iiinova — where your digital self keeps evolving

Dennis Keefe @dkeefe.bsky.social · 11/03/2025

DNS Dumpster is a free OSINT tool for passive DNS reconnaissance, widely used in cybersecurity for network footprinting and attack surface mapping. dnsdumpster.com

051

Dennis Keefe @dkeefe.bsky.social · 10/01/2025

If you're planning to launch a new website to start the year strong, my wife would be thrilled to work with you! Check out her business at [Close to the Coast Creative](closetothecoastcreative.com/).

010

Dennis Keefe @dkeefe.bsky.social · 24/12/2024

Wishing you all a very Merry Christmas!

020

Dennis Keefe @dkeefe.bsky.social · 12/12/2024

Demystifying 𝗦𝗶𝘅 𝗦𝗶𝗴𝗺𝗮 in Cybersecurity: Precision in Threat Reduction Six Sigma isn't just a manufacturing methodology—it's a powerful approach to minimizing security vulnerabilities and operational risks. Here's how cybersecurity professionals leverage this strategic framework: Key Principles: •

010

Dennis Keefe @dkeefe.bsky.social · 11/12/2024

Snowflake Systems: A Cybersecurity Minefield In the world of enterprise IT, "Snowflake Systems" represent a unique cybersecurity challenge. These are highly customized, one-of-a-kind IT infrastructures that evolve organically within organizations. Key Risks: • Extreme customization makes consisten

010

Dennis Keefe @dkeefe.bsky.social · 10/12/2024

Understanding 𝗦𝗲𝗿𝘃𝗶𝗰𝗲-𝗢𝗿𝗶𝗲𝗻𝘁𝗲𝗱 𝗔𝗿𝗰𝗵𝗶𝘁𝗲𝗰𝘁𝘂𝗿𝗲 (SOA) in cybersecurity: - SOA is a design approach where services (self-contained units of functionality) are provided to other components via a network. - These services are loosely coupled, meaning they function independently and can be reused across d

000

Dennis Keefe @dkeefe.bsky.social · 09/12/2024

An 𝗼𝗻-𝗽𝗮𝘁𝗵 𝗮𝘁𝘁𝗮𝗰𝗸 is a type of cybersecurity threat where an attacker intercepts and potentially alters communication between two parties by positioning themselves between the sender and receiver of network traffic. The attacker can eavesdrop on data transmission, steal sensitive information, or man

000

Dennis Keefe @dkeefe.bsky.social · 06/12/2024

𝗕𝗶𝗼𝗺𝗲𝘁𝗿𝗶𝗰 𝗶𝗺𝗽𝗲𝗿𝘀𝗼𝗻𝗮𝘁𝗶𝗼𝗻 involves spoofing or mimicking biometric traits, such as fingerprints, facial features, or voice patterns, to bypass authentication systems. While biometrics enhance security through unique identifiers, practitioners must address vulnerabilities like deepfake technology, repl

020

Dennis Keefe @dkeefe.bsky.social · 05/12/2024

A 𝗧𝗿𝘂𝘀𝘁𝗲𝗱 𝗙𝗼𝘂𝗻𝗱𝗿𝘆 is a secure, vetted manufacturing facility for producing sensitive hardware components, ensuring the integrity and authenticity of chips and devices used in critical systems. It is a cornerstone of supply chain security, reducing the risk of tampering, counterfeits, and backdoors.

020

Dennis Keefe @dkeefe.bsky.social · 04/12/2024

𝗔𝘁𝗼𝗺𝗶𝗰 𝗲𝘅𝗲𝗰𝘂𝘁𝗶𝗼𝗻 refers to the process of ensuring that a series of operations in a system are completed entirely or not at all, preventing partial execution. This is critical in maintaining data consistency and system reliability. Security concerns include vulnerabilities to race conditions, rollba

010

Dennis Keefe @dkeefe.bsky.social · 03/12/2024

A 2023 survey found that two-thirds of Gen Z respondents reported being targeted for online “sextortion”, with 71% of those who cited catfishing as the “hook” into sextortion saying they were asked primarily to share intimate imagery or personal information. #cybersecurity #childsafety #awareness

042

Dennis Keefe @dkeefe.bsky.social · 03/12/2024

A 𝗣𝗵𝘆𝘀𝗶𝗰𝗮𝗹 𝗨𝗻𝗰𝗹𝗼𝗻𝗮𝗯𝗹𝗲 𝗙𝘂𝗻𝗰𝘁𝗶𝗼𝗻 (𝗣𝗨𝗙) is a hardware-based security feature that leverages the inherent physical variations in a device's manufacturing process to generate unique, unclonable identifiers or cryptographic keys. While PUFs enhance security by being resistant to tampering and replication,

