Thread by @BillyBostickson, 1/2 Tools and guides to conduct online investigations1. Google Earth 3Dhttps://www.bellingcat.com/resources/how-tos/2019/03/05/how-to-use-google-earths-three-dimensional-view-feat-syria-yemen-sudan/2. Reverse [...]

1/2 Tools and guides to conduct online investigations
1. Google Earth 3D
https://www.bellingcat.com/resources/how-tos/2019/03/05/how-to-use-google-earths-three-dimensional-view-feat-syria-yemen-sudan/
2. Reverse Image Search
https://www.bellingcat.com/resources/how-tos/2019/12/26/guide-to-using-reverse-image-search-for-investigations/
3. Flight Tracking
https://www.bellingcat.com/resources/how-tos/2019/10/15/a-beginners-guide-to-flight-tracking/
4. Linkedin Research https://www.bellingcat.com/resources/how-tos/2019/03/21/bellingcats-invitation-is-waiting-for-your-response-an-investigative-guide-to-linkedin/

Bellingcat’s Invitation Is Waiting For Your Response: An Investigative Guide To LinkedIn - bellin...

Whether you’re investigating a company purporting to have damning information on Robert Mueller or conducting research on anti-Islamic State foreign fighters in Iraq and Syria, LinkedIn can serve as...

https://www.bellingcat.com/resources/how-tos/2019/03/05/how-to-use-google-earths-three-dimensional-view-feat-syria-yemen-sudan/

2/2 Tools and guides to conduct online investigations
5. Phone Contact Book Apps
https://www.bellingcat.com/resources/how-tos/2019/04/08/using-phone-contact-book-apps-for-digital-research/
6. How To Track Illegal Funding Campaigns Via Cryptocurrency
https://www.bellingcat.com/resources/how-tos/2019/03/26/how-to-track-illegal-funding-campaigns-via-cryptocurrency/
7. TweetDeck Research
https://www.bellingcat.com/resources/how-tos/2019/06/21/the-most-comprehensive-tweetdeck-research-guide-in-existence-probably/
8. Photographs https://www.bellingcat.com/resources/how-tos/2018/10/24/dali-warhol-boshirov-determining-time-alleged-photograph-skripal-suspect-chepiga/

Dali, Warhol, Boshirov: Determining the Time of an Alleged Photograph from Skripal Suspect Chepiga...

On 11 October 2014, a Facebook profile to a person named “Ruslan Boshirov” — the cover identity of Skripal poisoner Anatoliy Chepiga — posted a lone photograph of Prague, showing the heavily traffi...

https://www.bellingcat.com/resources/how-tos/2019/04/08/using-phone-contact-book-apps-for-digital-research/

Tools and guides to conduct online investigations
Open Source Intelligence/Investigation
Bellingcat’s Online Investigation Toolkit
https://docs.google.com/document/d/1BfLPJpRtyq4RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit
OPEN SOURCE INTELLIGENCE
TOOLS AND RESOURCES HANDBOOK (2018)
https://www.i-intelligence.eu/wp-content/uploads/2018/06/OSINT_Handbook_June-2018_Final.pdf

4/x Tools and guides to conduct online investigations
Recommended Reading:
https://www.i-intelligence.eu/wp-content/uploads/2016/11/Recommended_Readings_May_2015.pdf
A Taxonomy of OSINT Sources
https://www.i-intelligence.eu/resources/taxonomy/
Newsletter OSINT:
https://www.i-intelligence.eu/resources/newsletter/
Tools and Resources Handbook 2016:
https://www.i-intelligence.eu/wp-content/uploads/2016/11/2016_November_Open-Source-Intelligence-Tools-and-Resources-Handbook.pdf

Newsletter–i-intelligence

Stay up-to-date on the work we do, the courses we provide and our recommended readings

https://www.i-intelligence.eu/wp-content/uploads/2016/11/Recommended_Readings_May_2015.pdf

5/x Tools & guides to conduct online investigations
The Open Source Intelligence (OSINT) toolkit is result of crowdsourcing by OSINT community members on GitHub.
https://www.andyblackassociates.co.uk/resources-andy-black-associates/osint-toolkit/
When you first see a list of tools like this, you probably think, blimey! where do I start?

