How to Use Open Source Intelligence (OSINT) in Investigations

•

11 recomendaciones•5,033 vistas

Every investigator needs the skills and knowledge to use OSINT competently in investigations. As online information continues to multiply in volume and complexity, the tools required to find, sift through, authenticate and preserve that information become more and more important for investigators. Failure to master these tools to tap into the rich resources of the web can hamper your investigations. Learn the intricacies of online investigating from an expert in the field. Join Sandra Stibbards, owner and president of Camelot Investigations and a financial fraud investigator, speaker and trainer, for a free webinar on How to Use OSINT in Investigations. Webinar attendees will learn: -How to find information on the hidden web -How to find publicly available information in government and private databases -Dos and don’ts for searching social media effectively -Tips for remaining anonymous while researching investigation subjects -Accessing archived information -How criminals hide, and how to find them

Tecnología

How to Use Open Source Intelligence
in Investigations
Sandra Stibbards, Camelot Investigations

Always be sure to……
THINK
OUTSIDE
THE BOX
Sandra Stibbards, Camelot
Investigations © 2016

Security
and
Privacy
Sandra Stibbards, Camelot
Investigations © 2016

Sandra Stibbards, Camelot
Investigations © 2016
Secure/Encryted Email

Secure Browsers
Sandra Stibbards, Camelot
Investigations © 2016

VPN/proxy Servers
purevpn is One of Many
Sandra Stibbards, Camelot
Investigations © 2016

Other Ways to Secure Your Privacy
Sandra Stibbards, Camelot
Investigations © 2016

Malwarebytes
Sandra Stibbards, Camelot
Investigations © 2016

CCLEANER
Sandra Stibbards, Camelot
Investigations © 2016

Google.com/Trends
Sandra Stibbards, Camelot
Investigations © 2016

Google.com/Alerts
Sandra Stibbards, Camelot
Investigations © 2016

Exploit-DB.com/Google-
Hacking-Database/
Sandra Stibbards, Camelot
Investigations © 2016

Google Earth Pro – Free Mobile
Version Also
Sandra Stibbards, Camelot
Investigations © 2016

International
People
Searches
10/17/2016

SPOKEO.COM
Sandra Stibbards, Camelot
Investigations © 2016

INFOBEL.COM/EN/WORLD
Sandra Stibbards, Camelot
Investigations © 2016

HAVEIBEENPWNED.COM
Sandra Stibbards, Camelot
Investigations © 2016

WIPO.INT/pct/en
Sandra Stibbards, Camelot
Investigations © 2016

FAMILYSEARCH.ORG
Sandra Stibbards, Camelot
Investigations © 2016

International
Social Networks
& Media
10/17/2016

LINKEDIN.COM
Sandra Stibbards, Camelot
Investigations © 2016

Privacy Settings Come First
Sandra Stibbards, Camelot
Investigations © 2016

Open Search System
Sandra Stibbards, Camelot
Investigations © 2016

TWITTER.COM
Sandra Stibbards, Camelot
Investigations © 2016

APP.TEACHINGPRIVACY.COM
Sandra Stibbards, Camelot
Investigations © 2016

TALKWALKER.COM/ALERTS
Sandra Stibbards, Camelot
Investigations © 2016

FACEBOOK.COM
Sandra Stibbards, Camelot
Investigations © 2016

https://developers.facebook.com/docs/plugins/embedded-posts
Sandra Stibbards, Camelot
Investigations © 2016

Picture Mate Plug In
Sandra Stibbards, Camelot
Investigations © 2016

Others to Remember
VK.COM
WEIBO.COM
INSTAGRAM.COM
PANORAMIO.COM
FOURSQUARE.COM
YOUTUBE.COM
Sandra Stibbards, Camelot
Investigations © 2016

TinEye.com
Sandra Stibbards, Camelot
Investigations © 2016

DOMAINTOOLS.COM
Sandra Stibbards, Camelot
Investigations © 2016

ARCHIVE.ORG/WEB/
Sandra Stibbards, Camelot
Investigations © 2016

StatsCrop.com
Sandra Stibbards, Camelot
Investigations © 2016

WhoIsMind.com
Sandra Stibbards, Camelot
Investigations © 2016

EmailSherlock.com
Sandra Stibbards, Camelot
Investigations © 2016

AddressSearch.com
Sandra Stibbards, Camelot
Investigations © 2016

READNOTIFY.COM
Sandra Stibbards, Camelot
Investigations © 2016

International
Business
Information
10/17/2016

GLASSDOOR.COM
Sandra Stibbards, Camelot
Investigations © 2016

SEC.gov/edgar.shmtl
Sandra Stibbards, Camelot
Investigations © 2016

FreeERISA.com
Sandra Stibbards, Camelot
Investigations © 2016

PACER.GOV
Sandra Stibbards, Camelot
Investigations © 2016

TLO.COM
Sandra Stibbards, Camelot
Investigations © 2016

Thank-you for participating
If you have any questions, please feel free
to email them to:
Sandra Stibbards, Owner / President of Camelot Investigations
sandra@camelotinvestigations.com
Questions about i-Sight:
info@i-sight.com
10/17/2016

Más contenido relacionado

La actualidad más candente

From SANS Cyber Threat Intelligence Summit 2016. What are the characteristics of a mature cyber threat intelligence program, and how do you develop meaningful metrics? Traditionally, intelligence has been about providing decision support to executives whilst the field of cyber threat intelligence supports this customer, and network defenders, who have different requirements. By using the intelligence cycle, this talk will seek to help attendees understand how they can identify what a mature intelligence program looks like and the steps to take their program to the next level.