020

Dennis Keefe @dkeefe.bsky.social · 02/12/2024

𝗩𝗠 𝗦𝗽𝗿𝗮𝘄𝗹: The Silent Efficiency Killer in Cloud Infrastructure Virtual Machine (VM) sprawl occurs when an organization creates more virtual machines than it can effectively manage, leading to: -Increased operational costs -Reduced system performance -Unnecessary resource consumption -Complex infra

111

Dennis Keefe @dkeefe.bsky.social · 29/11/2024

𝗙𝗼𝗼𝘁𝗽𝗿𝗶𝗻𝘁𝗶𝗻𝗴 and 𝗳𝗶𝗻𝗴𝗲𝗿𝗽𝗿𝗶𝗻𝘁𝗶𝗻𝗴 are reconnaissance techniques in cybersecurity, but they differ in scope and purpose. Footprinting involves gathering general information about a target system, organization, or network. This can include details like IP ranges, domain names, and public-facing assets,

110

Dennis Keefe @dkeefe.bsky.social · 28/11/2024

I hope that you and your family have an opportunity to make some great memories today. Step away from your keyboards and spend time with those who matter most. Happy Thanksgiving!

010

Dennis Keefe @dkeefe.bsky.social · 27/11/2024

𝗡𝗲𝘀𝘀𝘂𝘀 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀 offers cybersecurity enthusiasts and IT professionals an accessible entry point into vulnerability scanning. This free version of the Nessus Vulnerability Scanner enables users to quickly set up network scans, providing invaluable hands-on experience in identifying potential securi

041

Dennis Keefe @dkeefe.bsky.social · 27/11/2024

𝗖𝗿𝘆𝗽𝘁𝗼𝗴𝗿𝗮𝗽𝗵𝗶𝗰 𝗘𝗿𝗮𝘀𝗲 (CE) is a data sanitization method that removes data by deleting the encryption key that was used to encrypt the data, rendering the encrypted data unrecoverable. Key security concerns include proper key destruction, verification of the original encryption implementation, and ens

000

Dennis Keefe @dkeefe.bsky.social · 26/11/2024

A zero-fill erase is a data sanitization technique that systematically overwrites all storage sectors of a digital device with binary zeros (0s), attempting to eliminate previously stored information by replacing existing data with a uniform zero state. While simple to execute, this method is consid

100

Dennis Keefe @dkeefe.bsky.social · 25/11/2024

Have you filed your Beneficial Ownership Information (BOI)? Be cautious—some individuals are sending out notices and charging fees of $500 or more to file on your behalf. While the BOI filing requirement is legitimate, these fees are not mandated by the Federal Government. Consider sharing this info

000

Dennis Keefe @dkeefe.bsky.social · 25/11/2024

𝗥𝗲𝗰𝗼𝘃𝗲𝗿𝘆 𝗣𝗼𝗶𝗻𝘁 𝗢𝗯𝗷𝗲𝗰𝘁𝗶𝘃𝗲 (𝗥𝗣𝗢) is the maximum acceptable duration of data loss during a system failure or disaster, representing the point in time to which data must be recovered after an incident. #cybersecurity #cyber #CySA #teamSC

000

Dennis Keefe @dkeefe.bsky.social · 23/11/2024

The Mayflower Compact - as it is known today - was signed by those 41 “true” Pilgrims on 11 November, 1620, and became the first governing document of Plymouth Colony. Of the 41 men who signed, three were related to me. John Howland (9th great-grandfather) John Tilley (10th great-grandfather) Edwar

210

Dennis Keefe @dkeefe.bsky.social · 22/11/2024

𝗥𝗲𝗰𝗼𝘃𝗲𝗿𝘆 𝗧𝗶𝗺𝗲 𝗢𝗯𝗷𝗲𝗰𝘁𝗶𝘃𝗲 (𝗥𝗧𝗢): The maximum acceptable amount of time a system, application, or process can be down after a disruption before normal operations must be restored to avoid significant impact. #cybersecurity #CySA #levelup #teamSC

020

Dennis Keefe @dkeefe.bsky.social · 22/11/2024

𝗣𝗼𝗿𝘁 𝟭𝟭𝟬 is used by the 𝗣𝗼𝘀𝘁 𝗢𝗳𝗳𝗶𝗰𝗲 𝗣𝗿𝗼𝘁𝗼𝗰𝗼𝗹 𝘃𝗲𝗿𝘀𝗶𝗼𝗻 𝟯 (𝗣𝗢𝗣𝟯) to retrieve emails from a mail server. Security concerns include unencrypted communication, making it vulnerable to interception; susceptibility to man-in-the-middle attacks; brute force attacks due to weak passwords; and the lack of mode