OSINT - Open Source Intelligence Toolkit - 100's of useful tools

OSINT toolkit is derived from i-intelligence’s OSINT Tools and Resources Handbook - 100's of useful links and tools for researchers

https://www.andyblackassociates.co.uk/resources-andy-black-associates/osint-toolkit/

6/ x Tools & guides to conduct online investigations
The key is to build a workflow that uses a mix of tools and techniques to achieve a required outcome. This excellent guide will help beginners to learn & experienced OSINT hackers to discover new tricks
https://www.randhome.io/blog/2019/01/05/2019-osint-guide/

7/x Tools & guides to conduct online investigations
Sample Investigation listing tools used: https://leadstories.com/hoax-alert/2019/01/here-are-the-tools-and-methods-we-used-to-map-a-macedonian-fake-news-network-and-the-people-behind-i.html

Here Are The Tools And Methods We Used To Map A Macedonian Fake News Network And The People Behind...

Sherlock Holmes had his magnifying glass. Hercule Poirot relied on his "little grey cells". But the 21st century internet detective...

https://leadstories.com/hoax-alert/2019/01/here-are-the-tools-and-methods-we-used-to-map-a-macedonian-fake-news-network-and-the-people-behind-i.html

8/x Tools & guides to conduct online investigations
The Open Source Intelligence resource discovery toolkit
http://rr.reuser.biz/
Useful, but not much on China though.

9/x Tools & guides to conduct online investigations
Old School US Army Manual:
fmi 2-22-9
https://fas.org/irp/doddir/army/fmi2-22-9.pdf
and atp 2-22-9
https://fas.org/irp/doddir/army/atp2-22-9.pdf

10/x Tools & guides to conduct online investigations
Open Source Intelligence (OSINT) Link Directory (171 pages)
https://search.wikileaks.org/gifiles/attach/10/10459_Open%20Source%20In.pdf

11/x Tools & guides to conduct online investigations
A measly 6 page introduction from NATO
http://www.jwc.nato.int/images/stories/threeswords/OSINT.pdf

12/x Tools & guides to conduct online investigations
Chinese Real Estate – OSINT Analysis (Big Data)
https://semantic-visions.com/chinese-real-estate-osint-analysis/
PDF
https://semantic-visions.com/wp-content/uploads/2016/09/Semantic-Visions-China-Real-Estate_v4.pdf

13/x Tools & guides to conduct online investigations
OPEN SOURCE INTELLIGENCE navigator for investigative journalists
(mainly financial fraud & corruption via Western Balkans to aid to the global agenda of fighting illicit financial flows)
https://bird.tools/wp-content/uploads/2019/12/13082019_Osint-guide_v2fin.1.pdf

14/x Tools & guides to conduct online investigations
Top 10 Popular Open Source Intelligence (OSINT) Tools
https://www.greycampus.com/blog/information-security/top-open-source-intelligence-tools?sscid=61k4_am0vf

15/ x Tools & guides to conduct online investigations
Watch a webinar (need to register with email)
How to Use Open Source Intelligence (OSINT) in Investigations https://i-sight.com/resources/how-to-use-open-source-intelligence-osint-in-investigations/

How to Use Open Source Intelligence (OSINT) in Investigations

Learn how to use OSINT, aka open source intelligence, competently in your investigations and find the information and evidence you need through online searches.

https://i-sight.com/resources/how-to-use-open-source-intelligence-osint-in-investigations/

16/x Tools & guides to conduct online investigations
I highly recommend this:
"Verification handbook for Investigative Reporting"
guide to online search and research techniques for using ugc and open source
http://verificationhandbook.com/downloads/verification.handbook.2.pdf

17/ x Tools & guides to conduct online investigations
Euro Tool if you can get it:
Joint Research Centre Open Source Monitoring Tools and Applications
https://ec.europa.eu/assets/jrc/events/20130627-tto-circle/jrc-20130627-tto-circle-atkinson.pdf
EMMOSINTSuite– ImprovedEntityRecognition
https://www.asktheeu.org/en/request/5762/response/18626/attach/3/11.release%20notes%20improved%20entity%20recog.pdf

Taking a Break, more China specific resources to come
and other specific guides

18/ x someone ( @KlausRiede) commented so I will continue
Geolocation: https://www.aware-online.com/en/osint-tools/geolocation-tools/
Airplanes: https://www.aware-online.com/en/osint-tools/airplane-tools/
Cryptocurrencies: https://www.aware-online.com/en/osint-tools/cryptocurrency-tools/
Reddit: https://www.aware-online.com/en/osint-tools/reddit-search-tool/
Vimeo: https://www.aware-online.com/en/osint-tools/vimeo-search-tool/
YouTube: https://www.aware-online.com/en/osint-tools/youtube-search-tool/https://www.aware-online.com/en/osint-tools/youtube-search-tool/

