The Puzzle Palace Model in OSINT Analytic Mindset
6SANS OSINT Summit 2023
The Puzzle Palace Model in OSINT Analytic Mindset: Navigating the Unknown with Critical Thinking and Creativity
Speaker: Patrick Rus
In this presentation, we will delve into the complexities surrounding the investigation of a network of companies that provide internet services to criminal networks. Some of these companies operate in offshore jurisdictions where public business registers are not readily accessible, and their owners employ effective OPSEC measures to conceal their identities.
By adopting the Puzzle Palace Model within the OSINT Analytic Mindset, investigators can overcome these challenges and establish factual evidence by identifying and cross-verifying clues relating to interconnected businesses engaged in transactions with the targeted companies. Additionally, we will explore the significance of Cyber-HUMINT in acquiring further information about these entities and solidifying the evidence linking individuals to the implicated companies.
The Puzzle Palace Model entails breaking down the investigation into manageable components, akin to individual pieces of a puzzle. Each piece represents a specific data point, such as a company name, location, or known associate. Scrutinizing each piece meticulously, investigators can identify patterns or connections that exist among them. As more pieces are assembled, a comprehensive understanding of the investigation gradually takes shape.
Overall, the objective of this presentation is to offer valuable insights and practical tips to OSINT investigators seeking to uncover networks of offshore companies and their associated principals, particularly in circumstances where public information is limited or inaccessible.
View upcoming Summits: http://www.sans.org/u/DuS