Sign in

Nixintel

@nixintel.bsky.social
5.1K followers 344 following 39 posts

Steven Harris | OSINT & Cyber Security Specialist | Investigator | Teach OSINT @SANS Blog: www.nixintel.info

PostsRepliesMedia
Reposted by Nixintel
Cyber Detective @cybdetective.bsky.social · 10/01/2025
MEIOC #Python automation tool to extract information from EML files: Headers Detailed server relay hops (IP addresses involved) Extracted URLS/domains Attachments with calculated hashes. SPF (Sender Policy Framework) DKIM (DomainKeys Identified Mail) github.com/drego85/meioc
0183
Reposted by Nixintel
Baptiste Robert @fs0c131y.com · 07/01/2025
The Predicta Lab team worked with NHK journalists to investigate the I-SOON leak. Using Predicta Graph, we mapped relationships between key figures. 🔗 Uncover complex data networks with Predicta Graph: predictagraph.com.
1145
Reposted by Nixintel
BenB 🇺🇦 @benborges.xyz · 03/01/2025
The OSINTukraine archive #telegram data from 90+ Russian Telegram channels. Help us continue preserving this data:
osintukraine.com
Telegram Archive
the Telegram Archive with Video and media files on the open web
083
Nixintel @nixintel.bsky.social · 02/01/2025
Good to be reminded of a timeless investigative lesson: if two pieces of evidence seem to be contradictory it is usually an indicator that one of your assumptions is incorrect. Obvious when you think about it, but sometimes hard to see when it's right in front of you 😉
0101
Nixintel @nixintel.bsky.social · 18/12/2024
This looks like a chance for some #geolocation fun 👇
062
Reposted by Nixintel
tlmn @tlmn.eurosky.social · 16/12/2024
It's been almost 2 weeks, since we launched www.findthatspot.io as a publicbeta - and it's amazing to see how different people are testing it. We're taking another dive into feedback before the 🎄-break today to see what we can improve. Give it a try, if you haven't had the chance yet!
findthatspot.io
SPOT - the easy way to verify locations
Spot is a tool for finding combinations of objects in the public space world-wide.
1309
Nixintel @nixintel.bsky.social · 15/12/2024
Sure you're an APT who pwn governments all day but can you correctly configure parental controls for Alexa and Google Nest?
media.tenor.com
riddle me this riddle me that is written in yellow letters
ALT: riddle me this riddle me that is written in yellow letters
030
Reposted by Nixintel
Kirbstr @kirbstr.bsky.social · 13/12/2024
I have organized (somewhat) an OSINT OPML feed. This will be updated periodically. The first version is linked here. knowledgebase.plessas.net/OSINT-Feeds-...
knowledgebase.plessas.net
OSINT Feeds | Notion
The following are the OSINT blogs, podcasts and other feeds available in the database.
43014
Nixintel @nixintel.bsky.social · 13/12/2024
The Delusions of Crowds by William Bernstein digs into this phenomenon and is well worth reading.
051
Reposted by Nixintel
ShadowDragonio.bsky.social @shadowdragonio.bsky.social · 04/12/2024
The Office of the Director of National Intelligence issued a warning for industrial sabotage - one of the indicators points to online posts made by potential perpetrators.
163
Nixintel @nixintel.bsky.social · 03/12/2024
Tough on crime.
010
Reposted by Nixintel
Baptiste Robert @fs0c131y.com · 22/11/2024
I've put together an OSINT starter kit. Let's unite the OSINT community on Bluesky! go.bsky.app/GaTRbT3
610736
Nixintel @nixintel.bsky.social · 19/11/2024
For those not familiar with Russia's weekly threats to launch nuclear weapons, United Media has been keeping track. Roughly 70 threats since the 2022 invasion. The threat *is* the deterrence. We will still be here tomorrow. united24media.com/war-in-ukrai...
united24media.com
A Timeline of Russia’s Nuclear Threats Against the West
While Russia frequently accuses the West of escalation, we look at all the times Russia has made nuclear threats against the West.
2145
Nixintel @nixintel.bsky.social · 19/11/2024
Fascinating use of ship tracking resources to link the Yi Peng 3 to the Baltic Sea cable sabotage. Currently looks like the ship has been stopped by the Danish navy.
