Digital Forensics Tips

  Last night I received an email letting me know I had received access to Google’s answer to ChatGPT, Bard. I’ve heard mostly negative reviews about Bard so far, so I wanted to test it on a few OSINT tasks similar to tasks I asked ChatGPT to perform in my recent “ChatGPT for OSINT” webinar. The first thing I had it help with was profiles for a sock puppet account. I asked for a French woman in her 30s, the same example I used for ChatGPT. I guess it didn’t feel the name to change the last name much 😊 When I asked for a profile and bio, this is what I got: I asked it to rewrite the bio in first person and to make it more casual: One thing that’s important in OSINT is knowing what sites and apps are popular in the part of the world where your target is located. If someone asked me what apps were popular in the U.S., I could answer with confidence. If someone asked me about Bolivia, not so much. So, I asked Bard: The list LOOKS solid, but I would like some evidence and stats to b...

 Earlier this week SANS hosted a one-hour Webinar "The New OSINT Cheat Code: ChatGPT". You can watch the webinar and view the slides here:  https://www.sans.org/webcasts/new-osint-cheat-code-chatgpt/ I used up the entire hour of the allotted time giving the presentation so I promised that we would gather the questions and I would answer them on my blog. I haven't edited these for grammar etc, just pasted in the questions and responded to them. Q: If people were proficient in "google dorks" - to uncover whatever they may find. How does the landscape shift if future   iterations of ChatGPT adapts to the majority of population's search as it comes to understand what people are seeking out. A: I can easily see “Google dorks” becoming less important in the future as the focus shifts towards writing quality prompts explaining EXACTLY what you’re looking for and letting that specificity improve your signal-to-noise ratio. I’m picturing an enhanced user exp...

  GitHub with ChatGPT prompts: https://github.com/f/awesome-chatgpt-prompts Matt’s Blog: https://www.digitalforensicstips.com/ Blog post on Hugging Face app “Face Swap”: https://www.digitalforensicstips.com/2023/03/let-hugging-face-give-you-happy-face.html Blog post on OpenAI’s Whisper tool for transcribing audio or video to text: https://www.digitalforensicstips.com/2023/02/transcribing-like-boss-for-no-cost.html SANS SEC497 Practical Open-Source Intelligence (OSINT) course: https://www.sans.org/cyber-security-courses/practical-open-source-intelligence/ CyberChef: https://gchq.github.io/CyberChef/

Years ago, a co-worker mentioned that he used to see the band Offspring play in tiny venues in southern California. They were proud that they were fans long before the band was widely known. ChatGPT has become a public phenomenon, making the Machine Learning (ML) and Artificial Intelligence (AI) spaces part of the mainstream. If the thought of a playground full of emerging ML tools sounds like something you’re interested in, you should check out Hugging Face. Huggingface.co is a site designed to let developers of ML apps have a place to test their tools and collaborate with others. A nice side effect of this community is that we have a place to play with these tools before they’re mainstream. To see the most popular tools, you can go to the “Spaces” section of the site and change the sort order from newest to “Most Likes.” Some of the tools are just fun to play with. Here I use one called AnimeGanv2 to turn a picture of me into an anime style images.  In addition to being fun...