WEBVTT - This file was automatically generated by VIMEO 1 00:00:06.700 --> 00:00:09.700 Hi everyone, and welcome to the section number for called 2 00:00:09.700 --> 00:00:12.400 notes and password managers as the title 3 00:00:12.400 --> 00:00:15.200 suggests. Now, we will go through some of the tools that are 4 00:00:15.200 --> 00:00:18.900 probably best for the note, taking a password managing tasks 5 00:00:18.200 --> 00:00:21.200 in regard to euros investigations. 6 00:00:23.200 --> 00:00:26.300 First, we will talk about a very important topic of any osint 7 00:00:26.300 --> 00:00:30.000 investigation. And that is the note taking part. Actually. 8 00:00:29.200 --> 00:00:32.300 It is not all about writing. There are a lot of 9 00:00:32.300 --> 00:00:36.000 screenshot and bookmark. Taking involved notes 10 00:00:35.200 --> 00:00:38.200 are often a very tricky part or 11 00:00:38.200 --> 00:00:41.900 to better say a potential trap for all your owes investigations. 12 00:00:41.300 --> 00:00:44.500 I have a question for you. Now. Did 13 00:00:44.500 --> 00:00:47.000 this ever happened to you? You are watching a 14 00:00:47.500 --> 00:00:50.200 video on YouTube and an hour later you ended up 15 00:00:50.200 --> 00:00:52.800 on a completely different topic, and you can't even 16 00:00:53.500 --> 00:00:56.400 Remember how you got there? That is? The note-taking rabbit 17 00:00:56.400 --> 00:00:59.900 hole of osint about which I'm talking about. Everything 18 00:00:59.900 --> 00:01:02.100 looks great when you start, but only after a 19 00:01:02.100 --> 00:01:05.500 few sources which could all look similar, you 20 00:01:05.500 --> 00:01:08.700 could get lost and unable to trace your steps. 21 00:01:08.800 --> 00:01:11.200 Personally. I like 22 00:01:11.200 --> 00:01:14.200 using paper and pencil, but to be honest, that 23 00:01:14.200 --> 00:01:17.600 is not efficient or optimal. When I do my research on 24 00:01:17.600 --> 00:01:18.300 the internet. 25 00:01:20.200 --> 00:01:23.500 Now, I would like to list and now 26 00:01:23.500 --> 00:01:26.700 I would like to show you a few of the note taking programs. 27 00:01:29.200 --> 00:01:31.200 When we get to the note taking software. 28 00:01:32.400 --> 00:01:36.300 First, you have a simple plain text editor, like 29 00:01:36.300 --> 00:01:39.600 notepad on Microsoft or textedit on a Mac OS. 30 00:01:39.800 --> 00:01:42.500 Actually, I would not recommend. I'm using them as a main 31 00:01:42.500 --> 00:01:45.100 note-taking piece of software, rather has an 32 00:01:45.100 --> 00:01:48.600 additional one because they do not have any real Advanced 33 00:01:48.600 --> 00:01:51.200 features in themselves. They're designed to 34 00:01:51.200 --> 00:01:55.100 be just that, plain text editors without formatting. I 35 00:01:54.100 --> 00:01:57.400 always use them as a buffer note space to 36 00:01:57.400 --> 00:02:01.300 do copy paste activities with the purpose to 37 00:02:01.300 --> 00:02:02.100 strip down. 38 00:02:02.300 --> 00:02:03.700 Formatting from the text. 39 00:02:05.100 --> 00:02:08.400 After that is a real digital note-taking tool 40 00:02:08.400 --> 00:02:12.300 from Microsoft. It is called one note. I 41 00:02:12.300 --> 00:02:15.800 have used one note