My employer (SecureState) has released two white papers as part of our Social Media Security Awareness Month. You can also download some cool wallpaper for this month created by Rob our graphic designer (see the picture on the right). 🙂 First is some research several of my colleagues and I worked on. The paper is titled: […]
Two New Social Media Security White Papers Released Read More »
A few weeks ago the fine folks over at Paterva released the next version of their information gathering tool, Maltego 3. Ever since day one of the product I’ve been a huge fan and have used it in multiple penetration tests and various reconnaissance activities. I know I’m not alone as many of you in
Overview and Review of Maltego 3 Read More »
As most major news organizations and blogs have covered the changes that Facebook has made from a high level, I wanted to focus this post specifically on Facebook’s “Open Graph”, “Social Plugins” and “Instant Personalization”. In my opinion, these are three changes that will significantly impact the way you and your friends use Facebook. As
Everyone has probably already heard that Facebook rolled out new privacy settings today. If you haven’t seen them or gotten the following pop-up box on login…you will soon: There are a great deal of articles already out about how this is such a great improvement and how these new settings give you more control over
New Facebook Privacy Settings: For Better or For Worse? Read More »
This is the final article in my series on Enterprise Open Source Intelligence Gathering. This information relates to the main topics from my presentation that I am giving this week at the 7th Annual Ohio Information Security Summit. For more background information, see part one. If you missed part two (blogs, message boards and metadata)
This post is part two of my three part series on Enterprise Open Source Intelligence Gathering. This information relates to the presentation that I am giving this week at the 7th Annual Ohio Information Security Summit. For more background information, see part 1. Part three will be about putting together a simple monitoring program/toolkit and
UPDATE: You can now download my slide deck from SlideShare. Next week I will be speaking at the 7th Annual Ohio Information Security Summit on “Enterprise Open Source Intelligence Gathering”. Here is the talk abstract: What does the Internet say about your company? Do you know what is being posted by your employees, customers, or
Enterprise Open Source Intelligence Gathering – Part 1 Social Networks Read More »
If you are interested in using Twitter for information gathering/mining about potential targets for a penetration test or for “other” research…I highly recommend the very comprehensive article that Lenny Zeltser from SANS put together. Twitter is really becoming a great tool for not just marketing yourself or your business but also to find out detailed
Twitter for Information Gathering Read More »
Just a quick blog post about the latest release of Maltego that was just announced. This is great! You can now create custom transforms that will integrate directly with Maltego! This is something that many of us have requested and it’s finally here. From first glance it looks like you can code them in any
Maltego 2.0.2 Released with Local Transforms! Read More »
Looks like the fine folks over at Paterva have released version 2.01 of Maltego. If you don’t know what Maltego is…look here. Check out some of the changes and new features. From the announcement: Features: * Copy and paste to/from graphs * Copy and paste to/from text * Above can also function as “import” *
Maltego 2.01 Released Read More »