Vimeo search tool - Vimeo investigations - Aware Online Academy

Vimeo search tool ★ Fast, focused & in-depth Vimeo investigations ★ Try our custom OSINT tool now! Look here for more information!

https://www.aware-online.com/en/osint-tools/geolocation-tools/

19/x OSINT online tools:
Instagram: https://www.aware-online.com/en/osint-tools/instagram-tools/
Twitter: https://www.aware-online.com/en/osint-tools/twitter-search-tool/
Facebook: https://www.aware-online.com/osint-tools/facebook-search-tool/
People: https://www.aware-online.com/en/osint-tools/people-search-tool/
People 2: https://www.aware-online.com/en/osint-tools/people-tools/
User Names: https://www.aware-online.com/en/osint-tools/username-tools/
User Names 2: https://www.aware-online.com/en/osint-tools/username-search-tool/

Username search tool - Use these useful OSINT tools in your investigation on usernames

Usernames Searchtool ★ Use our custom OSINT tool to conduct in-depth research on usernames View more here!

https://www.aware-online.com/en/osint-tools/instagram-tools/

20/x OSINT online tools:
Emails: https://www.aware-online.com/osint-tools/e-mail-search-tool/
Emails 2: https://www.aware-online.com/en/osint-tools/email-address-tools/
Phone Number Search: https://www.aware-online.com/en/osint-tools/phone-number-search-tool/
Phone Number Tools: https://www.aware-online.com/en/osint-tools/phone-number-tools/
Company Search: https://www.aware-online.com/en/osint-tools/company-search-tool/
Company Tools: https://www.aware-online.com/en/osint-tools/investigating-companies/

OSINT tools for investigating companies - Aware Online Academy

Companies ★ OSINT tools for investigating companies and ultimate beneficial owners (UBO) ★ Use these tools for effective OSINT research.

https://www.aware-online.com/osint-tools/e-mail-search-tool/

21/ x OSINT online tools:
Photos & Videos: https://www.aware-online.com/en/osint-tools/photo-and-video-tools/
Filetypes: https://www.aware-online.com/en/osint-tools/filetype-search-tool/
Reverse Image Search: https://www.aware-online.com/en/osint-tutorials/reverse-image-search/
Web Archive: https://www.aware-online.com/osint-tools/web-archive-tools/
Websites: https://www.aware-online.com/en/osint-tools/website-tools/
Source Code for Websites: https://www.aware-online.com/en/osint-tutorials/investigating-the-source-code-of-a-website/

Investigating the source code of a website - OSINT Tips

Investigating the source code of a website ★ Learn how to investigate the source code of a web page. Read more!

https://www.aware-online.com/en/osint-tools/photo-and-video-tools/

22/x OSINT online tools:
Finding Open FTP servers: https://www.aware-online.com/en/osint-tutorials/find-open-ftp-servers/

Find open FTP Servers - Effective OSINT Tips

Find open FTP Servers ★ In this OSINT tip, we explain how you can search for open FTP servers using Google operators. Read more!

https://www.aware-online.com/en/osint-tutorials/find-open-ftp-servers/

23/x OSINT online tutorials:
https://www.aware-online.com/en/osint-tutorials/
https://www.aware-online.com/en/osint-tutorials/page/2/
https://www.aware-online.com/en/osint-tutorials/page/3/
Example (Pinterest): https://www.aware-online.com/en/osint-investigation-on-pinterest/
Take the OSINT Challenge (try the twitter one): https://www.aware-online.com/en/osint-challenges/

OSINT investigation on Pinterest - Aware Online Academy

OSINT investigations on Pinterest - What information can you get from an account on Pinterest? How do you search for users effectively?

https://www.aware-online.com/en/osint-tutorials/

24/x
OSINT Flowcharts (DIY): https://www.aware-online.com/en/create-your-own-osint-flowcharts/
Checklists: https://www.aware-online.com/en/category/osint-checklists-en/
Twitter Metadata: https://www.aware-online.com/en/interpreting-metadata-on-twitter/
Pipl search engine (Trial)/: https://www.aware-online.com/en/search-via-pipl-com/
Social Media:
https://www.aware-online.com/en/category/social-media/
Telegram: https://www.aware-online.com/en/search-for-telegram-groups-based-on-location/

Search for Telegram groups based on location - Aware Online Academy

Find Telegram groups - Read this short blog post and learn how you can map groups on Telegram based on a spoofed geolocation.