020

Dennis Keefe @dkeefe.bsky.social · 21/11/2024

𝗣𝗼𝗿𝘁 𝟱𝟯 is used by 𝗗𝗡𝗦 (𝗗𝗼𝗺𝗮𝗶𝗻 𝗡𝗮𝗺𝗲 𝗦𝘆𝘀𝘁𝗲𝗺) for resolving domain names into IP addresses. - 𝗨𝗗𝗣: Handles regular DNS queries for speed. - 𝗧𝗖𝗣: Used for large data transfers, like DNS zone transfers. 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗥𝗶𝘀𝗸𝘀: - Spoofing/Poisoning: Redirecting traffic to malicious sites. - Amplifica

010

Dennis Keefe @dkeefe.bsky.social · 20/11/2024

Looking for Incident Response Playbooks? Check out this website to get some free templates as a starting point. ---> www.incidentresponse.com/ #cybersecurity #teamSC #levelup

042

Dennis Keefe @dkeefe.bsky.social · 20/11/2024

𝗩𝗼𝗹𝘂𝗺𝗲-𝗯𝗮𝘀𝗲𝗱 𝗮𝗻𝗮𝗹𝘆𝘀𝗶𝘀 in cybersecurity refers to examining large amounts of data, such as logs or network traffic, to identify patterns, anomalies, or trends that could indicate potential security threats, such as DDoS attacks or unauthorized access attempts. It focuses on the quantity of activity r

010

Dennis Keefe @dkeefe.bsky.social · 19/11/2024

In cybersecurity, 𝗙𝗿𝗲𝗾𝘂𝗲𝗻𝗰𝘆-𝗕𝗮𝘀𝗲𝗱 𝗔𝗻𝗮𝗹𝘆𝘀𝗶𝘀 is the process of examining how often specific events, patterns, or values occur in datasets, such as logs or network traffic. It helps identify anomalies, trends, or potential threats by detecting deviations from normal behavior, such as repeated login att

030

Dennis Keefe @dkeefe.bsky.social · 18/11/2024

A 𝗽𝗿𝗼𝗴𝗿𝗮𝗺 𝗽𝗮𝗰𝗸𝗲𝗿 is a tool or technique used to compress or encrypt executable files, often to reduce their size or obfuscate their contents. In the context of the CySA+ exam, packers are significant because threat actors often use them to evade detection by antivirus software or other security tool

020

Reposted by Dennis Keefe

My OSINT Training (MOT) @myosint.training · 15/11/2024

10 days until our annual black Friday sale kicks in! Don't miss our biggest sale of the year... 25% any of our #OSINT courses or bundles. We'll announce the code on our socials! Don't want to miss it? Sign up for our FREE newsletter here: myosint.link/newsletter @webbreacher.com @hatless1der.com

033

Dennis Keefe @dkeefe.bsky.social · 12/11/2024

Looking to hone your RegeEx skills? Check out this great website to help you better understand RegEx which is important when digging through logs. ---> regexr.com/ #cybersecurity #regex #teamSC #SkillBuilding

020

Dennis Keefe @dkeefe.bsky.social · 08/11/2024

Looking for a FREE "Message Header Analyzer"? This is great tool for inspecting email headers. ---> mha.azurewebsites.net/ #cybersecurity #cyber #skillbuilding

010

Dennis Keefe @dkeefe.bsky.social · 04/11/2024

𝗔𝗹𝘄𝗮𝘆𝘀 𝗮𝗹𝗹𝗼𝘄 𝗼𝘂𝗿 𝘁𝗲𝗮𝗺 𝘁𝗼 𝘂𝘁𝗶𝗹𝗶𝘇𝗲 𝘁𝗵𝗲𝗶𝗿 𝘀𝘁𝗿𝗲𝗻𝗴𝘁𝗵𝘀. Many people see delegation as a weakness, but a true leader will cultivate the strengths of their team and delegate tasks that allow them to grow.

