This week, Micah (@WebBreacher), and Christina (@ChristinaLekati) are joined by Chris Kirsch (chris_kirsch) for an interview! Chris is the CEO of runZero, a cyber asset management company he co-founded with Metasploit creator HD Moore. In 2017, he earned the Black Badge for winning the Social Engineering Capture the Flag competition at DEF CON, while last year, he participated as a judge for the vishing competition at the Social Engineering Community. In this interview, we discuss the intersection between OSINT and social engineering. Chris shares with us stories from the application of OSINT in social engineering operations, and describes some of the top OSINT techniques and resources that he observed at the Social Engineering vishing competition. You can follow Chris on: Twitter: https://twitter.com/chris_kirsch LinkedIn: https://www.linkedin.com/in/ckirsch/ Mastodon: https://infosec.exchange/@chris_kirsch 📚 LINKS AND RESOURCES mentioned in this stream: Layer8 Presentation "Using OSINT For Competitive Intelligence": https://www.youtube.com/watch?v=NB-wLadJ3hk Blog "Top OSINT sources and vishing pretexts from DEF CON’s social engineering competition": https://medium.com/@chris.kirsch/top-osint-sources-and-vishing-pretexts-from-def-cons-social-engineering-competition-8e08de4c8ea8 Blog "Corporate OSINT for Social Engineering": https://osintcurio.us/2022/05/17/corporate-osint-for-social-engineering/ Winning call from DEF CON SECTF 2017: https://www.youtube.com/watch?v=yhE372sqURU Pickpocketing talk: https://www.youtube.com/watch?v=OvET4r4uARQ Social engineering resources: https://medium.com/@chris.kirsch/social-engineering-recommended-resources-10243113b80b Chris' company: https://www.runzero.com/ External scanning using runZero: https://www.runzero.com/blog/external-scanning/ 👁‍🗨 OSINT Curious: 🌍WEBSITE: All of our resources, blog posts, 10 minute tips, videos and podcasts in one place. You also find ways to participate and support our project. https://osintcurio.us/ 🦉TWITTER: Connect with us! We post OSINT updates, news, tips and tools, and interact with the Twitter community. https://twitter.com/osintcurious 🤝 PATREON SPONSORSHIP: As our project continues to grow, we are increasingly thankful for those people, companies, and organizations that choose to support us financially. https://www.patreon.com/osintcurious 👩‍💻 DISCORD: Chat with us on The OSINT Curious Discord server! This is a place to share your own resources, ask questions, give and receive help in solving OSINT challenges, and interact with a very enthusiastic OSINT community. https://iam.osintcurio.us/discord ----------------------------------------------------------------------------------------------------------------- ⏳ CHAPTERS ----------------------------------------------------------------------------------------------------------------- Intro & Welcome (0:00) Introduction Chris (1:24) Scanning The External Perimeter (2:45) How Did Chris Get Into OSINT & Social Engineering (9:10) Using OSINT For A Social Engineering Competition or Engagement (15:10) The Most Used OSINT Resource in the Social Engineering Competition (20:45) Ethics & Stories (25:48) Other Most Used Resources During The Social Engineering Competition (39:00) Should Companies Be Aware Of Their OSINT Footprint? (46:40) Wrap-Up/ End (51:00)