Swiss
authorities ask for it those companies
are not required to give anything
up if the US authorities ask for it they
are and I don't care what anybody says I
don't care if it's proton I don't care
if it's mulad I don't care if it's duck.
go or Google everybody is keeping some
sort of log about you
period I mean I love all of y'all
everybody love everybody right if you
remember Jackie Moon and semipro
everybody love everybody it's in
here but if I stand up a platform and I
allow you to use it and it's either I go
to jail or you go to jail for something
you did Bye Felicia
sorry I love y'all but I don't love you
that
much I'll do anything for a dollar but I
won't do
that it's just the way it is um man I
just dropped I dropped so many earworms
I was trying to get you all with
earworms I got
myself that's why you don't cross
streams anyway
um but to that end Doug Dugo what they
do is they repeat their search into B
and if you search for something that has
an e-commerce element to it they affix
an affiliate tracking code and get paid
off of
that honestly I don't have a problem
with
that I have a problem with the fact
of they are still collecting things
about you their privacy policy is
deliberately vague about what is
personal information
they don't specifically Define things so
honestly if I have to pick between them
and Google I'm going with
Google Google doesn't hide their
advertising
machine I mean Google pays for
commercials but Google's commercials are
more about telling you how great their
products are or how great they say they
are um and not how bad everybody else is
right I actually found a missing person
unfortunately not in competition again
because I found their username and I
found them on cash app and I'm like
woohoo yeah cool there's no
transactions put it in the username
search engine oh here's an Instagram or
a Tik Tok something they were bragging
about smoking
weed well you know people who smoke weed
what's their favorite numbers to to
attach to a
username 420 put the same username back
in cash app bada bing boom boom boom
boom boom boom
was shooting fish in a
bucket it's just like when I was in high
school all the all the people who
thought they were hardcore they had to
have like a username with 666 in
it I mean got to stay away from all
those people in our industry that have
that whole
1337 stuff you
know everybody gets so wrapped around
the axle about the 1337 they don't even
I mean they can't even answer what
happened to 1338
yeah so yeah but anyway you've also got
the internet at large right you've got
your search engines I'm not going to
beat you over the head with search
engines what I will tell you with search
engines is if you are searching for
people you're going to probably have
better luck on
Yandex Yandex has a better facial
recognition and classifying
infrastructure than Google Google
oftentimes unless you're dealing with a
celebrity or something that went semi
viral
uh it's going to say man women boy girl
that's it if you're looking for
Landscapes Google oftentimes is probably
the best but not always any of them will
work in that case the only thing with
reverse image search I would say stay
away from is 10i and that's because it
doesn't really find anything except for
it is good for
Logos the internet at large that's
basically anything else that could be
someone's personal blog that could be
the comments on a new site that could be
anything anybody here use what's my
name if you don't you can use the
web-based version at what's my name.app
there's a standalone version you can use
as well but there's a little bit of a
hack you have to do because the python
based Checker is no longer on the active
Fork of GitHub so so you have to find
the fork that it's in and W get that
fork and unzip it and do a few
things it's not illegal or anything to
do it it's just it's an unintended
consequence and then of course Recon NG
Recon NG can be fun what's my name is
actually built into Recon and G as the
profiler module it uses the same Json
file but uh what it boils down to is
Recon and G honestly just doesn't work
too well for people spiderfoot can work
pretty okay for people but it takes
forever and just like multigo it creates
a lot of
noise although you can move your mouse
across the screen with spiderfoot and it
will not make alien noises at you like
multigo will a that's the thing I hate
most about
multigo if if I'm listening to my music
I do not want multigo yapping at
me
so okay we got sources and methods we've
already touched on some of this you've
got the dating apps you've got the
public records you've got the data
breach dumps what's some good data
breach sites
yes breach directory.org yep you've also
got things like
dehashed Intel
x.o snoo
base here's the
problem have I been pwned is free the
others are
not
so in my day I have encountered a lot of
different
websites that have came and gone leaked
Source was a really good one and then it
got
seized so if you're going to subscribe
to any of these sites Intel X you're
probably okay the others I would
recommend probably not subscribing for
more than a month or a quarter at a
time because I say this often if I had
if I did not have bad luck I would have
no luck at all I guarantee you if I paid
the $180 which is really not that much
in the grand scheme of things when you
look at how much palente here costs when
you look at how much Echo set costs um
how much Twitter API
costs um don't get me started on that
but my luck I've spend
$180 I would get through about four
queries and it would get seized that's
my luck so I spend $15 a month that's
what I do with it um but that's a good
place for it um I'm going to pose
another question for for
you social media so you have the whole
sock Min acronym right if we want to
play the whole acronym sup social media
intelligence is sockman purely
subordinate to
ENT even if someone has a private
Twitter you could still create a sock
and work your way
in
but the payment thing so on the topic of
paid things has anyone here ever heard
of the firose
apis so the Twitter API I was
complaining about was a user-based API
it's tied to a particular user account
if a user blocks the account tied to
that API that API instance cannot see
anything that user
