Corporate OSINT for Social Engineering. Lekati, C. May, 2022. ![Corporate OSINT for Social Engineering [link]](https://bibbase.org/img/filetypes/link.svg "link")
Paper abstract bibtex If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct open-source intelligence on the organization and its people. Your task will be to find vulnerabilities or high-risk information that is likely to be exploited by attackers in a social engineering attack. Such information would include: identifying specific technologies, key people, and their relationships with internal or external partners (typically used in spear-phishing attacks), the internal organizational culture and hierarchy, company events, and more. Your client organization will need to know which of the publicly available information pose a risk that needs to be removed or managed. Below is a list of resources and research ideas that can be used in the OSINT phase of social engineering engagements, vulnerability assessments, or other projects. Corporate OSINT for social engineering attacks usually revolves around three main subjects: employee information or vulnerabilities (for specific persons, teams, or a broader spectrum of employees), corporate information, and the physical perimeter. The two latter tend to overlap in some instances. This blog will focus on conducting corporate research for social engineering attack simulations or vulnerability assessments.
@misc{lekati_corporate_2022,
title = {Corporate {OSINT} for {Social} {Engineering}},
copyright = {CC-BY-SA/4.0},
url = {https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/},
abstract = {If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct open-source intelligence on the organization and its people. Your task will be to find vulnerabilities or high-risk information that is likely to be exploited by attackers in a social engineering attack. Such information would include: identifying specific technologies, key people, and their relationships with internal or external partners (typically used in spear-phishing attacks), the internal organizational culture and hierarchy, company events, and more. Your client organization will need to know which of the publicly available information pose a risk that needs to be removed or managed.
Below is a list of resources and research ideas that can be used in the OSINT phase of social engineering engagements, vulnerability assessments, or other projects. Corporate OSINT for social engineering attacks usually revolves around three main subjects: employee information or vulnerabilities (for specific persons, teams, or a broader spectrum of employees), corporate information, and the physical perimeter. The two latter tend to overlap in some instances. This blog will focus on conducting corporate research for social engineering attack simulations or vulnerability assessments.},
language = {en},
urldate = {2022-08-21},
journal = {We are OSINTCurio.us},
author = {Lekati, Christina},
month = may,
year = {2022},
keywords = {Guides et tutoriels / Guides, tutorials and how-tos, social engineering},
}
Downloads: 0
{"_id":"Z4rYHrREnvN4f5M8x","bibbaseid":"lekati-corporateosintforsocialengineering-2022","author_short":["Lekati, C."],"bibdata":{"bibtype":"misc","type":"misc","title":"Corporate OSINT for Social Engineering","copyright":"CC-BY-SA/4.0","url":"https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/","abstract":"If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct open-source intelligence on the organization and its people. Your task will be to find vulnerabilities or high-risk information that is likely to be exploited by attackers in a social engineering attack. Such information would include: identifying specific technologies, key people, and their relationships with internal or external partners (typically used in spear-phishing attacks), the internal organizational culture and hierarchy, company events, and more. Your client organization will need to know which of the publicly available information pose a risk that needs to be removed or managed. Below is a list of resources and research ideas that can be used in the OSINT phase of social engineering engagements, vulnerability assessments, or other projects. Corporate OSINT for social engineering attacks usually revolves around three main subjects: employee information or vulnerabilities (for specific persons, teams, or a broader spectrum of employees), corporate information, and the physical perimeter. The two latter tend to overlap in some instances. This blog will focus on conducting corporate research for social engineering attack simulations or vulnerability assessments.","language":"en","urldate":"2022-08-21","journal":"We are OSINTCurio.us","author":[{"propositions":[],"lastnames":["Lekati"],"firstnames":["Christina"],"suffixes":[]}],"month":"May","year":"2022","keywords":"Guides et tutoriels / Guides, tutorials and how-tos, social engineering","bibtex":"@misc{lekati_corporate_2022,\n\ttitle = {Corporate {OSINT} for {Social} {Engineering}},\n\tcopyright = {CC-BY-SA/4.0},\n\turl = {https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/},\n\tabstract = {If your work involves protecting organizations from social engineering attacks, you will most probably also be required to conduct open-source intelligence on the organization and its people. Your task will be to find vulnerabilities or high-risk information that is likely to be exploited by attackers in a social engineering attack. Such information would include: identifying specific technologies, key people, and their relationships with internal or external partners (typically used in spear-phishing attacks), the internal organizational culture and hierarchy, company events, and more. Your client organization will need to know which of the publicly available information pose a risk that needs to be removed or managed.\n\nBelow is a list of resources and research ideas that can be used in the OSINT phase of social engineering engagements, vulnerability assessments, or other projects. Corporate OSINT for social engineering attacks usually revolves around three main subjects: employee information or vulnerabilities (for specific persons, teams, or a broader spectrum of employees), corporate information, and the physical perimeter. The two latter tend to overlap in some instances. This blog will focus on conducting corporate research for social engineering attack simulations or vulnerability assessments.},\n\tlanguage = {en},\n\turldate = {2022-08-21},\n\tjournal = {We are OSINTCurio.us},\n\tauthor = {Lekati, Christina},\n\tmonth = may,\n\tyear = {2022},\n\tkeywords = {Guides et tutoriels / Guides, tutorials and how-tos, social engineering},\n}\n\n","author_short":["Lekati, C."],"key":"lekati_corporate_2022","id":"lekati_corporate_2022","bibbaseid":"lekati-corporateosintforsocialengineering-2022","role":"author","urls":{"Paper":"https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/"},"keyword":["Guides et tutoriels / Guides","tutorials and how-tos","social engineering"],"metadata":{"authorlinks":{}}},"bibtype":"misc","biburl":"https://api.zotero.org/users/6445347/collections/H2Z7562F/items?key=a5uDjoyOjdg2a0iauC02GdCk&format=bibtex&limit=100","dataSources":["X53kgQeTeRgfGeuF6"],"keywords":["guides et tutoriels / guides","tutorials and how-tos","social engineering"],"search_terms":["corporate","osint","social","engineering","lekati"],"title":"Corporate OSINT for Social Engineering","year":2022}