Cyber threat intelligence: maturity and metrics

Mark Arena

Cyber Threat Intelligence | Information to Insight

Deep Shankar Yadav

Open source intelligence

balakumaran779

Open source intelligence information gathering (OSINT)

phexcom1

Presented at BSides Perth 2019 Synopsis: Although the practice of collecting and using intelligence has been studied and conducted by governments and the military for centuries, it’s relative application to Cyber Security has only recently been highlighted. This area of infosec has been termed Cyber Threat Intelligence, where the marriage of traditional intelligence techniques and analysis with deep technical understanding within the Cyber domain are used to predict future actions by threats through long term analysis and modelling. This approach is then used to support both proactive and reactive cyber security actions, from incident response to penetration testing. This presentation focuses on threat intelligence from a practical data perspective, moving away from just the commercial concept of threat intelligence feeds (although these form one part of the equation). This presentation will approach threat intelligence from an analysts perspective of what questions needs to be answered to effectively investigate an incident, using the Diamond Model and Cyber Kill Chain as framing devices. These questions will then lead to examples of the data that can be used to answer these questions. Although traditionally data collection has focused on external cyber information, more often than not however, it’s actions outside of those seen within an organisations network, or even outside cyberspace that can provide context to the actions a threat takes. Finally, we provide a number of use cases on which the results of threat intelligence processes can be applied within a Security Operations Centre, including Incident Response as well as traditional Penetration Testing and Red Teaming.

Cyber Threat Intelligence - It's not just about the feeds

Iain Dickson

Osint {open source intelligence }

AkshayJha40

The best form of defense against cyber attacks and those who perpetrate them is to know about them. Collaborative defense has become critical to IT security, and sharing threat intelligence is a force multiplier. But for many organizations, good quality intelligence is hard to come by. Commercial threat intelligence technology and services can help enterprises arm themselves with the strategic, tactical and operational insights they need to identify and respond to global threat activity, and integrate intelligence into their security programs. Threat intelligence sources have varying levels of relevance and context, and there are concerns about data quality and redundancy, shelf life, public/private data sharing, and threat intelligence standards. However, if processed and applied properly, threat intelligence provides a way for organizations to get the insight they need into attackers’ plans, prioritize and respond to threats, shorten the time between attack and detection, and focus staff efforts and decision-making. View to learn: --The difference between threat information and threat intelligence. --Available sources of intelligence and how to determine if they apply to your business. --Key steps for preparing to ingest threat information and turn it into intelligence. --How to derive useful data that helps you achieve your business goals. --Tools that are available to make collaboration easier.

6 Steps for Operationalizing Threat Intelligence

Sirius

OSINT - Open Source Intelligence

c0c0n - International Cyber Security and Policing Conference

Cyber Threat Intelligence

mohamed nasri

In the world of cyber security, a single defeat can be extremely costly.Before you create a plan, it’s vital to learn about the anatomy of a data breach – and understand who your attackers are. In a standard data breach, the type that occurs between 80 to 90 million times per year, there are roughly 6 essential steps, each of which will be outlined below. It’s time for a quick anatomy lesson to strengthen your cyber security program:

The Anatomy of a Data Breach

David Hunt

You Have an Adversary Problem. Who's Targeting You and Why? Nation-States, Hacktivists, Industrial Spies, and Organized Criminal Groups are attacking your enterprise on a daily basis. Their goals range from espionage for technology advancement and disruption of critical infrastructure to for-profit theft of trade secrets and supporting a political agenda. You no longer have a malware problem, you have an adversary problem, and you must incorporate an intelligence-driven approach to your security strategy. During this CrowdCast, you will learn how to: Incorporate Actionable Intelligence into your existing enterprise security infrastructure Quickly understand the capabilities and artifacts of targeted attacked tradecraft Gain insight into the motivations and intentions of targeted attackers Make informed decisions based off of specific threat intelligence

CrowdCasts Monthly: You Have an Adversary Problem

CrowdStrike

Cyber kill chain

Ankita Ganguly

As we get to know what life in the digital domain is like, one of the revelations we've had is that many large and plenty of smaller organisations are targets of espionage, of the nefarious APT. During the last decade, it has become gospel to wait, watch, analyse and learn if you detect such an attacker in your infrastructure. Why? Because you get one chance to do the eviction of the attacker right. And if you fail, all your efforts will eventually have been for nothing. But for how long should you wait and watch? When have you watched long enough? When have you learned enough? And how do you make that decision? That is the challenge I hope the Cyber Threat Intelligence Matrix can help you face in a more structured manner.

The Cyber Threat Intelligence Matrix

Frode Hommedal

Tools for Open Source Intelligence (OSINT)

Sudhanshu Chauhan

Threat Hunting

Splunk

MITRE ATT&CK is quickly gaining traction and is becoming an important standard to use to assess the overall cyber security posture of an organization. Tools like ATT&CK Navigator facilitate corporate adoption and allow for a holistic overview on attack techniques and how the organization is preventing and detecting them. Furthermore, many vendors, technologies and open-source initiatives are aligning with ATT&CK. Join Erik Van Buggenhout in this presentation, where he will discuss how MITRE ATT&CK can be leveraged in the organization as part of your overall cyber security program, with a focus on adversary emulation. Erik Van Buggenhout is the lead author of SANS SEC599 - Defeating Advanced Adversaries - Purple Team Tactics & Kill Chain Defenses. Next to his activities at SANS, Erik is also a co-founder of NVISO, a European cyber security firm with offices in Brussels, Frankfurt and Munich.

