OSINT. (1).

OSINT
Shortcomings of SIEM - CORRECT ANSWER--doesnt consider OSINT
-expensive to manage
-can be sabotaged
-hard to tune
-siloed information

OSINT definitions - CORRECT ANSWER-intelligence found from publicly available
sources

Why OSINT? - CORRECT ANSWER--tons of it
-whats happening in real world
-

Separation of OSINT- - CORRECT ANSWER-Traditional: facebook, twitter, pastebin,
news sources, shodan


Hacker community: forums, IRC channels, carding shops, DarkNet Marketplace

OSINT can show - CORRECT ANSWER-1) what breaches occurred
2) who is talking about you and how
3) what devices are exposed
4)what tools are being used

OSINT Challenges - CORRECT ANSWER-1) everyone has access which devalues
it
2) Hard to tell which sources to use
3) hard to collect

what to know about your organization - CORRECT ANSWER-1) what assets do you
want to protect?
2)what threats affect you?
3) who do you want to protect yourself from?

Tradional data sources - CORRECT ANSWER-facebook
twitter
pastebin
shodan
news agencys

Shodan search - CORRECT ANSWER-open devices on internet of things
Title