CSI Linux Demo - Requirements and an explanation of basic functions.
Let’s open The Social Media Search application. We are going to walk through what is happening in the background. You will be asked for a case name. This will be the name of the case you are working on. We will call this case 001 and left click the OK button.
You should be able to see in the case folder window that there are now folders. One is called archive and the next one is called case 001 after the case name we just entered. Inside the case 001 folder, you should see the common case folders prebuilt for you including the export and tools folder.
We are going to run the username search. Make sure it is chosen and left click on OK. Enter the username of the target of your investigation. And left click on OK.
The tools will start searching for possible user accounts against a list of online websites. Each one that is identified is added to a file starting with Account Search. When the searching is done, you will be asked of you want to open up a browser to list the findings for you to visually verify if the accounts are true positives or false positives. This may take a while since it is opening several new tabs within Google Chrome. Manually go through each finding and visually verify if the account actually exists and if the account is related to the target or suspect. Remove any false positives from the text file and save.
If a twitter account was found, it will gather as much information as it can in the background. When that stage is complete, the Instagram gathering tool will ask for your username and password. This is needed for private information but is not required for public information.
In this example, information was found with the target username.
When the entire process is done, it will ask you for another username to search for within the same case. If you don’t have one, left click on cancel, then OK.
There are several other tools, but for now we will close the case for now.
Let’s take a look at what happens when the case is closed. In the main case folder, we will see a file with the case name and an MD5 extension. This contains a hash record of the files created in the case.
We also see an audit log of the tools run within the Social Media Search app.
...
If you like our content, please subscribe and share. Here are some resources to help support our projects:
Cyber Secrets:
Cyber Secrets YouTube: / cybersecrets
Amazon Books: https://amzn.to/37HWIKA
Facebook: / cybersecrets
LinkedIn: / cyber-secrets
CSI Linux:
The CSI Linux Basics course, FREE of charge: https://training.csilinux.com/course/...
Training: https://training.csilinux.com
Discord: https://discord.csilinux.com
Facebook: / csilinux
LinkedIn: / csi-linux
Merchandise: https://csilinux.creator-spring.com
Please send all suggestions to [email protected]