Leveraging MITRE ATT&CK - Speaking the Common Language

Erik Van Buggenhout

Cyber Threat Intelligence is a process in which information from different sources is collected, then analyzed to identify and detect threats against any environment. The information collected could be evidence-based knowledge that could support the context, mechanism, indicators, or implications about an already existing threat against an environment, and/or the knowledge about an upcoming threat that could potentially affect the environment. Credit: Marlabs Inc

Cyber Threat Intelligence

Marlabs

Introduction to Offensive Security.pptx

MaaitrayoDas

Role of Forensic Triage In Cyber Security Trends 2021

Amrit Chhetri

Cyber Threat Intel : Overview

Deepak Kumar (D3)

La actualidad más candente (20)

Cyber threat intelligence: maturity and metrics

Cyber Threat Intelligence | Information to Insight

Open source intelligence

Open source intelligence information gathering (OSINT)

Cyber Threat Intelligence - It's not just about the feeds

Osint {open source intelligence }

6 Steps for Operationalizing Threat Intelligence

OSINT - Open Source Intelligence

Cyber Threat Intelligence

The Anatomy of a Data Breach

CrowdCasts Monthly: You Have an Adversary Problem

Cyber kill chain

The Cyber Threat Intelligence Matrix

Tools for Open Source Intelligence (OSINT)

Threat Hunting

Leveraging MITRE ATT&CK - Speaking the Common Language

Cyber Threat Intelligence

Introduction to Offensive Security.pptx

Role of Forensic Triage In Cyber Security Trends 2021

Cyber Threat Intel : Overview

Destacado

As per Wiki - Open-source intelligence (OSINT) is intelligence collected from publicly available sources. In the intelligence community (IC), the term "open" refers to overt, publicly available sources (as opposed to covert or clandestine sources); it is not related to open-source software or public intelligence. There are lots of other ways to collect information from Public Source which may not provided in this document, This is just an Introductory Document for whose who are beginners and students.

OSINT - Open Source Intelligence "Leading Intelligence and Investigation Tech...

Falgun Rathod

OSINT for Attack and Defense

Andrew McNicol

Blackmagic Open Source Intelligence OSINT

Sudhanshu Chauhan

Open Source Intelligence Gathering (OSINT) is growing in popularity among attackers and defenders alike. When an attacker comes knocking on your network's front door, the warning lights go off in multiple systems (IDS, IPS, SIEM, WAF). More sophisticated attackers, however, spend considerable time gathering information using tools and techniques that never touch any of your systems. As a result, these attackers are able to execute their attacks and make off with proprietary data before you even know they are there. This presentation provides an introduction to many OSINT tools and techniques, as well as methods you can use to minimize your exposure.

What you need to know about OSINT

Jerod Brennen

OSINT using Twitter & Python

37point2

Osint overview 26 mar 2015

Mats Björe

Tactical Information Gathering

Christian Martorella

Presented at the Ohio Information Security Summit, October 30, 2009. What does the Internet say about your company? Do you know what is being posted by your employees, customers, or your competition? We all know information or intelligence gathering is one of the most important phases of a penetration test. However, gathering information and intelligence about your own company is even more valuable and can help an organization proactively determine the information that may damage your brand, reputation and help mitigate leakage of confidential information. This presentation will cover what the risks are to an organization regarding publicly available open source intelligence. How can your enterprise put an open source intelligence gathering program in place without additional resources or money. What free tools are available for gathering intelligence including how to find your company information on social networks and how metadata can expose potential vulnerabilities about your company and applications. Next, we will explore how to get information you may not want posted about your company removed and how sensitive metadata information you may not be aware of can be removed or limited. Finally, we will discuss how to build a Internet posting policy for your company and why this is more important then ever.

Enterprise Open Source Intelligence Gathering

Tom Eston

Going into an investigation interview with no knowledge of the interview subject is like going into a job interview with no knowledge about the company. You’re unlikely to get the information you need (or the job you want). Before meeting an interview subject an investigator should do some online research on the interview subject. Background information can help the investigator establish rapport, identify areas of vulnerability and determine questioning strategies.

Investigating online conducting pre-interview research

Case IQ

Technology is exploding at an exponential rate and is already creating challenges for investigators of all types, from human resources to law enforcement. Cloud computing and the pervasive use of mobile devices have made it harder for investigators to identify and preserve digital evidence. New encrypted phone apps and virtual private networks have made it easier for people to hide and to cover their tracks. We also need to think about how technology can produce new types of crime that have never been seen before. Join Walt Manning, President of Investigations MD and the Techno-Crime Institute as well as a speaker and trainer, as he discusses strategies for preparing for the future of investigations. The webinar will cover: • How technology is already changing the rules for investigators • Avenues new technologies will open up for fraud and other misconduct • Examples of technology-enabled crimes of the future What investigators should be thinking about today to prepare for the investigation strategies of tomorrow

Technology Explosion and Future of Investigations

Case IQ

How OSINT will play an important role in the future, helping to predict, prevent and react against incidents that threaten the Global security. The presentation will delve into the tools and techniques that enable OSINT practitioners to measure the Global security signals conveyed by the Internet. Multiple facets of information dissemination, collection, analysis and interpretation will be examined, with a focus on the security dimension of the information.

OSINT 2.0 - Past, present and future

Christian Martorella

Many investigation reports are written poorly because investigators simply don’t know what to include. Poorly written reports provide little value and may even increase a company’s legal risk. A well written investigation report presents the right information, includes careful analysis and reaches a conclusion. Meric Bloch, author, trainer, speaker and Principal of Winter Compliance, as he outlines the fundamentals of writing investigation reports. You will learn: -What information to include and how to include it -How to assess witness credibility -Strategies for evaluating proof -How to present findings -How to avoid the most common report writing mistakes

Investigation Report Writing: A Nuts and Bolts Approach

Case IQ

2006 multinational intelligence (centcom ccc)

Robert David Steele Vivas

The ability to write clear, concise, accurate and informative investigation reports is a valuable skill for investigators of all kinds. A well-written investigation report provides a complete picture of the incident or event and leaves no questions unanswered about who did what, when and how and is written in language that can be understood by anyone reading it. Unfortunately, many investigators see writing effective investigation reports as a chore, and that’s why so many reports are rushed, poorly written and incomplete.