https://www.aware-online.com/en/create-your-own-osint-flowcharts/

25/x Bloody Hell this OSINT shit is endless!
Open Source Intelligence (OSINT) Tools & Resources
https://osint.link/
OSINT part3
https://osint.link/osint-part3/
Can't find part 2, guess I am crap at OSINT

OSINT part3

Online Maps General Geospatial Research Tools Digital Globe: Easy to use global map imagery tool with advanced search filters. Bing Maps: Alternative to Google Map. Yandex Maps: A Russian alternative...

https://osint.link/

26/x Bloody Hell this OSINT shit is endless!
Excellent resource:
The OSINT Toolkit by Craig Hays
Last updated: 8th June 2020 https://medium.com/osint/the-osint-toolkit-3b9233d1cdf9

The OSINT Toolkit

Last updated: 8th June 2020

https://medium.com/osint/the-osint-toolkit-3b9233d1cdf9

27/ x OSINT Maps & Satellite images
Maps: https://www.osintessentials.com/maps
Satellite images: https://gijn.org/resources-for-finding-and-using-satellite-images/
Satellite Imagery Examples: https://allsourceanalysis.com/tag/satellite-imagery/

Satellite Imagery Archives - AllSource Analysis

https://www.osintessentials.com/maps

28/x Military Bases
An open source intelligence map of every military installation in the world.
https://sites.google.com/view/osintmilitarymap/
Project was started by Covert Cabal & has since been built upon by a community of like-minded enthusiasts & is a constant WIP
Video:

29/x Online OSINT Tools
Exif Data: https://www.aware-online.com/en/retrieving-exif-data-from-a-wordpress-website/
LinkedIn: https://www.aware-online.com/en/find-the-email-address-of-a-linkedin-user/
15 useful Google Operators: https://www.aware-online.com/en/15-useful-google-operators-for-your-investigation/

Thanks to Aware Online @aware_online

15 useful Google Operators - Search more effectively on Google

15 useful Google Operators for your investigations | Search more effectively with search engine Google with these 15 operators

https://www.aware-online.com/en/retrieving-exif-data-from-a-wordpress-website/

This thread will continue with a focus on Chinese Investigations and more OSINT tomorrow

30/ x OSINT for China - Wechat
Google & Baidu do not show much content from Wechat (Weixin), China's most popular social media platform, so if you want to search Wechat, translate search terms with Google translate (or other) or copy the Chinese & go here:
https://weixin.sogou.com/

31/ OSINT for China -Wechat
Weixin Sogou (horrible name, I know) has some very useful specific search engines:
Academic: https://scholar.sogou.com/
Medical/Doctors: http://mingyi.sogou.com/
General Web Search: https://www.sogou.com/
Images from China: https://pic.sogou.com/

32/ OSINT for China -Wechat/Weixin
Maps (China): http://map.sogou.com/
Here are results for WCDC
(Wuhan Center for Disease Control & Prevention)
武汉市疾病预防控制中心
http://map.sogou.com/#c=12719110,3561101,15&lq=%u6B66%u6C49%u5E02%u75BE%u75C5%u9884%u9632%u63A7%u5236%u4E2D%u5FC3&where=12728384.765625,3552517.578125,12730826.171875,3554302.734375,0&page=1,10
You can click on:
Details
All offices
Real time traffic
Photos
3D view
Satellite view

33/ OSINT for China -Wechat/Weixin Maps

Here is the 3D view of WCDC, zooming in shows a SIM world but no people selling experimental bats ;)
http://map.sogou.com/#c=12719140.625,3561109.86328125,18&lq=%u6B66%u6C49%u5E02%u75BE%u75C5%u9884%u9632%u63A7%u5236%u4E2D%u5FC3&where=12653500,3506125,12830000,3610875,0&page=1,10&hb=1,0

34/ OSINT for China -Wechat/Weixin Maps

Here is the standard Satellite view of WCDC:
http://map.sogou.com/#c=12719140.625,3561109.86328125,18&lq=%u6B66%u6C49%u5E02%u75BE%u75C5%u9884%u9632%u63A7%u5236%u4E2D%u5FC3&where=12653500,3506125,12830000,3610875,0&page=1,10&hb=1,0
Again you can see real time traffic if that's your cup of tea
You can also click top right to see a side by side comparison by years (see next tweet)

35/ OSINT for China -Wechat/Weixin Maps

Here is the side by side view of the Satellite map for WCDC showing 2010 and 2015 (later dates are not available for this location)
http://map.sogou.com/hybrid.html#city=%25u6B66%25u6C49,12719164.0625,3560990.234375,18

