Resources, methods, and observations from open-source investigations and technical research. Topics include information assessment, digital infrastructure, investigative workflows, and the online information environment.
A bilingual field guide to search, public records, and verification across the Chinese-language internet.
(Kali Linux & Ubuntu, Passive + Active Recon, API Keys, Logging & More) OWASP’s Amass is a fantastic tool, but unfortunately, its documentation is lagging
Another update is I got accepted to present at Black Hat Arsenal in Las Vegas this year, which I’m super excited about! If you’re not
In my last post several weeks ago, I stated that I was on a cruise and was planning on taking a short break from blogging.
I’ll try to make a few posts from my cruise this week but no guarantee. Happy easter all!
OpenAI just launched two new models of ChatGPT, o3 and o4-mini. I played with giving o3 images and asking it “where exactly was this image
Did a poster signing today at the SANS Cyber Defense booth and am now at dinner with an amazing group of people.
I’ll be giving a third talk at GISEC now discussing cutting edge techniques using AI for audio analysis.
I’ve agreed to give a second talk at the GISEC conference in Dubai next month. Here is the outline: Title: 24/7 Threat Tracking on Telegram:
I was doing a demonstration for a tal,k and I needed to demonstrate deep research, so I picked a topic that I had just written
I always have a great time teaching for SANS, but the big conferences like Orlando and Las Vegas always hit harder with bigger crowds, more
I had a student reach out and ask about ways to “unredact” information from a PDF. They work for an organization that releases a lot
It was a huge honor to speak at the 2025 Supply Chain Technical Exchange Symposium yesterday. Got to see a few old friends and make