Writing Effective Investigation Reports

Case IQ

With 1.2 billion monthly active users on Facebook alone, it’s not surprising that social media networks can be a rich source of information for investigators. And because Americans spend more time on social media than any other major Internet activity, including email, social media information and evidence is plentiful. You just need to know how to get it. Finding, preserving and collecting social media evidence often requires some forensic skills, as well as an understanding of the laws that govern its collection and use. It’s important for investigators to be aware of both the possibilities and limitations of social media forensics.

Social Media Forensics for Investigators

Case IQ

Open source intelligence analysis

zapp0

OSINT su siti web

dalchecco

Readi Response Service Offering

Jake Simon

Conducting Anonymous Online Investigations - Webinar

Case IQ

I pericoli dell'Internet of Things in ambito sanitario, industriale e privato

Danilo De Rogatis

Destacado (20)

OSINT - Open Source Intelligence "Leading Intelligence and Investigation Tech...

OSINT for Attack and Defense

Blackmagic Open Source Intelligence OSINT

What you need to know about OSINT

OSINT using Twitter & Python

Osint overview 26 mar 2015

Tactical Information Gathering

Enterprise Open Source Intelligence Gathering

Investigating online conducting pre-interview research

Technology Explosion and Future of Investigations

OSINT 2.0 - Past, present and future

Investigation Report Writing: A Nuts and Bolts Approach

2006 multinational intelligence (centcom ccc)

Writing Effective Investigation Reports

Social Media Forensics for Investigators

Open source intelligence analysis

OSINT su siti web

Readi Response Service Offering

Conducting Anonymous Online Investigations - Webinar

I pericoli dell'Internet of Things in ambito sanitario, industriale e privato

Similar a How to Use Open Source Intelligence (OSINT) in Investigations

Advanced Resources and Tools for Online Investigations

Case IQ

Webinar: 10 steps you can take to protect your business from phishing attacks

Cyren, Inc

About Zero Point Risk Research Llc

lrschade

Vishwadeep Presentation On NSA PRISM Spying

Vishwadeep Badgujar

With online fraud cases on the rise, ClearScore's very first Darkpaper explores the UK's attitudes to the dark web and delves into consumers' experiences of online fraud. Key findings - A third (33%) of people in the UK have been victims of online fraud. - Banking details were compromised in 58% of online fraud cases in the UK. - Online fraud is most likely to cost to individuals between £101 and £500, with 8% of people surveyed losing more than £1,001. - People in the UK are most likely to only rotate two to three passwords for their online accounts - although nearly a third (29%) have five to ten passwords. - A quarter of UK residents think some of their data could be for sale on the dark web, although over 55s are most likely not to know (53%).

The ClearScore Darkpaper: The danger of the dark web 2020

Jayna Mistry

The #BigData Dilemna

Vivendi Content

Fourth Amendment as a Service - Workshop - 2-21-17

FourthAsAService

Real world lessons from CrowdStrike Services experts investigating complex cyber extortion attacks The criminal act of theft is as old as civilization itself, but in the cyber realm new ways to steal your organization's data or profit by holding it hostage, continue to evolve. With each advancement in security technology, adversaries work tirelessly on new techniques to bypass your defenses. This webcast, "Cyber Extortion: Digital Shakedowns and How to Stop Them" examines the evolution of cyber extortion techniques, including the latest "datanapping" exploits. Whether it's an attack on a major movie studio, a massive healthcare system, or a global entertainment platform, recent extortion attempts demonstrate how critical it is to understand today's threat landscape so you can ensure that your organization mounts the best defense possible. Download this presentation to learn what security experts from the cyber defense frontlines are discussing. Learn about: •The range of extortion techniques being used today, including commonalities and differences in approaches •Commodity type ransomware/datanapping vs. hands-on attacks — how are they alike and what are their differences? •Potential outcomes of paying vs. not paying when attempting to recover data after an attack •Real world examples of successful attacks and those that were thwarted or mitigated •Strategies for keeping your organization from being targeted and what to do if you become the victim of a cyber shakedown

Cyber Security Extortion: Defending Against Digital Shakedowns

CrowdStrike

Establishing_strategic_level_anaysis_Brown_-_CTI_and_IR_Conference_London_2016

Cameron Brown

Webinar series from FraudResourceNet LLC on Preventing and Detecting Fraud Using Data Analytics. Recordings of these Webinars are available for purchase from our Website fraudresourcenet.com This Webinar focused on fraud detection using data analytic software (Excel, ACL, IDEA) FraudResourceNet (FRN) is the only searchable portal of practical, expert fraud prevention, detection and audit information on the Web. FRN combines the high quality, authoritative anti-fraud and audit content from the leading providers, AuditNet ® LLC and White-Collar Crime 101 LLC/FraudAware. The two entities designed FRN as the “go-to”, easy-to-use source of “how-to” fraud prevention, detection, audit and investigation templates, guidelines, policies, training programs (recorded no CPE and live with CPE) and articles from leading subject matter experts. FRN is a continuously expanding and improving resource, offering auditors, fraud examiners, controllers, investigators and accountants a content-rich source of cutting-edge anti-fraud tools and techniques they will want to refer to again and again.