for many years because it has 42 00:02:15.800 --> 00:02:18.400 almost everything you will need to write, copy 43 00:02:18.400 --> 00:02:21.600 paste, the screenshot make process artwork and 44 00:02:21.600 --> 00:02:24.200 so forth. For Euro Cent investigations. I 45 00:02:24.200 --> 00:02:27.700 stopped using it just because of the privacy issues 46 00:02:27.700 --> 00:02:31.600 and because it was forcing me to use the whole Microsoft 47 00:02:30.600 --> 00:02:33.500 online ecosystem, when 48 00:02:33.500 --> 00:02:34.700 you gets to note, taking 49 00:02:34.900 --> 00:02:37.800 Password, storing by using password managers. 50 00:02:37.200 --> 00:02:40.300 I like them offline without any 51 00:02:40.300 --> 00:02:43.700 sinking to the cloud, but it is definitely worth mentioning 52 00:02:43.700 --> 00:02:47.400 because many people work in companies, where Microsoft's products 53 00:02:46.600 --> 00:02:49.300 are a must use or 54 00:02:49.300 --> 00:02:52.300 a must have. Just, additionally, OneNote is 55 00:02:52.300 --> 00:02:55.200 also cross-platform product so you can use it 56 00:02:55.200 --> 00:02:58.300 on a Mac OS IOS and Android. 57 00:02:59.100 --> 00:03:02.200 Please allow me now to show you how it looks like. 58 00:03:03.300 --> 00:03:06.800 Here we are in my OneNote. So 59 00:03:06.200 --> 00:03:09.400 I won't go talking about licenses and Office 60 00:03:09.400 --> 00:03:12.000 365 and all that because there is 61 00:03:12.100 --> 00:03:15.600 a possibility that what I am telling you now won't be relevant when 62 00:03:15.600 --> 00:03:18.500 you wash this course because licensing models 63 00:03:18.500 --> 00:03:21.300 tend to change often. So here 64 00:03:21.300 --> 00:03:24.600 is my OneNote app. I have already created 65 00:03:24.600 --> 00:03:27.200 a new notebook and I 66 00:03:27.200 --> 00:03:30.300 have put the name osint 2020. 67 00:03:31.500 --> 00:03:35.000 And now, as you can see, since it has a subtree design, 68 00:03:34.100 --> 00:03:36.700 you have sections. 69 00:03:37.800 --> 00:03:39.300 Let's call this section. 70 00:03:41.000 --> 00:03:41.800 Case. 71 00:03:43.000 --> 00:03:43.900 01. 72 00:03:45.200 --> 00:03:46.200 With pages. 73 00:03:47.400 --> 00:03:50.600 Here is the page, I can call it. Let's say, 74 00:03:50.100 --> 00:03:54.300 I will call it just profile. So 75 00:03:53.700 --> 00:03:56.500 a great feature which I love and 76 00:03:56.500 --> 00:03:59.500 it's very beneficial for data. Collection is the ability to 77 00:03:59.500 --> 00:04:02.600 accept that. One note accepts just about 78 00:04:02.600 --> 00:04:05.300 any file type as paste and 79 00:04:05.300 --> 00:04:08.200 insertions into a page. Allow me 80 00:04:08.200 --> 00:04:11.300 to show you. So if I take a PDF, which 81 00:04:11.300 --> 00:04:14.100 I downloaded on from the internet, I 82 00:04:14.100 --> 00:04:16.000 just drag and drop it here. 83 00:04:17.500 --> 00:04:20.300 And I will be asked, should I insert it 84 00:04:20.300 --> 00:04:23.200 as a file? Or as a printout? I will insert it as 85 00:04:23.200 --> 00:04:23.700 a file. 86 00:04:26.700 --> 00:04:29.400 Okay, this is a PDF sample, which 87 00:04:29.400 --> 00:04:30.000 you can. 88 00:04:34.000 --> 00:04:34.700 Preview. 