1 00:00:00,530 --> 00:00:04,070 Let's start learning social media intelligence. 2 00:00:05,510 --> 00:00:12,170 People post all kinds of information on their social media profiles, and this information could be 3 00:00:12,170 --> 00:00:19,370 utilized by Osint investigators, hackers or journalists to find either more information about a person 4 00:00:19,370 --> 00:00:20,420 or a company. 5 00:00:20,840 --> 00:00:28,280 So I would like to start this lecture by showing you how you can gather information from Facebook profiles. 6 00:00:28,280 --> 00:00:35,690 Because Facebook has almost 3 billion active users and almost everyone has a Facebook account. 7 00:00:36,080 --> 00:00:43,580 The reason why I like Facebook to gather information is because Facebook has a huge user base, and 8 00:00:43,580 --> 00:00:49,640 you can see the person's profile information, for example, their education, work, other social media 9 00:00:49,640 --> 00:00:54,770 profiles, etc. you can also see someone's relationships and connections. 10 00:00:54,770 --> 00:01:02,030 Of course, if they were not set to be private and people can't post diverse content on Facebook, for 11 00:01:02,030 --> 00:01:10,730 example, they can post, they can upload images, videos, etc. and sometimes some content will be 12 00:01:10,730 --> 00:01:11,690 geotagged. 13 00:01:11,720 --> 00:01:17,570 For example, you might see that they have posted from a certain restaurant at a certain time. 14 00:01:17,600 --> 00:01:24,920 And lastly, if the person profile was public, then you can read all of their posts and see their friends 15 00:01:24,920 --> 00:01:28,550 and see what they like and what they dislike, etc.. 16 00:01:28,580 --> 00:01:35,630 The problem with Facebook is that Facebook continuously patches Osint methods that are used to gather 17 00:01:35,630 --> 00:01:38,750 information about Facebook profiles. 18 00:01:39,590 --> 00:01:45,920 So the methods that I'm going to teach you in this section might change in the future, and I will try 19 00:01:45,950 --> 00:01:50,540 my best to keep this section and all other sections up to date. 20 00:01:51,320 --> 00:01:57,080 And I don't think that this is a problem at all, because whenever Facebook patch a certain method, 21 00:01:57,080 --> 00:02:04,190 the Osint community will always try to find an alternative method to achieve the same result. 22 00:02:04,460 --> 00:02:09,060 Let's continue our Osint Investigation with Rishi Khabra. 23 00:02:09,090 --> 00:02:14,040 We have already got his Facebook profile and it's in our notes. 24 00:02:14,040 --> 00:02:21,750 We have the URL and we can visit the URL immediately and start reading what he's posting, what information 25 00:02:21,750 --> 00:02:28,950 he has on his profile, etc. but before we do this, I would like to show you the filter feature by 26 00:02:28,950 --> 00:02:34,290 Facebook because I think it's very important when it comes to searching for people. 27 00:02:35,550 --> 00:02:40,620 So after you create your Sockpuppet account and you log in to Facebook, you want to go to the search 28 00:02:40,620 --> 00:02:43,590 bar and then search for the name of the person that you are looking for. 29 00:02:43,620 --> 00:02:50,580 In my case, I'm looking for Rishi Kabra and what I'm going to focus on today is this filter option. 30 00:02:50,580 --> 00:02:57,120 So if I clicked on people, this will only show me people with the name Rishi Kabra and I can scroll 31 00:02:57,120 --> 00:03:02,490 down and see that there are many people with this name and similar names. 32 00:03:03,930 --> 00:03:09,150 What I can do to filter the search results out is to specify the city. 33 00:03:09,180 --> 00:03:14,520 We already know that he is from Kolkata because we saw this on his LinkedIn profile. 34 00:03:15,240 --> 00:03:20,550 So I'm going to say Kolkata and then select the city. 35 00:03:20,550 --> 00:03:24,030 And now we have less search results. 36 00:03:24,390 --> 00:03:31,350 And since we already know that he is from the SRM University, we can see that this is his profile and 37 00:03:31,350 --> 00:03:34,650 this is the profile picture that we saw previously. 38 00:03:34,710 --> 00:03:41,160 We can also see that he is a product manager at glint, which is what we also saw on his LinkedIn account. 39 00:03:41,220 --> 00:03:46,860 So if we scroll down, we can see that he was a product manager at Clinty. 40 00:03:47,850 --> 00:03:55,350 So we can always specify the city education, work or maybe friend to narrow down our search. 41 00:03:55,830 --> 00:04:01,590 Because if you are looking for someone called John Smith, then it's almost impossible to find this 42 00:04:01,590 --> 00:04:04,500 person because there are many people with this name. 43 00:04:04,500 --> 00:04:10,530 And that's why it's very important to gather initial information about the person, and then use this 44 00:04:10,560 --> 00:04:15,520 information to narrow down your search and find their profiles. 45 00:04:15,820 --> 00:04:18,160 So let's view the profile. 46 00:04:18,850 --> 00:04:23,320 And the first thing that I always look for is the URL. 47 00:04:23,890 --> 00:04:26,740 And we can see that the URL is facebook.com. 48 00:04:26,740 --> 00:04:30,220 And then slash and then Rishi Raj Kabra. 49 00:04:30,220 --> 00:04:33,340 And it's not Rishi Kabra as we see here. 50 00:04:34,270 --> 00:04:41,440 This is very important to know because when you create your Facebook account for the first time and 51 00:04:41,440 --> 00:04:46,480 set a display name, this display name will be used to generate his username. 