posts those run what 1,500 a month on
the low side then you have the fire hose
apis they are not tied to users that's
what organizations like paler eosc uh
and a lot of the sentiment analysis
organizations that's what they are using
they are not tied to a user they are
looking at things in Broad stroke they
are trying to
find hashtag Trends and stuff like that
um those are prohibitively expensive
you're talking upwards of $505,000 per
month so anyone has the ability to sign
up for one not everyone has the funds to
do it so therefore I don't consider that
to be open source so you have that
perspective but there's another one as
well in the US we have these pesky
things called warrants subpoenas and
national security
letters sometimes they will find their
way to Pacer Judy records court listener
in court
proceedings and sometimes they don't
when they do then yes that is the that
is the enrichment to ENT in some cases
you'll never hear about them and
therefore it is not
open source so they are if you wanted to
consider them a VIN diagram they are the
MasterCard
logo that's basically what it boils down
to so that's the end of section
one uh we have about 20 slides to go uh
what do you all think about like say 5
minute break just a stretch
whatever all right I will set the timer
on on my watch and uh we'll get started
in 4 minutes and 55
seconds all right let's talk some
techniques here so when we talk ENT
techniques realistically we are talking
about more than snooping through social
media I will say though in all the times
I've been involved with people
investigations the majority of My
Success has came from one of two things
social media and Google
dorks like using tools like this G hunt
hhe what's my name spiderfoot Recon and
gief minimal return minimal but it's
more than just snooping
through you can fall down that rabbit
hole but you want to look for
significant dates you want to look for
things of value as it relates to what
you are trying to learn for a missing
person you're not trying to learn
everything I mean there's another CTF I
will mention it during my talk tomorrow
morning I'm not going to mention it in
here I will say it's an anti-trafficking
CTF um you've got to have a little bit
more of I'll just say
hardened innards so to speak to take
part in that because you're going to see
more gut-wrenching stuff and you're
going to see more explicit stuff you're
going to be in search of explicit stuff
but in those events um it's easy to fall
down the rabbit hole of you do the
search for the phone number or the
handle or whatever and then you just
start going tat tat tat and it's like
I've got all these tabs open but I don't
have any intelligence what what's up
with this so that's ultimately what you
want to try to work for um and like with
the anti-trafficking
perspective hidden messages exist
like what are some examples of some
we'll say
PG-13 terminology associated with
trafficking what about uh the Pittsburgh
Pirates or the Philadelphia
Phillies what does their baseball ball
cap have on
it a p what starts with p
it's what Jay-Z said he was
doing
pimping the Milwaukee
Brewers because it's got an M the
baseball and
B that is used for the acronym MO and
I'm not getting into what that
means when you talk about gangs you know
you see a lot of see a lot of fellows
walking around with nothing but red
clothes on
all of a sudden you're looking at CCTV
footage and they encounter someone
wearing all blue they beat the crap out
of him what's that indicative
of yep I mean part of the resources in
the zip file I gave you uh deal with
like identifying gangs right like that
things like the ARA Nation
MS13 uh various cartels uh the Crips the
Bloods uh you know the Latin Kings all
of those when when you deal with that
there are a lot of hidden messages that
unless you think about it or you're in
the no you will not like an average
person will just go right past
it during the anti-trafficking CTF that
I took part in last I actually found one
of they don't call them pimps they call
them Persons of Interest I found one of
them because he the leader of the stable
so the victim that is in charge of all
the other victims they call the bottom
be aware of the hidden messages we won't
get too deep into that with weather I'm
going to walk you through this just in
the interest of
time extreme weather if it's really cold
or really hot that can speak to
someone's
actions that's something to be aware of
uh extreme weather just like the
tornado so you can go to like acue
weather and you can actually tamper with
the URL change the month and then you'll
see in there it'll say like 2023 October
you can change that to 2015 or whatever
you can do that tamper with that and
look at the days around the event that
you are looking for and here's that
hypothetical scenario so Jane do went
missing from Dennis Acres right there is
the average weather that's as average as
the day is long but then you do the
Google search for weather on that date
that's what you
have I was going to actually do some
demo stuff with you but if you're
interested in stuff here are some
organizations you can take part
in safe Escape they seek to help
domestic violence victims get out and
stay out I have a volunteer advisory
role with them Trace Labs we've talked
about them atii they run dark web aons
uh they primarily focus on uh dark web
and cryptocurrency and players runs the
national trafficking hotlines if you're
interested in some more of my
Shenanigans including YouTube videos uh
streams podcasts Etc
you can find it all those links here
ent. Mobi is my bitly redirect domain so
it is actually safe as a practice for
social engineering I never send
malicious things under my real name so
if I'm authentically saying it's real
like you're good I'm not going to trick
you if you're interested in on demand
courses the link is there as well
academy. thee ens.com here's my anti-in
schedule starting in January so OBC if
that's your thing January 29th will be
your date uh report writing is on
February
16th 8 hour version of this on February
26th crypto on March 8th image
Intelligence on the 25th Recon and on
April 12th and business on May 6th
besides that in the interest of time
here are links to all of my socials
thanks everyone