0126
Reposted by Nixintel
auonsson @auonsson.bsky.social · 19/11/2024
Chinese-flagged cargo ship Yi Peng 3 crossed both submarine cables C-Lion 1 and BSC at times matching when they broke. She was shadowed by Danish navy for a while during night and is now in Danish Straits leaving Baltics. No signs of boarding. AIS-caveats apply.
451473514
Reposted by Nixintel
Serge Courrier @secou.bsky.social · 19/11/2024
[ #SOCMINT #TELEGRAM ] Telegram For Cyber Investigators (by @nixintel.bsky.social): nixintel.info/osint/telegr... #osint
nixintel.info
Nixintel Open Source Intelligence & Investigations Telegram For Cyber Investigators
Telegram is one of the most important platforms for OSINT investigators. I joined the Needlestack podcast to discuss how Telegram works and shared some practical OSINT advice along the way.
245
Nixintel @nixintel.bsky.social · 19/11/2024
Probably in the case of undersea cables. But the power stations, oil rigs, British Airways? No evidence yet of coordinated sabotage. The coincidence is likely illusory.
000
Nixintel @nixintel.bsky.social · 18/11/2024
I've started to add these and some other bookmarks to the CNI section of my #OSINT resource collection. start.me/p/rx6Qj8/nix...
start.me
Nixintel's OSINT Resource List - start.me
Translation missing: en.startpage_default_description
0218
Nixintel @nixintel.bsky.social · 18/11/2024
Cloud service provider status pages can also act as a proxy for undersea cable status. In this case the CLion1 outage showed up in Hetzner's status page. status.hetzner.com/incident/ec8...
120
Nixintel @nixintel.bsky.social · 18/11/2024
Semantic Net is the source for Fiber Atlantic. It shows the approximate route of undersea cables and their current status. #CLion1 shown in the image below. www.fiberatlantic.com
110
Nixintel @nixintel.bsky.social · 18/11/2024
Here are few interesting #OSINT resources relating to undersea cables. Semantic Net contains location and status information for undersea cables and data centres. www.semanticnet.net
semanticnet.net
SemanticNet: Internet infrastructure data
SemanticNet - Detailed Internet infrastructure data to help untangle the complexity of the Internet’s global architecture. Data, analysis and reports.
14210
Reposted by Nixintel
Intel Night OWL 🦉🇺🇸 @intelnightowl.bsky.social · 13/11/2024
Share it & let the #OSINT community grow! OSINT in general go.bsky.app/TSvKc6o Flight Trackers go.bsky.app/NKZeoR9 Ship Enthusiasts🚢 go.bsky.app/ScoHkM9 📡 #GEOINT #IMINT #SAT🛰️ Enthusiasts go.bsky.app/PzSSWrC OSINT ❗BREAKING❗NEWS 🗞️ go.bsky.app/446515N OSINT 💻 Cyber Enthusiasts🤖 go.bsky.app/N4W14ch
1318978
Nixintel @nixintel.bsky.social · 18/11/2024
We also need much more information before deciding that today saw one of the biggest CNI attacks of all time. /end
110
Nixintel @nixintel.bsky.social · 18/11/2024
This does not exclude the possiblilty that the outages are malicious, but zooming out a little shows that NPP failures are regular occurrences. Clustering illusions feel right, but we always need to seek evidence to the contrary. 6/
110
Nixintel @nixintel.bsky.social · 18/11/2024
So is there are pattern, or are we seeing things? #Loviisa has suffered three unplanned outages already this year. #Olkiluoto has had four, including one this month already. 5/ umm.nordpoolgroup.com#/messages/3e... umm.nordpoolgroup.com#/messages/e5...
umm.nordpoolgroup.com
Nord Pool - UMM Platform
110
Nixintel @nixintel.bsky.social · 18/11/2024
Nord Pool provides up to date information about power availability across Europe. The nuclear power plant failures at #Loviisa and #Olkiluoto both show up here. umm.nordpoolgroup.com#/messages?pu... 4/
umm.nordpoolgroup.com
Nord Pool - UMM Platform
110
Nixintel @nixintel.bsky.social · 18/11/2024
...also two Finnish nuclear power plants also went offline today. Must be Russian sabotage, can't be coincidence right? Maybe it is, but we need more evidence than mere happenstance. There are some open sources that can help to determine the full extent of the pattern. #OSINT 3/
110
Nixintel @nixintel.bsky.social · 18/11/2024
2/ Apophenia/clustering illusion is the tendency to see a pattern in data or events that does not really exist. It is natural human behaviour but contrary to sound analysis. Two undersea cables are cut - likely due to sabotage (but accident has not yet been publicly ruled out)... 2/
110
Nixintel @nixintel.bsky.social · 18/11/2024
It's interesting to see how the cutting of two undersea cables in the #Baltic spirals. We don't have any significant public comment from investigating officials yet, but already the eternal problem of analytical bias rears its head. 1/
110
Nixintel @nixintel.bsky.social · 06/04/2024
Extremely windy climb into #StormKathleen but worth it for the view.
