OSINT Provides Valuable Context Moving Data to Intelligence

07/09/20 • 24 min

Episode 14 of the podcast covers techniques and tradecraft of open source intelligence and investigations. How these investigations can help businesses and executives avoid online crimes and where automation plays a helping hand.

(00:44) Intro
(02:51) Question 1: What is the difference between a cyber threat intelligence analyst and an OSINT investigator?
(04:22) Question 2: What are some general skillsets you need to be a good online investigator and what kinds of security problems do you solve?
(09:50) Questions 3: Many people don’t know where to start when they are being scammed, extorted, or hacked. What are the methodologies you’d like to spread to level the playing field? Examples?
(13:57) Questions 4: What can executives know about removing PII from the internet to protect themselves from physical and cyber attacks?
(16:50) Question 5: What kinds of interesting datasets are out there in this profession? Where is automation helpful?
(23:39) Closing

(00:44) Intro
(02:51) Question 1: What is the difference between a cyber threat intelligence analyst and an OSINT investigator?
(04:22) Question 2: What are some general skillsets you need to be a good online investigator and what kinds of security problems do you solve?
(09:50) Questions 3: Many people don’t know where to start when they are being scammed, extorted, or hacked. What are the methodologies you’d like to spread to level the playing field? Examples?
(13:57) Questions 4: What can executives know about removing PII from the internet to protect themselves from physical and cyber attacks?
(16:50) Question 5: What kinds of interesting datasets are out there in this profession? Where is automation helpful?
(23:39) Closing

Previous Episode

Gaining Actionable Insights to Global Physical Security Threats

Episode 13 of the podcast covers the importance of building rapport with the workforce to gain actionable insights to global physical security threats.

(01:09) Introduction
(01:48) Question 1: The world of physical security controls has changed a lot in the last ten years with many threats emanating online. How do you use cyber threat and OSINT information to evaluate and reduce risk to physical threats?
(03:03) Question 2: How important is the attribution of those threats in a digital environment?
(04:22) Question 3: From an executive protection standpoint, how do you minimize risk to senior executives that emanate online particularly including home, travel, and workplace security?
(06:40) Question 4: From a privacy perspective, how do you build rapport with the workforce to bring forward physical security incidents?
(09:40) Question 5: What metrics and impacts are important to capture to show effectiveness of your program(s)?
(12:09) Closing + Bonus: What trends in the security industry keep you up at night?

Next Episode

Analysis of Betterment and Exclusions within Cyber Insurance Policies

Episode 15 of the podcast covers how a cyber incident is defined by insurance carriers, how that is changing, and an in-depth analysis of betterments and exclusions often overlooked in cyber insurance policies.

(00:48) Intro
(01:13) Question 1: How do most cyber policies define a cyber incident?
(03:54) Question 2: What do cyber policies cover once a cyber incident has occurred?
(04:44) Questions 3: With betterment language, what will cyber insurance pay for with regard to remediations?
(12:30) Question 4: What are important exclusions to pay attention to and what can be done to have them included in your policy
(16:33) Question 5: What are some new themes and trends you see going forward in the cyber insurance market?