52 00:04:47,080 --> 00:04:55,810 And I believe that his initial or first username or display name that he used is Rishiraj Kabra and 53 00:04:55,810 --> 00:05:02,050 not Rishi Kabra, and then he later changed his display name to Rishi Kabra. 54 00:05:02,500 --> 00:05:05,260 So we can scroll down to find more information. 55 00:05:05,260 --> 00:05:12,490 We can see that his product manager at Clint and a formal full stack developer, which is similar to 56 00:05:12,520 --> 00:05:17,830 what we have seen here on his LinkedIn profile And he was a system engineer. 57 00:05:17,830 --> 00:05:20,350 So you can see this as well. 58 00:05:20,800 --> 00:05:23,170 We can also see where he studied. 59 00:05:23,680 --> 00:05:30,250 You can see that he studied at SRM University in Ramapuram, I believe. 60 00:05:30,280 --> 00:05:33,370 And this university was also in Chennai. 61 00:05:33,400 --> 00:05:41,710 So if we search for this university in Google Maps, we can see that this is the university and it is 62 00:05:41,710 --> 00:05:43,420 in the city of Chennai. 63 00:05:46,510 --> 00:05:53,050 We can also see that he is from Kolkata and we can see his Instagram account and LinkedIn account. 64 00:05:53,080 --> 00:05:57,400 Snapchat account, SoundCloud, GitHub, Twitch and Twitter. 65 00:05:57,730 --> 00:06:00,400 So let me get the missing information. 66 00:06:00,400 --> 00:06:07,120 I think we already have his Instagram account and we don't have his Snapchat, so I'm going to add it 67 00:06:07,120 --> 00:06:07,870 in here. 68 00:06:10,390 --> 00:06:19,090 This is his Snapchat username and we already have his SoundCloud account and GitHub account and I think 69 00:06:19,100 --> 00:06:20,480 Twitter account as well. 70 00:06:20,480 --> 00:06:23,960 No, we do not have it or we do actually have it. 71 00:06:23,990 --> 00:06:25,340 We have this account. 72 00:06:25,880 --> 00:06:28,730 But here we can see that we have a different username. 73 00:06:28,730 --> 00:06:36,500 So he has two Twitter accounts, one with Rishi Kapoor 132 and one with RK 132. 74 00:06:37,550 --> 00:06:39,920 We can also see that we have a Twitch account. 75 00:06:39,920 --> 00:06:46,700 So I'm going to copy it and paste it, and you can see the number of accounts that we found so far. 76 00:06:46,700 --> 00:06:53,630 And in a future lecture you will see how you can utilize these usernames to find other accounts. 77 00:06:54,020 --> 00:06:57,020 You also want to go to all of these links. 78 00:06:57,020 --> 00:07:02,510 So you want to go to about and maybe find certain information that you didn't find before. 79 00:07:02,510 --> 00:07:07,520 So here we can see one of his family members, which is his mom. 80 00:07:08,060 --> 00:07:09,950 We can see the live events. 81 00:07:10,820 --> 00:07:14,030 We can go to friends or photos. 82 00:07:14,270 --> 00:07:20,150 Now when you visit someone's profile, it's very important to look at all the posts and pictures that 83 00:07:20,150 --> 00:07:24,230 they posted because these are very valuable information. 84 00:07:24,620 --> 00:07:30,740 Now, I have seen all of these pictures and there are two pictures that I would like to show you that 85 00:07:30,740 --> 00:07:32,150 captured my attention. 86 00:07:32,990 --> 00:07:40,670 The first picture is him with his family with a description, birthday dinner with family and we can 87 00:07:40,670 --> 00:07:43,220 see that it was on 1st of December. 88 00:07:43,280 --> 00:07:49,250 So we know that this is his family and this was a birthday dinner. 89 00:07:49,640 --> 00:07:51,980 And this is what we saw on his LinkedIn account. 90 00:07:51,980 --> 00:07:59,270 When we click on contact info, we can see that his birthday is on 1st of December, but we do not know 91 00:07:59,270 --> 00:08:00,290 in which year. 92 00:08:00,350 --> 00:08:04,490 So the second picture that I would like to show you is this one. 93 00:08:04,490 --> 00:08:13,070 And he is saying that he is his 2020 birthday and it was posted on 2nd of December 2017. 94 00:08:13,460 --> 00:08:18,680 So we can open the calculator and say 2017 -2020. 95 00:08:18,680 --> 00:08:25,250 And now that we know that his date of birth is 1st of December 1995. 96 00:08:25,250 --> 00:08:27,520 So I'm going to add this in my notes. 97 00:08:27,730 --> 00:08:33,880 After you look at all the pictures and post that he made, you can go to videos and watch if there's 98 00:08:33,910 --> 00:08:35,380 a certain video. 99 00:08:36,070 --> 00:08:42,400 And you can also see the places that he visited, and you can see that there are many. 100 00:08:44,890 --> 00:08:49,720 And we can see the music, movies, TV shows and his likes. 101 00:08:50,200 --> 00:08:55,120 And this is why I like Facebook, because we can see all types of information. 102 00:08:55,810 --> 00:09:01,870 So in this lecture you have learned how you can search for someone on Facebook and use the filters to 103 00:09:01,900 --> 00:09:04,900 narrow down your search and find your target. 104 00:09:04,900 --> 00:09:11,140 After you find your target, you want to check the URL and see if the name in the URL matches the display 105 00:09:11,170 --> 00:09:15,820 name, and then you can read other information posted on the person's profile. 106 00:09:15,820 --> 00:09:22,150 For example, any post, videos or pictures because these will all tell us a lot of information. 107 00:09:22,150 --> 00:09:28,690 And don't forget to check the friends and the about section, because these are also very important.