36/ OSINT for China -Wechat/Weixin Video Search
You can search for videos here:
https://v.sogou.com/
For example, WCDC
https://v.sogou.com/v?query=%CE%E4%BA%BA%CA%D0%BC%B2%B2%A1%D4%A4%B7%C0%BF%D8%D6%C6%D6%D0%D0%C4&typemask=6&p=&dp=&w=06009900&_asf=&_ast=&dr=&enter=1&sut=2011&sst0=1592155987767
This search will pull in all Chinese platform videos,
such as: Yokou, Tudou, Bili Bili, Sina, Tencent

37/ OSINT for China -Wechat/Weixin News Search
News Search Engine
https://news.sogou.com/
Pulls in News (mainly "approved" news ;)
from:
Sohu
Tencent
Sina
Phoenix
Netease
and Others
Here is the WCDC news search:
https://news.sogou.com/news?query=%E6%AD%A6%E6%B1%89%E5%B8%82%E7%96%BE%E7%97%85%E9%A2%84%E9%98%B2%E6%8E%A7%E5%88%B6%E4%B8%AD%E5%BF%83&mode=1&w=&sut=3531&sst0=1592160448527&lkt=0%2C0%2C0
You can sort for source, relevance or time

38/ OSINT for China -Wechat/Weixin Other
Other available categories of search:
http://www.sogou.com/docs/more.htm?v=1
For example:
"Hot" News: http://top.sogou.com/
"Knowledge": https://zhihu.sogou.com/
and https://zhishi.sogou.com/
Online Translation: https://fanyi.sogou.com/

39/ OSINT for China - "Sogou Treasure Box"
http://www.sogou.com/docs/help/helpbox.htm?v=1
This has one section of interest to us, a search box for:
IP address
Mobile Phone
ID Card
Postal Code
Phone Area Code
For Example:
https://www.ws-virology.org/wp-content/uploads/2019/06/Guo-Deyin-CV-201902-En.pdf
https://www.ws-virology.org/wp-content/uploads/2017/11/CV_SHI-ZL-2018_ASM.pdf
Try it out, what can you find?

40/ I got sidetracked as I found some photos and news stories on "sogou" that I had not seen via Google.
Can't help feeling that they both look so sad and dare I say...guilty?

41/ Sogou "Treasure Box" Phone Search
Here are results for a certain person with a CV:
1. https://www.reg007.com/guishu/18971223826
If you want more info, must register & pay 9 RMB
https://www.reg007.com/invitecode/buy
2. https://shouji.911cha.com/18971223826.html
More information here & link to Baidu Map
https://ditu.911cha.com/wuhan.html

42/ Sogou "Treasure Box" Phone Search
As you surely noticed in image attached to tweet 41, there is link at bottom to:
China Telecom (Hubei) https://www.189.cn/hb/
There is a login button at the top which leads to:
https://login.189.cn/web/login
Useful if you forgot your password

【WeChat】How To Expose On New Feature “Top Stories 看一看”

Last article we’ve introduced WeChat latest updated features, today we try to dig more about one of the new features: TOP STORIES (CN: 看一看)…

https://chinachannel.co/wechat-resources/

44/ "Wechat (2)
Use Wechat on your phone to search for people, accounts, groups, news or connect to people or log in to some Chinese websites, then here are some guides:
1. https://wechatwiki.com/wechat-resources/wechat-official-account-marketing-platform-epic-tutorial-guide/
2. https://www.chinainternetwatch.com/20671/wechat-labs-search-top-stories/
3. https://qpsoftware.net/blog/wechat-search-engine
4. https://qpsoftware.net/blog/how-register-wechat-official-account-subscription-vs-service

45/ Spot the Difference Time!
I'm off to bed, so leave you with a puzzle
1. What is the place in the map?
2. How many differences can you spot?
3. Fancy a swim in the lake (top left)?
http://map.sogou.com/hybrid.html#city=%25u6B66%25u6C49,12719767.08984375,3530207.51953125,18

I will update this thread with more China related OSINT tomorrow:
Translation of Texts, Images, Audio and Video
Weibo search
Shodan CCTV search
We Chat vulnerabilities
Huawei Routers
Some other stuff
will unroll @threadreaderapp just in case.

You can follow @BillyBostickson.

Tip: mention @twtextapp on a Twitter thread with the keyword “unroll” to get a link to it.

Latest Threads Unrolled: