Intel101 Lab

CyberDefenders Threat Intel Lab

Scenario

This exercise focuses on Open-Source Intelligence (OSINT) as a method for mining and analyzing publicly available data. It aims to enhance skills in producing valuable insights when investigating external threats in the role of a security blue team analyst. Through practical application, participants will learn to effectively gather and interpret information to improve overall security measures.

Question 1

Who is the Registrar for jameskainth.com?

Answer 1

A Whois search revelaed NameCheap is the registrar.

Question 2

What is the Zoom meeting id of the British Prime Ministers Cabinet Meeting?

Answer 2

Using the phrase “Zoom meeting ID of the British Prime Ministers Cabinet Meeting” on a search engine gave me a few news article detailing what happened.

Question 3

In 1998 specifically on February 12th, Champlain was planning on adding an exciting new building to its campus. Back then, it was called “The Information Commons”. Can you find a picture of what the inside would look like? Submit the SHA256 hash.

Answer 3

Using the way back machine I was able to find a single capture on February 12th 1998.

└─$ shasum -a 256 inside1.jpg                          
f4952b314eb15acf0eec79c954f83881c17d50d2b5922ee37e8fc5e5cd1aeac2  inside1.jpg

Question 4

In 2019 UVM’s Ichthyology Class Had to Name their fish for class. Can you find out what the last person on the public roster named their fish?

Answer 4

Using the wayback machine once again, I was able to uncover a Excel spreadsheet with fish names.

Question 5

Can you identify the state from which this picture was taken? See the attached photo.

Answer 5

I used Google’s Image search to try and find where the photo was taken. Using their AI it managed to pin point Dinosaur Land in White Post Virginia.

Press enter or click to view image in full size

Lab Complete!