Recognizing and Preventing Fixed Asset and Inventory Fraud using Data Analysis

FraudBusters

Consumers' and Citizens' Privacy

Carolina Rossini

Conducting Digital Forensics against Crime and Fraud

Goutama Bachtiar

Ransomware: 2016's Greatest Malware Threat

Eric Vanderburg

The Dark Web consists of World Wide Web content existing on darknets, which are overlay networks that use the Internet, but require specific software, configurations, or authorization to access. The Dark Web forms a small part of the Deep Web - the part of the web not indexed by search engines - although sometimes the term, Deep Web, is mistakenly used to refer specifically to the Dark Web. Credit: Marlabs Inc

Dark Web and Threat Intelligence

Marlabs

2017 - Cibersecurity v1.0 (English version)

Rui Miguel Feio

Safe use of cloud - alternative cloud

Tomppa Järvinen

Could you find the fix and control the crisis?

Imogen Pickering

Preventing Corporate and Governmental Fraud

Compliance Global Inc

Webinar: Why evasive zero day attacks are killing traditional sandboxing

Cyren, Inc

RT_Corporate Fraud_NOV16

Maxwell Carr-Howard

Similar a How to Use Open Source Intelligence (OSINT) in Investigations (20)

Advanced Resources and Tools for Online Investigations

Webinar: 10 steps you can take to protect your business from phishing attacks

About Zero Point Risk Research Llc

Vishwadeep Presentation On NSA PRISM Spying

The ClearScore Darkpaper: The danger of the dark web 2020

The #BigData Dilemna

Fourth Amendment as a Service - Workshop - 2-21-17

Cyber Security Extortion: Defending Against Digital Shakedowns

Establishing_strategic_level_anaysis_Brown_-_CTI_and_IR_Conference_London_2016

Recognizing and Preventing Fixed Asset and Inventory Fraud using Data Analysis

Consumers' and Citizens' Privacy

Conducting Digital Forensics against Crime and Fraud

Ransomware: 2016's Greatest Malware Threat

Dark Web and Threat Intelligence

2017 - Cibersecurity v1.0 (English version)

Safe use of cloud - alternative cloud

Could you find the fix and control the crisis?

Preventing Corporate and Governmental Fraud

Webinar: Why evasive zero day attacks are killing traditional sandboxing

RT_Corporate Fraud_NOV16

Más de Case IQ

With recent announcements of increasingly stringent federal policies around record-keeping and due diligence, compliance and investigation professionals are feeling the pressure to demonstrate consistency and rigor in their case management processes. Planning your investigation, having the right team members involved and reporting on outcomes of an investigation can all be difficult phases of the process. However, being able to demonstrate that you are quickly, consistently and accurately triaging incidents is even more important now. The key is to establish decision-making approaches and plan out your entire protocol before the matter comes to your attention through hotline reporting or other mechanism. This ensures structure and success as you triage, investigate, staff the investigation properly and meet the inevitable challenges of reporting and addressing the root causes of incidents.

How Best Practices in Triage Protocol Can Boost Compliance and Reduce Risk

Case IQ

In order to avoid risk while running a successful organization, today’s leaders need to do more than react to cases of harassment, misconduct and employee fraud. They need to prevent these issues. Purpose-built case management software provides data-driven reports that help companies manage risk, spot trends and protect employees and the organization by preventing incidents, as well as fines and reputation damage. But home-grown or dated solutions come with many challenges. For instance, managing incidents and investigations using manual methods leads to duplication of effort and information silos, resulting in inefficiency. Using these solutions also comes with security risks and inconsistent documentation, opening the company up to fines and lawsuits. i-Sight’s powerful case management platform streamlines your investigative process and provides the data you need to analyze results, prevent incidents and protect your employees. You’ll save time and money, ensure compliance, and reduce risk, all with one tool.

How to Drive Efficiency and Reduce Risk with Investigative Case Management So...

Case IQ

When investigating a “he said/she said” case of sexual harassment or other alleged misconduct, are you using scientifically validated methods to interview witnesses, assess their credibility, and reach a defensible conclusion? Over the past 15 years, scientists have found that much of the conventional wisdom on how to effectively interview witnesses and determine truthfulness is wrong. At the same time, courts have found companies liable for using scientifically unproven interviewing techniques in workplace investigations. In this webinar you will learn about the hundreds of research studies that scientists have conducted on how to best interview witnesses and assess credibility. You will learn how to apply these scientifically validated methods to your investigations. Join the i-Sight team and former U.S. Department of Justice attorney Michael Johnson as they discuss how to apply these scientifically validated methods to your investigations.

Who's Lying? Using the Cognitive Interview to Assess Credibility in Workplace...

Case IQ

Vicarious trauma is a type of second-hand psychological response most often associated with first responders and front-line crisis workers. Although corporate incident investigators and HR and compliance professionals are usually not the first on the scene, they frequently find themselves listening to both victims and accused people who recount what could be the worst days of their professional lives. There is no doubt that the case management process can be stressful and sometimes triggering for those who are managing it. The personal and organizational impacts can include compromised risk assessment and investigations, investigator burnout and absenteeism, and a less healthy workplace overall. Join expert workplace investigator Ken McCarthy as he shares his experience with vicarious trauma and compassion fatigue resulting from his involvement in workplace investigations.

