How to Investigate Phishing Campaigns скачать в хорошем качестве

How to Investigate Phishing Campaigns

This is intended to be a comprehensive walkthrough of an OSINT-based methodology the speaker uses for investigating phishing websites: Checking IP addresses - their basic details, reputation, associated services and domains, etc. Researching DNS records and DnS variations Examining the technology stack - what makes a particular website and what clues can be found within Webpage SHA256 hash examination - when can it be useful, when it can't and why Google tags examination and related metadata (if present) Security certificates - what makes them useful for OSINT Navigating the webpage's source code / "the F12 hacking" Favicon search Other forms of interaction for gleaning live data (where applicable) To read Maciej's blog post about a large phishing campaign using a Kr3pto phishkit - https://www.osintme.com/index.php/202... About the Speaker Maciej Makowski - Infosec & OSINT blogger. Ex law enforcement. Graduate of University College Dublin and National College of Ireland. Author of osintme.com, a blog on OSINT & digital privacy. View upcoming Summits: http://www.sans.org/u/DuS Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE #OSINTSummit #OSINT