Lessons Learned from Ten Years of OSINT Automation
27When you discover the vastness of OSINT it's typical to want to build some automation to speed up collection and correlation, giving you more time to focus on what human brains are good for: analysis. But often that tooling can take on a life of its own, requiring maintenance, updates as data sources emerge and disappear, work-arounds for data quality issues, handling false positives, and the list goes on.
Now in its 10th year, automating OSINT has been SpiderFoot's mission from day one as a free, open source tool used by tens of thousands of people. In this talk, we'll walk through many of the lessons learned over the years so that you can overcome them in your OSINT automation adventures.
While this is a more technical talk, it should also be useful to less technical audiences who may wish to understand limitations of automation, manual work-arounds needed in some cases and generally why the human element will always be an essential part of working with OSINT.
About the Speaker
Steve Micallef has been working in InfoSec for over 20 years across multiple industries. Through much of this time he has developed SpiderFoot as an open source OSINT automation tool.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE
#OSINTSummit #OSINT