Protecting the Mental Wellbeing of Corporate Investigators

Case IQ

As an investigator, you don’t define your value to the organization; leadership does. What are you doing to be a better business advisor and contribute to the organization’s goals? In other words, why should the bosses listen to you? Because misconduct doesn’t happen in a vacuum! It results from a perfect storm of factors like employee ignorance, a failure to see the larger implications, a lack of training and procedures, or a failure of internal controls. And you have a view to all of this in your cases. This webinar outlines how you can become a better strategic advisor, how to think like a business leader, and what keeps executives awake at night. You’ll learn how case management can drive a culture of prevention, and how you can prove the bottom-line ROI of investigations. Join Meric Bloch, Strategic Advisor at Winter Investigations as he discusses how investigators can become business advisors to the C-suite using their knowledge of case management and risk assessment. In this webinar, you will learn: Goals of a strategic business advisor. -What advice does a strategic advisor give? -What should a strategic advisor not do? -How an investigator can become a strategic advisor. -How stellar case management positions investigators as strategic advisors.

Meric Bloc_Webinar Nov22.pptx

Case IQ

You get it. Being an ethical organization matters. A lot. But ethics isn’t just a quarterly HR campaign or a glossy conduct guide; in order to really have a bottom-line business impact, organizational ethics must function as an integral pillar of company culture over time. So, what are the best practices to make sure your organization is regularly thinking about ethics and including it in everyday decision making? What are some creative ways to bring focus to this vital but often overlooked function? And how can you most effectively deal with and investigate an incident or a breach when it occurs?

5 Steps to Creating an Ethical Work Culture

Case IQ

Compliance officers know that a strong culture of compliance is indispensable to risk management and better business performance in the modern world. So how, exactly, can you capture insights into the current state of your corporate culture, and then use that information to (1) shore up weak spots in ethics and compliance operations; and (2) leverage a strong culture of compliance for better operations across the enterprise? Join Matt Kelly, Editor and CEO of RadicalCompliance.com, as he discusses how and why compliance leaders need to use data to improve their investigations and corporate culture.

How to Assess, Level Up, and Leverage Your Culture of Compliance

Case IQ

Internal investigations have long been a part of every ethics & compliance program and every E&C professional’s tool kit. However, the US Department of Justice has made clear that internal investigations are more important than ever. In October 2021, Deputy Attorney General Lisa Monaco reinstituted the substance of the Yates Memo, requiring companies to turn over all information on any culpable individuals. Recent criminal enforcement actions by the DOJ have thrown new and increasing scrutiny on internal investigations. Now, CCOs and CECOs must certify compliance in any FCPA settlement. In short, getting E&C internal investigations right has taken on a new importance.

Everything You Need to Get E&C Investigations Right (According to the DOJ)

Case IQ

Over the past few months, we’ve seen employees quit in record numbers. While there are many reasons for “The Great Resignation”, a standout is employee trust. A study from Gallup suggests that only one in three employees strongly agree that they trust the leadership of their organization. Employees want to trust the companies they work at and the people they work with. They want to feel comfortable coming to HR with their complaints and concerns. But building trust takes time, and effort. As organizations are planning their post-pandemic strategies, now is a perfect time to place an intentional emphasis on building trust.

5 Ways to Build Employee Trust for Less Turnover and Fewer Incidents

Case IQ

In today’s “new world of work,” many organizations run on a hybrid model, with some employees working remotely and others in the physical office. While this set-up is convenient, it can cause unique interpersonal issues between employees. Reduced face-to-face communication makes it harder for teams to bond, while making it easier for harassers to get away with bad behavior. To reduce harassment incidents in your hybrid workplace, you need to foster a culture of openness, willingness to learn, and compassion. Join workplace investigation and executive management expert Kenneth McCarthy as he outlines how to address and prevent hybrid workplace harassment incidents.

Hybrid Workplace Harassment: Are You Protecting Your Company from Hidden Thre...

Case IQ

The topic of workplace diversity, equity, and inclusion is at an all-time high right now. It has been proven that there is a direct correlation between inclusive workforces, productivity, and revenue. According to the McKinsey & Company diversity report, “companies in the top-quartile for ethnic and cultural diversity on executive teams were 33% more likely to have industry-leading profitability.” Without a strong DEI program, though, your organization could face internal harassment incidents, discrimination lawsuits, high employee churn, and a poor corporate reputation, leading to lost customers and clients. Join inclusive marketing consultant, speaker, and author Michelle Ngome as she outlines DEI best practices that will increase your organization’s revenue, as well as prevent workplace incidents.

Finding Value Before a Crisis: How Workplace DEI Drives Revenue and Prevents ...

Case IQ

More and more, disgruntled employees have been taking to TikTok, Twitter, and other social media sites to share videos and posts of their bad work experiences. These stories are more likely than ever to go viral, which can lead to lost business, reputational damage, employee churn, and lawsuits, just to name a few unwelcome consequences for employers. While some people might be acting in bad faith, employees have been finding tried traditional HR channels less than satisfactory. They feel un-heard and undervalued, and they turn to the internet to tell their stories, and receive fast responses. You can’t build a brand or accomplish your mission statement without your employees. To avoid the repercussions of viral incidents and strengthen your brand, you have to repair your employer/employee relationship and work culture—or better yet, create a healthy, ethical culture from the start. Join employment lawyer Janette Levey as she breaks down major viral incidents including Better.com, Starbucks, and Amazon, their consequences, and what to do to avoid them.

How Not to Get Called Out on TikTok: Improving Your Brand Through Employer/Em...

Case IQ

What is Psychological Safety in the Workplace?

Case IQ

Case management is an integral component of any institution’s overall compliance program, let alone those with suspicious activity report (“SAR”) filing responsibilities. However, misconduct is often reported through multiple channels such as whistleblower complaints, HR, and even through a company’s legal department. If misconduct requires SAR filing, input from HR, and advice from legal, but comes in through possibly siloed teams, how can a company feel confident that they are accurately capturing and consistently dispositioning these cases? The answer boils down to an often-overlooked area – case management systems. Join financial crime compliance advisory and training specialist Michael Schidlow, as he explains best and worst practices in the field, gives tips on what case management tools should always and shouldn’t ever do, and describes how to utilize metrics from those systems to get an accurate snapshot of their company’s risk profile.