020
Reposted by Nixintel
Sector035 @sector035.bsky.social · 11/03/2024
Another Monday filled with interesting articles, tips and news. This Week in #OSINT is brought to you by: @mwosint.bsky.social @bashinho.de @fs0c131y.com @christinalekati.bsky.social @nixintel.bsky.social sector035.nl/articles/202...
sector035.nl
Week in OSINT 202410
Welcome to another very lengthy update from the world of OSINT, with some Google searches, strategy and a hint of Insta and Snaps... One of
0107
Reposted by Nixintel
Horkos @wylienewmark.bsky.social · 10/02/2024
it’s time to burn the incense, it’s time to slay the sheep, it’s time to wake the muppets, from a thousand years of sleep. it’s time to raze existence, it’s time to banish light, it’s time to call the void in, on the muppet show tonight.
352108764
Reposted by Nixintel
Dutch_OsintGuy @dutchosintguy.bsky.social · 11/02/2024
Had a great time @hackerhotel.bsky.social ! Thanks for letting me talk about #OSINT and how #AI fuels #disinformation #hackerhotel
071
Reposted by Nixintel
Sector035 @sector035.bsky.social · 12/02/2024
Will you look at that! It is another episode of Week in #OSINT that suddenly appears… All thanks to the free roaming spirits of: @osinttechniques.bsky.social @bashinho.de @tlmn.bsky.social @needlestackpod.bsky.social @webbreacher.com @trbrtc.bsky.social sector035.nl/articles/202...
077
Nixintel @nixintel.bsky.social · 11/02/2024
More outside time.
141
Nixintel @nixintel.bsky.social · 10/02/2024
Winter is nearly over. It's good to get outside again.
040
Nixintel @nixintel.bsky.social · 30/09/2023
Life is always better after a couple of hours outside on a bike.
030
Reposted by Nixintel
Sector035 @sector035.bsky.social · 18/09/2023
Week in OSINT is back! Check out this week's episode here: sector035.nl/articles/202...
0108
Nixintel @nixintel.bsky.social · 17/09/2023
It got right under my helmet and stung me on before I could rip my helmet off. Right on the bald spot too.
100
Nixintel @nixintel.bsky.social · 17/09/2023
Great day for a bike ride. Ruined only by getting stung in the head by a wasp a few miles from home.
100
Nixintel @nixintel.bsky.social · 14/09/2023
Sorry for your loss.
000
Nixintel @nixintel.bsky.social · 14/09/2023
Had a great time speaking about all things OSINT and Cyber last night. Nice to meet lots of local infosec people too. More cyber events should be held in the pub.
020
Nixintel @nixintel.bsky.social · 07/09/2023
3D printing?
100
Nixintel @nixintel.bsky.social · 07/09/2023
Pic of the day. Seriously hot hiking weather.
000
Nixintel @nixintel.bsky.social · 29/08/2023
Pic of the day.
030
Nixintel @nixintel.bsky.social · 19/08/2023
Pic of the day.
040
Reposted by Nixintel
Baptiste Robert @fs0c131y.com · 08/08/2023
My BlueSky account will probably my next main social network account. A lot of #OSINT practitioners have already an account. It’s up to us to be connected again
4276
Reposted by Nixintel
Baptiste Robert @fs0c131y.com · 05/08/2023
Let’s create a list of #OSINT practitioners accounts to follow on BlueSky! Add the usernames you have in the comments! (It can be you 😅)
1411644
Reposted by Nixintel
Dutch_OsintGuy @dutchosintguy.bsky.social · 07/08/2023
Sign up for the FREE SANS #OSINT SUMMIT www.sans.org/cyber-security-trainin… SANS OSINT course? - SEC497: Practical Open-Source Intelligence (OSINT) sans.org/sec497 - SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis sans.org/sec587
0138