89 00:04:36.100 --> 00:04:39.900 And here you can add text almost anywhere. As 90 00:04:39.900 --> 00:04:40.500 you can see. 91 00:04:48.900 --> 00:04:51.500 Also, if you found something on the Internet a 92 00:04:51.500 --> 00:04:54.400 link probably you can make a 93 00:04:54.400 --> 00:04:55.500 simple paste. 94 00:04:58.300 --> 00:05:01.800 then use some insert 95 00:05:01.800 --> 00:05:03.000 tools, like 96 00:05:04.300 --> 00:05:05.000 arrows. 97 00:05:10.100 --> 00:05:12.200 To make Rafa kle correlation. 98 00:05:14.700 --> 00:05:17.300 You can also insert pictures. 99 00:05:33.300 --> 00:05:36.100 Okay, this is just simple note-taking, but 100 00:05:36.100 --> 00:05:39.600 they're just wanted to show you the general idea of 101 00:05:39.600 --> 00:05:40.300 OneNote. 102 00:05:41.600 --> 00:05:44.400 Back to our note-taking software next. 103 00:05:44.400 --> 00:05:47.400 I have to mention standard notes for you to check out. 104 00:05:47.400 --> 00:05:50.300 This is probably the best. Privacy focused, note 105 00:05:50.300 --> 00:05:53.300 taking application out there. You can download it 106 00:05:53.300 --> 00:05:57.000 and try it for yourself on the site. Standard 107 00:05:56.400 --> 00:05:59.800 notes that Org. The application itself 108 00:05:59.800 --> 00:06:02.800 is open source with versions for Mac OS 109 00:06:02.800 --> 00:06:05.800 iOS Windows Android and Linux a 110 00:06:05.800 --> 00:06:08.700 great thing about standard notes, besides. It's 111 00:06:08.800 --> 00:06:09.800 aes-256. 112 00:06:10.700 --> 00:06:13.700 Six encryption is that you can both use it completely 113 00:06:13.700 --> 00:06:16.800 offline or if you wish to make an account. 114 00:06:16.800 --> 00:06:20.000 You can use its Sync features. Of 115 00:06:19.300 --> 00:06:22.600 course, there is a premium version that adds Advanced 116 00:06:22.600 --> 00:06:25.700 features like multi-factor authentication and 117 00:06:25.700 --> 00:06:28.200 automated backups to you to your own 118 00:06:28.200 --> 00:06:31.500 cloud service of choice, but the standard one also 119 00:06:31.500 --> 00:06:34.200 covers a lot of your needed features. 120 00:06:35.100 --> 00:06:39.100 Next on the list is a cool named app. That 121 00:06:38.100 --> 00:06:41.900 is a hunch Li H UNC. 122 00:06:41.900 --> 00:06:44.600 Hly the website. Where 123 00:06:44.600 --> 00:06:48.500 is it? Located is hunch that Lee hu 124 00:06:47.500 --> 00:06:50.900 NC h. .L y. 125 00:06:50.300 --> 00:06:53.300 This tool is not free, but the rabbit hole 126 00:06:53.300 --> 00:06:56.400 in which you could possibly go down will be that deep if 127 00:06:56.400 --> 00:06:59.400 you use it, and I would like to show you a quick overview of 128 00:06:59.400 --> 00:07:00.100 this tool. 129 00:07:01.700 --> 00:07:04.600 Here, we are back on our Ubuntu, Olson virtual machine. 130 00:07:04.300 --> 00:07:07.200 So to get Huntley, the first thing 131 00:07:07.200 --> 00:07:10.400 you need to do is go to the site hunch that 132 00:07:10.400 --> 00:07:13.500 Lee and register for a free trial and 133 00:07:13.500 --> 00:07:16.600 you will get a license file that will be needed to upload to 134 00:07:16.600 --> 00:07:19.300 the hunch Lee app. At the present moment. 