000

Dennis Keefe @dkeefe.bsky.social · 28/10/2024

𝗦𝘁𝗲𝗴𝗮𝗻𝗼𝗴𝗿𝗮𝗽𝗵𝘆 The practice of hiding messages or data within other non-secret data, such as embedding a hidden message inside an image. #cybersecurity #cyber

010

Reposted by Dennis Keefe

Sector035 @sector035.bsky.social · 19/10/2024

I have taken some time off lately, and utterly enjoyed it! But it was about time I did some writing again... No Week in #OSINT yet, but something else. Because I wanted to share my thoughts on what I call "black box OSINT" tools 👇 sector035.nl/articles/bla...

sector035.nl

About Black Box (CL)OSINT Tools

Within the last decade or so I have the feeling that 'OSINT' simply has become a buzzword, and loads of companies and startups wan

3379

Reposted by Dennis Keefe

Dutch_OsintGuy @dutchosintguy.bsky.social · 25/10/2024

Below a talk I gave recently about Vicarious trauma and #OSINT For all you OSINT folks out there please take care of your mental health. Vicarious trauma is real! Sharing = caring youtu.be/wWehNV6sd4Y

youtu.be

OSINT & Vicarious Trauma

YouTube video by SANS Cyber Defense

096

Dennis Keefe @dkeefe.bsky.social · 24/10/2024

You need to add this training platform to your resource list! There are some really great courses here and more on the way! I am looking forward to the "Level Up OSINT" course from Mishaal Khan --->www.justhacking.com/ #cybersecurity #OSINT #CTF #upskill

010

Dennis Keefe @dkeefe.bsky.social · 23/10/2024

With Archive.org being down, here is alternative website to try. archive.ph/ #OSINT

011

Dennis Keefe @dkeefe.bsky.social · 21/10/2024

𝗦𝗼𝗰𝗸 𝗛𝘂𝗻𝘁𝗲𝗿𝘀 In the context of OSINT (Open Source Intelligence), "sock hunters" refers to individuals or groups who actively seek out and investigate "sock puppets." A **sock puppet** is a fake online identity used by someone to deceive others, often in the context of misinformation, manipulation,

000

Dennis Keefe @dkeefe.bsky.social · 16/10/2024

𝗗𝗲𝗲𝗽 𝗪𝗲𝗯: The part of the internet not indexed by search engines, including private databases, email accounts, and password-protected sites. It's legal and makes up most of the web. 𝗗𝗮𝗿𝗸 𝗪𝗲𝗯: A small portion of the deep web, accessible through special tools like Tor. It's used for anonymous activit

000

Dennis Keefe @dkeefe.bsky.social · 14/10/2024

𝗜𝗺𝗺𝘂𝘁𝗮𝗯𝗹𝗲 𝗕𝗮𝗰𝗸𝘂𝗽𝘀 Immutable backups are backup copies of data that cannot be modified, deleted, or altered in any way once they are created. This ensures that the data remains tamper-proof, providing a secure safeguard against threats like ransomware or accidental deletion. These backups are typica

000

Dennis Keefe @dkeefe.bsky.social · 11/10/2024

Looking to add another resource to your OSINT toolbox? Griffin Glynn wrote a great post on using the social media platform "Threads". Learn how it can help you when Instagram can't. ---> hatless1der.com/threads-net-... #OSINT #SOCMINT #PIVOT

000

Dennis Keefe @dkeefe.bsky.social · 11/10/2024

A 𝗽𝘂𝗯𝗹𝗶𝗰 𝗲𝘅𝗽𝗼𝘀𝘂𝗿𝗲 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 in OSINT involves identifying and analyzing publicly available information that could pose security or privacy risks. It includes: 1. 𝗗𝗮𝘁𝗮 𝗖𝗼𝗹𝗹𝗲𝗰𝘁𝗶𝗼𝗻: Gathering accessible information from sources like social media, public records, and websites. 2. 𝗥𝗶𝘀𝗸 𝗜𝗱𝗲𝗻𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻:

000

Dennis Keefe @dkeefe.bsky.social · 09/10/2024

Looking to start a podcast or YouTube channel? Jax Scott shares some great resources in this "Beginner Guide to Video Podcasting" ---> youtu.be/vKeVxS7JCcQ?... #cyber #podcasting #contentcreation

000

Dennis Keefe @dkeefe.bsky.social · 08/10/2024

Looking for another great resource to add to your OSINT investigations toolbox? This website provides hundreds of search tools based on specific tags. It's a great resource that will open up even more search sites and tools for your investigations. ---> lambda.black/osint.html #OSINT #SOCMINT

010

Reposted by Dennis Keefe

Cyber Detective @cybdetective.bsky.social · 23/05/2024

Satellite Image & #OSINT (Hunting from Space - #GEOINT — 2) The article is about why satellite images are needed in OSINT and what services can be used to work with them. snoop-ghost.medium.com/satellite-im...

041