joseph williams - createcreate.canterbury.ac.uk/16092/1/hea_poster_a0 joseph williams.pdfjoseph...

Post on 27-Apr-2020

12 Views

Category:

Documents

0 Downloads

Preview:

Click to see full reader

TRANSCRIPT

Joseph Williamsjoseph.williams@canterbury.ac.uk

OSIRT is a “browser on steroids” that’sdesigned to aid law enforcementofficials of all skill-levels to conductOpen Source Research on the Internet.

OSIRT styles itself on the look-and-feelof a normal web browser, but providesadditional functionality such as screencapturing and automated logging ofwebpages visited. All evidentialartefacts are automatically placed intoa case container, along with the dateand time they were obtained and acryptographic hash for file verification.

OSIRT has been designed incollaboration with the College ofPolicing, where it is used as a centrepiece for one of the College’s trainingcourses.

OSIRT is also used by numerous lawenforcement officials across the UKfor live investigations; with many ofOSIRT’s features based directly fromlaw enforcement feedback andsuggestions.

“The collection, evaluation and analysis of materials fromsources available to the public, whether on payment orotherwise, to use as intelligence or evidence within

investigations” -Association of Chief Police Officers

Free and Open

Source

Accessible

Inbuilt Screen

Capturing

Automated Logging

Tested by LEOs

Reporting

Tor

(The Onion Router)

OSIRT has been used to capture evidence for: Murder investigations Child exploitation content Anti-corruption investigations Fraud investigations Public order offences Router log capturing If it’s on the web, OSIRT captures it

OSIRT has received a lot of feedbackfrom law enforcement officials, but iswanting to reach out to academicsand businesses for comments andsuggestions.

Please take a business card andleaflet.

osirtbrowser.com

/joe-williams-cccu/osirtv2

joseph.williams@canterbury.ac.uk

About OSIRT Open Source Research?

Use by LEOs

Investigative Applications

Getting and Contributing

Suggestions? Feedback?

top related