In this rerecorded video, we're going to talk about reports.
Report writing and why it's important.
So if you're doing a Osint investigation for someone organization, someone hires you.
It's important to get together a basic contract, something before you start your investigation.
It's good to have something written out, outlined, and signed beforehand.
It helps keep things clear for everyone.
Things like names.
Who's going to be involved?
Who's, uh.
Who are you?
Investigator.
What are you investigating?
Dates.
Scope of work.
Where the deliverables, dates, milestones, expectations, etc..
What's going to be out of scope?
Who are your point of contacts?
Who's going to be working on what emergency contacts within whatever hours they can be contacted and
date and sign it.
Also giving a projected timeline Line is going to help to, uh, things like outlining.
Well, we're going to have a scope meeting and duration is going to be about 30 minutes.
We're going to start on this date and this date, uh, we're doing a social media search.
Who's doing that social media search.
How many days it took.
When did they start?
When did they end?
Evidence analyzed and sorted.
Well, that took a day.
It started on this day, end to this day, so on and so forth.
This helps account for who was working on what, when that happened and what the steps that you took.
And it not only helps you keep things organized, but it also helps your client understand what the
process was, how long it took, who was working on what, and also it helps them to understand how
long did it take and having a data collection.
Note uh, some people call this a matrix is useful.
Things like date, time.
If it's applicable evidence type it.
Was there a URL link where where were the files that you grabbed and what are they?
How reliable is that information.
And then have a key a highly reliable vetted information.
Be a highly reliable but still needs to be vetted.
Not 100%, maybe 9,095%.
See unsure about what the reliability is.
The very low reliability.
Uh, f pure junk rumor junk post kind of information.
And the reason why you want to include that is because when you're going through evidence and someone
says, hey, how come you didn't include this?
You know, this person said this, this evidence was here.
You could point to that and go, well, we did find that information, but it we labeled it as junk
or rumor because of this.
When we investigate that and did a deep dive into the information, it turned out to be false.
The the, uh, the fact check failed.
The person that presented it is not a reliable.
They have been known to lie, they've gotten information wrong, etc. you have that proof to that.
You did find it that you didn't ignore that you didn't wasn't that you didn't find it.
So recommendations consider making two reports.
And this is typical not just for open source intelligence reports, but also technical reports like
a a pen test, a security audit report, things like that.
Nature.
You you want a technical report now tech technical report is a highly detailed report designed for senior
investigators IT administrators, etc..
Then the elevator pitch.
This is a short report.
It doesn't have to be have a lot of technical jargon in there.
Unnecessary information.
You want to keep it short and to the point.
Uh, you're you want to consider that your audience is not a very technical person.
This could be upper management people that may run the company, but they don't know the kind of the
ins and outs of that.
On the technical level, you don't want to make it make your report too dumbed down either.
You still want to be professional looking.
You still want it to be, uh, not insulting to whoever's reading it, but also you don't want to confuse
them.
You want to make sure that you can present this to a very non-technical person, and they will understand
what you're saying.
Status summary.
So you want to kind of outline the status summary of what happened.
So we did a social media scan.
This is the social media that we scanned.
This is what we were looking for.
This is what we found.
Then we went into let's start looking at data breaches and dark web.
And this is what we found.
This is what we were searching for.
And we also check for known associates.
These are known associates that we are looking for.
And this is what we found.
And then you can put down additional work done things like we did reverse image searches.
We we made sure to verify all the results.
This was a revolt results.
And then you want to generate your report.
Now certain areas you want to pay very close attention to possible areas of concern.
Questionable social media posts please see attached screenshots.
Uh, disturbing media posted under these accounts.
Please see these attachments.
Make sure that you understand the evidence is scored according to importance, and you want to outline
what that scoring system is.
It could be A through F, it could be uh, zero through ten.
Whatever you want to rate it can be color coded.
Just make sure that it's consistent and that you have a key for it.
So if someone picks it up they can understand what they're reading.
And you also want to give recommendations.
So things like uh, company violations a possible legal violations.
Documents noted notes.
Please see attachment outline various violations by the employee in additional addition to several possible
legal violations.
And this would be something like if you're doing a investigation on an employee.
Uh, well, it is ultimately the client's decision.
We recommend consulting your HR team and your legal team with the findings.
So maybe this employee, uh, did some activities under their company, uh, account, uh, as representing
the company.
And they did some things that were very questionable.
Um, we recommend suspending any and all email login and other network access.
So again, this could be some like employee was silly information.
We caught the person selling the information to rival companies rival countries whatnot.
And that's when you would want to say things like, hey, uh, we have very good evidence that this
person has been selling government secrets to a foreign actor.
China, Russia, whatnot.
Uh, we recommend that you suspend their, uh, email logins so they do not do further damage things
of that nature.
So this was about report writing.
Thank you so much.
And I'll see you in next video.