Misconduct or Missed Conduct? Ensuring Consistent SAR Reporting of Internal M...

Case IQ

There’s no place for sexual harassment in today’s workplace, and employers have a responsibility to investigate every allegation. But reacting after a complaint is made doesn’t fix a culture that allows sexual harassment to occur. A proactive approach, incorporating a strong policy, backed by training and commitment at all levels, is key to building an organizational culture that discourages sexual harassment. Join Philip Miles, employment lawyer, McQuaide Blasko, as he outlines the steps for building policies and training plans to prevent sexual harassment in the workplace.

Building Effective Sexual Harassment Prevention Policies and Training

Case IQ

The modern workplace should be an inclusive and welcoming environment for all employees but that isn’t always the case. In fact, systemic inequality is the norm for a vast number of workplaces throughout North America, Europe and beyond. And while the BLM and MeToo movements have received much media attention, the underlying factors that contribute to the inequality they point out aren’t always addressed. Implicit, or unconscious, bias is the root of many systemic inequities in the workplace. It’s important that we recognize our personal biases, take action to mitigate them and actively serve as an ally to others. On June 10, join Catherine Mattice-Zundel, president of Civility Partners, a training and consulting firm focused on helping organizations build positive workplace cultures, as she outlines strategies for uncovering and reducing implicit bias in workplace decision-making. The webinar will cover: ● The origins of bias and four different types of bias ● Risk factors that increase our likelihood to engage in bias ● How to compensate for and attempt to overcome bias through clear and tangible actions ● Strategies to combat microaggressions and other exclusive behaviors using simple, tried and true intervention methods

How to recognize and minimize unconscious bias in the workplace

Case IQ

Whether you are investigating fraud, harassment or other misconduct, solid online research skills can serve you well. The internet is a valuable resource for finding information and evidence to support your case, and it’s important to stay up to date on its use and limitations. Join Cynthia Hetherington, investigation expert, trainer and founder of Hetherington Group, as she explores techniques and tools for getting the information you need online.

Search Engine Skills for Workplace Investigators

Case IQ

In a 2019 Monster survey, 90 per cent of employees said they had experienced bullying in the workplace. The Pew Research Center reports that 69 per cent of women say they have been sexually harassed in a professional setting. These numbers point to a serious problem that leaders can’t afford to ignore. Policies and training are, of course, critical to the prevention of bullying and harassment, but there are other avenues that you may not have considered. Diversity and inclusion have benefits that go far beyond compliance. Not only do companies that embrace diversity and inclusion outperform those that don’t, but understanding, accepting and valuing differences ensures a fairer, more collaborative environment with less conflict. Join Catherine Mattice-Zundel, president of Civility Partners, a training and consulting firm focused on helping organizations build positive workplace cultures, as she explores strategies for using diversity and inclusion to prevent harassment and bullying. The webinar will cover: What constitutes bullying and harassment in the workplace Best practices for addressing and preventing bullying and harassment How diversity and inclusion helps to reduce bullying and harassment How to achieve diversity and inclusion Case studies of how bullying, inequities and harassment tie together, and how resolving one requires resolving all

Preventing Bullying and Harassment Through Diversity and Inclusion in the Wor...

Case IQ

“I never would have imagined”, said the company owner, manager, colleague, or workplace friend. It is hard to reconcile that people would engage in fraudulent behavior in the workplace, let alone the depth of these schemes. Financial misconduct and internal fraud are among the biggest threats to today’s organizations. Without the right controls and prevention measures in place, companies are at financial and reputational risk. Join financial crime compliance advisory and training specialist Michael Schidlow, as he reviews recent cases of internal fraud, what we can learn from them, and controls that companies can put in place to prevent fraud

Insider Threat: Cases and Controls to Prevent Internal Fraud and Prevention

Case IQ

It’s long been clear that organizations with strong ethical cultures perform better than those without. In addition to the multitude of positive impacts a strong ethical culture provides, these organizations will also typically experience less fraud and misconduct. However, to achieve maximum results, a strong ethical culture must focus on accountability and include robust fraud prevention measures. Ethical accountability takes time and effort to build, but the rewards of fostering the right culture in an organization are measurable. Fewer fraud incidents, for example, can be demonstrated by hard numbers. A strong code of conduct is a great start, but it’s critical to have a comprehensive ethics program that fosters accountability. Join Joseph Agins, CFE, CCEP, adjunct professor and fraud expert, as he outlines strategies organizations can use to ensure every employee from the C-Suite down has the tools they need to help them make ethical decisions and prevent fraud. The webinar will cover: The importance of tone from the top Identifying the pressures employees face and thus the ethics and fraud risks Understanding the resources employees have (or not) to report wrongdoing Whether the internal imagining of the culture matches the reality Developing tools and strategies for fostering ethics in the workplace Anti-fraud measures that should be incorporated into every ethics policy Encouraging ethics and accountability

7 Ways to Increase Ethical Accountability and Decrease Fraud Risk

Case IQ

Más de Case IQ (20)

How Best Practices in Triage Protocol Can Boost Compliance and Reduce Risk

How to Drive Efficiency and Reduce Risk with Investigative Case Management So...

Who's Lying? Using the Cognitive Interview to Assess Credibility in Workplace...

Protecting the Mental Wellbeing of Corporate Investigators

Meric Bloc_Webinar Nov22.pptx

5 Steps to Creating an Ethical Work Culture

How to Assess, Level Up, and Leverage Your Culture of Compliance

Everything You Need to Get E&C Investigations Right (According to the DOJ)

5 Ways to Build Employee Trust for Less Turnover and Fewer Incidents

Hybrid Workplace Harassment: Are You Protecting Your Company from Hidden Thre...

