Themes for 2023

In a recent Discord chat, someone told me that they hated new year’s resolutions, and greatly preferred new year’s themes. I thought about it for a minute, and agreed that was a much better approach. Instead of a goal like “lose thirty pounds”, an overall theme of becoming a healthier person. That is one of my biggest themes for 2023 but another of the things I want to focus on this year is producing content. 

I wrote a blog post last which normally isn’t a big deal, but that was my first blog post since... (checks notes) … May of 2020. I could blame it on Covid or some other excuses but the fact is I was just burnt out. I was working a fifty hour a week job with the federal government and spending my vacation time teaching SANS classes. These are all good things and I’m not complaining, I just didn’t really have much energy left for producing much content outside of the occasional conference talk. 

Early in 2022 I received the opportunity to write an OSINT class for SANS which I knew would be a heavy lift in addition to my day job, but years ago a friend told me that if life presents you with an amazing opportunity, but you’re not sure if you can do it, say yes and figure out how after. I said yes and started cranking out content in the evenings and weekends for most of 2022. Fast forward to 2023 and a lot has changed. In late 2022 I retired from my job with the federal government after over 21 years and I have more time to focus on my consulting practice, Argelius Labs. I’m still busy, but I feel like I have a lot more control over what’s on my plate. 

With this control, I promised myself that in 2023 I would get back to producing more content. A blog post every day seems far-fetched, but one a week seems very doable. 

I have a few things (both 100% free) coming up soon including a Flashpoint webinar on getting started using APIs for OSINT on February 15th you can sign up for here. I'm looking forward to this and have been playing with ChatGPT a bit which I'll talk about here too.

I’ll also be hosting a workshop with SANS where we talk about metadata! Metadata is useful far more often than many people realize and we’ll cover some edge cases that have been useful in real world problem solving. You can register for the “Metadata Madness” workshop here.

Comments

Post a Comment

Popular posts from this blog

SANS Index How To Guide with Pictures

Image
I got some great advice recently on creating an index for SANS exams and I wanted to write a blog post to share it with others. I took the SANS FOR 508 Computer Forensics course in 2008. It was way over my head but I had a great time and learned a ton. A few months ago I finally decided to go for my GCFA certification. I had four year old material from a course that had been completely revamped and no index. I passed the exam with a score in the 80s but it was a grueling experience. I had to rush on the last part of the exam and never felt comfortable. A few months after my GCFA exam I got an opportunity to attend a SANS SEC 504 class. I really wanted to prepare for my GCIH exam the right way so while I was at the conference I asked several individuals how they prepared their index. Most people told me that their indexes were 8-10 pages. A lot of these people had more SANS certs than I have friends so their methods obviously worked for them. My class had a teaching assistant (also SANS...
Read more

Leveling Up Your OSINT Game: Creating a Professional Email on a Budget

Image
  Some sites do not allow new users to register with a “free” email such as gmail.com or outlook.com. This is especially true if a site offers some free capability, but with the hope of converting you into a paying customer. Most OSINT practitioners would prefer to avoid using their “real” work email to signup for services, so the easiest solution is to register a domain (if you don’t already have one) and setup an email account using that. In this blog post we’ll explore how to accomplish this task as easily, and inexpensively as possible. Step 1: Acquire The Domain Many of us have likely purchased a .com or other domain over the years. Maybe you still have some, or maybe they expired. For years the only domain registrar I used was Google Domains. It was easy, inexpensive and provided free private registration to help enhance privacy. Recently, Google decided to get out of the domain registration business and is in the process of transferring all registered domains to Square...
Read more

Introducing FaviconLocator: The Eazy Button to Searching by Favicon

Image
  Favicons (short for favorite icons) are the cute little pixelated images that appear next to the site name in web browser tabs, bookmarks, etc. In the image below we can see the iconic GitHub logo on their site and the KFC logo on a bucket of chicken on their site. Originally, favicons were designed to add a touch of professionalism and branding, but for anyone who is like me and has over a dozen tabs open at any time, favicons are the only thing displayed and how I navigate tabs. Most of us rely on favicons on a daily basis but many never think of them as a tool we can use in OSINT and CTI investigations. That’s what we’re doing to talk about here as well as introduce a new tool. In addition to branding and aiding in navigation between tabs, favicons can serve as unique identifiers for websites. These unique identifiers can help us: Trace the online presence of organizations and discover obscure digital assets Map the online infrastructure of potential threats Potentially de...
Read more