135 00:07:19.300 --> 00:07:22.200 The trial is 30 days, download and 136 00:07:22.200 --> 00:07:25.500 install. The country software also installed the extension on 137 00:07:25.500 --> 00:07:28.600 your browser. And since Chrome is 138 00:07:28.600 --> 00:07:31.300 mandatory to use with Huntley, we 139 00:07:31.500 --> 00:07:34.600 Had to install Google Chrome and 140 00:07:34.600 --> 00:07:37.300 then get the extension to integrate Chrome with 141 00:07:37.300 --> 00:07:38.800 the Huntley software. 142 00:07:40.300 --> 00:07:43.300 So, don't forget to go to the Google's official web 143 00:07:43.300 --> 00:07:47.900 store for the extension. So there is no funny business. Actually, 144 00:07:47.900 --> 00:07:50.700 you, you will see a great instructional video, 145 00:07:50.700 --> 00:07:54.100 how to install hunch lie on your operating system. The 146 00:07:53.100 --> 00:07:56.700 link will be available. The moment you register for 147 00:07:56.700 --> 00:07:59.100 the trial. We did all 148 00:07:59.100 --> 00:08:03.100 that and now we are going straight to the recording part 149 00:08:02.100 --> 00:08:04.600 of our web activity. 150 00:08:06.100 --> 00:08:09.000 As you can see, I already put a 151 00:08:09.400 --> 00:08:12.700 hunch Lee and Google Chrome on my dock to 152 00:08:12.700 --> 00:08:13.600 the favorite. 153 00:08:17.200 --> 00:08:19.000 We will fire up Google Chrome. 154 00:08:21.500 --> 00:08:24.400 And as you can see on the browser in the upper 155 00:08:24.400 --> 00:08:27.300 right corner, there's a little icon where you 156 00:08:27.300 --> 00:08:31.100 can start to record your activity. We 157 00:08:31.100 --> 00:08:32.300 will enable Huntley. 158 00:08:35.900 --> 00:08:38.400 Select dashboard to open the 159 00:08:38.400 --> 00:08:40.200 Huntley program. 160 00:08:44.200 --> 00:08:47.300 Okay, here's Huntley here. We you 161 00:08:47.300 --> 00:08:50.600 can add, there are a lot of options but 162 00:08:50.900 --> 00:08:53.100 as the first step great a 163 00:08:53.100 --> 00:08:57.100 case in which the web activity will be recorded. So 164 00:08:56.100 --> 00:08:59.800 we're going to add a case new case 165 00:08:59.800 --> 00:09:02.100 and give it 166 00:09:02.100 --> 00:09:04.300 a name first case. 167 00:09:05.500 --> 00:09:09.000 And save. Okay. 168 00:09:08.700 --> 00:09:11.800 Now get back to 169 00:09:11.800 --> 00:09:12.900 the Chrome browser. 170 00:09:15.700 --> 00:09:17.900 now, in the Huntsville extension, 171 00:09:19.800 --> 00:09:22.700 I will choose the case as 172 00:09:22.700 --> 00:09:26.400 you can see, first case, we that we previously created 173 00:09:25.700 --> 00:09:27.700 in the Huntley app. 174 00:09:29.500 --> 00:09:32.500 So that will be the target where the web quatre 175 00:09:32.500 --> 00:09:36.000 capture will be uploaded and enable 176 00:09:35.100 --> 00:09:38.900 the capture that 177 00:09:38.900 --> 00:09:39.800 is on now. 178 00:09:43.200 --> 00:09:44.100 As a first stop. 179 00:09:48.300 --> 00:09:51.500 I'll go to Code. Red Dot. 180 00:09:51.500 --> 00:09:53.600 Ec-council dot-org. 181 00:09:59.900 --> 00:10:02.500 Look around a little bit, scroll. 182 00:10:05.500 --> 00:10:06.900 Click something. 183 00:10:08.600 --> 00:10:10.200 You a couple of things. 