Finding Value Before a Crisis: How Workplace DEI Drives Revenue and Prevents ...

How Not to Get Called Out on TikTok: Improving Your Brand Through Employer/Em...

What is Psychological Safety in the Workplace?

Misconduct or Missed Conduct? Ensuring Consistent SAR Reporting of Internal M...

Building Effective Sexual Harassment Prevention Policies and Training

How to recognize and minimize unconscious bias in the workplace

Search Engine Skills for Workplace Investigators

Preventing Bullying and Harassment Through Diversity and Inclusion in the Wor...

Insider Threat: Cases and Controls to Prevent Internal Fraud and Prevention

7 Ways to Increase Ethical Accountability and Decrease Fraud Risk

Último

DBX First Quarter 2024 Investor Presentation

Dropbox

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

MINDCTI Revenue Release Quarter One 2024

MIND CTI

Architecting Cloud Native Applications

WSO2

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

MadyBayot

Accelerating FinTech Innovation: Unleashing API Economy and GenAI Vasa Krishnan, Chief Technology Officer - FinResults Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

apidays

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

Webinar Recording: https://www.panagenda.com/webinars/why-teams-call-analytics-is-critical-to-your-entire-business Nothing is as frustrating and noticeable as being in an important call and being unable to see or hear the other person. Not surprising then, that issues with Teams calls are among the most common problems users call their helpdesk for. Having in depth insight into everything relevant going on at the user’s device, local network, ISP and Microsoft itself during the call is crucial for good Microsoft Teams Call quality support. To ensure a quick and adequate solution and to ensure your users get the most out of their Microsoft 365. But did you know that ‘bad calls’ are also an excellent indicator of other problems arising? Precisely because it is so noticeable!? Like the canary in the mine, bad calls can be early indicators of problems. Problems that might otherwise not have been noticed for a while but can have a big impact on productivity and satisfaction. Join this session by Christoph Adler to learn how true Microsoft Teams call quality analytics helped other organizations troubleshoot bad calls and identify and fix problems that impacted Teams calls or the use of Microsoft365 in general. See what it can do to keep your users happy and productive! In this session we will cover - Why CQD data alone is not enough to troubleshoot call problems - The importance of attributing call problems to the right call participant - What call quality analytics can do to help you quickly find, fix-, and prevent problems - Why having retrospective detailed insights matters - Real life examples of how others have used Microsoft Teams call quality monitoring to problem shoot problems with their ISP, network, device health and more.

Why Teams call analytics are critical to your entire business

panagenda

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Drew Madelung

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Strategies for Landing an Oracle DBA Job as a Fresher

Remote DBA Services

AXA XL - Insurer Innovation Award Americas 2024

The Digital Insurer

Modernizing Securities Finance: The cloud-native prime brokerage platform transforming capital markets. Madhu Subbu, Managing Director, Head of Securities Finance Engineering Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu

apidays

This presentations targets students or working professionals. You may know Google for search, YouTube, Android, Chrome, and Gmail, but did you know Google has many developer tools, platforms & APIs? This comprehensive yet still high-level overview outlines the most impactful tools for where to run your code, store & analyze your data. It will also inspire you as to what's possible. This talk is 50 minutes in length.

Powerful Google developer tools for immediate impact! (2023-24 C)

wesley chun

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

debabhi2

How to Use Open Source Intelligence (OSINT) in Investigations

1. How to Use Open Source Intelligence in Investigations Sandra Stibbards, Camelot Investigations

2. Sandra Stibbards Sandra Stibbards, is the owner and President of Camelot Investigations, a licensed private investigation agency in California and Texas, since its inception in 1996. Ms. Stibbards is regarded as a leading online investigations expert whose clients include Fortune 500 companies and international corporations over five continents. She specializes in Financial Fraud Investigations, Internet Threat Investigations, Cybercrime, Competitive Intelligence, Counterintelligence, Vulnerability and Threat Assessments, International IP/Counterfeiting Investigations, and Pre-Investment & Due Diligence Investigations. Ms. Stibbards has been responsible for assisting her clients in locating millions of dollars worth of assets from financial fraud and international counterfeiting as well as identification of those utilizing the internet, websites and other means to remain anonymous for high profile scams and threats. She has become recognized for her presentations and trainings on Open Source Intelligence providing expanded insight into the methods of obtaining and locating information in public forums. These trainings are in demand by both the private and public sectors including financial institutions, aerospace industry, pharmaceutical industry, all levels of law enforcement, federal agencies, internal audit and regulators. Sandra Stibbards, Camelot Investigations © 2016

15. International People Searches 10/17/2016

19. International Public Records 10/17/2016

22. International Social Networks & Media 10/17/2016

34. Domains & Websites 10/17/2016

42. International Business Information 10/17/2016

46. Pay Databases 10/17/2016

49. Thank-you for participating If you have any questions, please feel free to email them to: Sandra Stibbards, Owner / President of Camelot Investigations sandra@camelotinvestigations.com Questions about i-Sight: info@i-sight.com 10/17/2016

How to Use Open Source Intelligence (OSINT) in Investigations

Recomendados

Recomendados

Más contenido relacionado

La actualidad más candente

La actualidad más candente (20)

Destacado

Destacado (20)

Similar a How to Use Open Source Intelligence (OSINT) in Investigations

Similar a How to Use Open Source Intelligence (OSINT) in Investigations (20)

Más de Case IQ

Más de Case IQ (20)

Último

Último (20)

How to Use Open Source Intelligence (OSINT) in Investigations