184 00:10:16.900 --> 00:10:19.600 Just to be sure when you start browsing 185 00:10:19.600 --> 00:10:22.200 that the connection to the country app 186 00:10:22.200 --> 00:10:25.600 is working can check the country app. And 187 00:10:25.600 --> 00:10:28.600 here, as you can see. I already have two 188 00:10:28.600 --> 00:10:29.800 pages viewed. 189 00:10:30.900 --> 00:10:33.500 I will get back to the browser, then. 190 00:10:33.500 --> 00:10:36.600 I'll, maybe I'll go and search for something to 191 00:10:36.600 --> 00:10:39.300 see how that looks. How would that look 192 00:10:39.300 --> 00:10:40.300 in the report? 193 00:10:43.200 --> 00:10:44.200 I'll type in. 194 00:10:45.900 --> 00:10:47.800 Black hat. 195 00:10:54.900 --> 00:10:57.300 And here I will make a note with 196 00:10:57.300 --> 00:10:58.200 the right click. 197 00:11:05.600 --> 00:11:08.400 Something dressed. 198 00:11:11.200 --> 00:11:11.800 Safe. 199 00:11:14.800 --> 00:11:17.600 Okay, I think we have done our research. 200 00:11:17.600 --> 00:11:21.400 It's not a big one. But just to show you go 201 00:11:21.400 --> 00:11:24.300 to the Huntley extension again in the browser. 202 00:11:25.700 --> 00:11:27.700 And turn the capture off. 203 00:11:29.100 --> 00:11:29.900 We're done with it. 204 00:11:31.500 --> 00:11:34.900 And now go back into Huntley app to 205 00:11:34.900 --> 00:11:37.400 see what have we captured. As 206 00:11:37.400 --> 00:11:39.300 you can see, we have the time. 207 00:11:41.100 --> 00:11:42.300 For easier. 208 00:11:44.700 --> 00:11:45.200 Follow. 209 00:11:48.700 --> 00:11:49.400 Notes. 210 00:11:51.200 --> 00:11:52.200 Which I did OneNote. 211 00:11:59.100 --> 00:12:02.400 Actually in here in history, when I look at the page that I 212 00:12:02.500 --> 00:12:06.200 previewed, as you 213 00:12:06.200 --> 00:12:08.500 can see, I have the whole page here. 214 00:12:10.700 --> 00:12:12.200 I can even see the source. 215 00:12:13.300 --> 00:12:14.600 Code that is available. 216 00:12:41.900 --> 00:12:44.600 Okay. This was just a basic overview 217 00:12:44.600 --> 00:12:47.400 of this tool. And as you can see, the 218 00:12:47.400 --> 00:12:50.700 tool has a lot of options and you 219 00:12:50.700 --> 00:12:53.600 can structure your captures your 220 00:12:53.600 --> 00:12:56.100 findings very well here. 221 00:12:58.200 --> 00:13:02.000 So, remember by using this tool, you will never ever 222 00:13:01.300 --> 00:13:04.700 have to remember, to take a screenshot gonna 223 00:13:04.700 --> 00:13:07.500 cut and paste a URL or 224 00:13:07.500 --> 00:13:10.400 save documents while you do your investigations with the browser. 225 00:13:13.900 --> 00:13:16.200 And lastly are really useful tool that 226 00:13:16.200 --> 00:13:19.700 allows you to inspect any website in an offline 227 00:13:19.700 --> 00:13:22.200 manner after you download it. The tool 228 00:13:22.200 --> 00:13:25.400 is called HT track. Now, we'll get back 229 00:13:25.400 --> 00:13:28.200 to our Ubuntu to get through the basic usage of 230 00:13:28.200 --> 00:13:28.700 the tool. 231 00:13:32.300 --> 00:13:35.500 Here we are on our virtual machine again to 232 00:13:35.500 --> 00:13:38.100 install age. T track simply go to 233 00:13:38.100 --> 00:13:38.900 the terminal. 234 00:13:46.500 --> 00:13:49.800 And type sudo apt. 235 00:13:49.900 --> 00:13:53.700 Install HD track 236 00:13:53.200 --> 00:13:54.900 enter. 237 00:13:57.800 --> 00:14:00.200 Typing, your sudo password. 238 00:14:06.800 --> 00:14:08.400 Yes, for confirmation. 239 00:14:15.100 --> 00:14:16.400 Wait, a few moments. 240 00:14:33.300 --> 00:14:36.400 Okay, now that it is installed. Let's try 241 00:14:36.400 --> 00:14:39.800 it out. We will also use the terminal for 242 00:14:39.800 --> 00:14:42.400 this but before that we 243 00:14:42.400 --> 00:14:45.300 have to go to the web 244 00:14:45.300 --> 00:14:48.600 browser to see our web page of that interests 245 00:14:48.600 --> 00:14:52.000 us that we will download, copy down, copy 246 00:14:51.500 --> 00:14:53.500 for offline. Use. 247 00:14:57.100 --> 00:14:58.700 I will use my, my blog. 248 00:15:00.100 --> 00:15:01.200 I Tina dotnet. 249 00:15:14.800 --> 00:15:17.800 Just for you to see how the website looks 250 00:15:17.800 --> 00:15:20.200 like, okay? 251 00:15:23.100 --> 00:15:24.200 We can go back. 252 00:15:28.900 --> 00:15:31.100 Clear our screen a little bit. 253 00:15:34.200 --> 00:15:37.700 so, the command to copy the website 254 00:15:37.700 --> 00:15:38.000 is 255 00:15:41.100 --> 00:15:44.200 Space. And then the target web 256 00:15:44.200 --> 00:15:48.000 page link. Mine will be www. It 257 00:15:47.200 --> 00:15:50.300 no dot net and 258 00:15:50.300 --> 00:15:51.000 press enter. 259 00:15:54.600 --> 00:15:56.100 This could take a while. 260 00:16:06.800 --> 00:16:08.800 I would love to interrupt the process. 261 00:16:10.200 --> 00:16:13.300 So we can see what has HD track downloaded. 262 00:16:19.500 --> 00:16:22.400 Okay, again, 263 00:16:22.400 --> 00:16:23.800 we're going to clear the screen. 264 00:16:25.400 --> 00:16:25.800 so, 265 00:16:35.100 --> 00:16:37.800 The downloaded website will be in the home directory. 266 00:16:43.600 --> 00:16:46.300 Here it is. And you can see it's 267 00:16:46.300 --> 00:16:50.700 a folder named www.by Tino 268 00:16:50.700 --> 00:16:51.500 dotnet. 269 00:16:53.800 --> 00:16:57.000 And to check it out with Firefox. 270 00:16:58.600 --> 00:17:02.000 Type. Firefox, www.by Tino, 271 00:17:01.700 --> 00:17:03.500 dotnet and press enter. 272 00:17:09.400 --> 00:17:13.500 Now you can now see the folder folder structure. 273 00:17:19.800 --> 00:17:22.900 The folder that interests us a sample page. 274 00:17:25.300 --> 00:17:26.200 And index.html. 275 00:17:29.200 --> 00:17:32.700 it may be recall from before this is 276 00:17:32.800 --> 00:17:35.300 almost, actually, this is the 277 00:17:35.300 --> 00:17:37.600 full web page that we 278 00:17:39.200 --> 00:17:41.000 Previously, watched online. 279 00:17:46.100 --> 00:17:49.200 I want me to make an announcement of the next video. So we 280 00:17:49.200 --> 00:17:53.200 went over the note, taking part of the house and with a few demonstrations 281 00:17:52.200 --> 00:17:55.600 of the tools. And in the next video, 282 00:17:55.600 --> 00:17:58.600 we will go through the password managers, actually 283 00:17:58.600 --> 00:18:01.100 only one, but I will tell you all about it in the 284 00:18:01.100 --> 00:18:02.800 next video. See you there.