In this video, we're going to be taking a look at OS Iot, which stands for Open Source Intranet Research
Tool.
Now, this is a Windows only program and we normally don't recommend using Windows for Ocean Research.
You may be in a situation where you don't have a choice either your you have to work on a Windows machine
or there are certain programs that you want to use or some other case.
So os iot can be found at os iot browser dot com.
And it said before this is a windows only program, so it runs on Windows seven, eight, 8.1 and ten.
It's designed for law enforcement officials, but it is open source, so it's available to everyone.
Now, if we take a quick look at the page here.
We could see that enhanced web browsing is able to capture screenshots on the web, generate reports,
which makes things really easy.
So it'll basically audit everything you're doing on when you're doing your research.
It has a built in screen recording web page downloading, which is currently in beta as Tor, built
in automate logging case notes to help keep track of everything you're doing.
And you could add attachments to the.
To your investigation.
So I'm going to launch it right here.
And in here we have create a new case.
You can load existing case or you can view the audit log.
Now, down in here, you could restore extract a case in the other corner here you can set your tor
settings.
So if you go the dark web or you need to said run through Tor for whatever reason you need, obfuscate,
you know your point of origin or whatever you can set your settings and here.
So I'm going to cancel it real quick.
I'm just going to create a new case.
And here you said you're investigating, officer, and it's going to put my name down here and the agency.
And operator name.
You know, case reference only contains letters and numbers, hyphens and underscores.
So I'm going to do.
Test.
One one.
Evidence reference.
I don't believe you need to set one here.
You could set a password.
So if you want to try to keep make sure the state secured, you could set that.
You enter your save location.
I'm just going to throw it on the desktop here.
And you have hashing functions here sha256 md5 sha one shot three four sha 512.
Now if you set the hash function, I recommend at least SHA256.
And if you want more information, you could actually just click here.
So it helps verify that your original file hasn't been modified in any way.
Now in here, you can have whatever notes you want.
I'm just going to click next.
And.
I need to make sure I put down the evidence for evidence reference.
And I have to put down roots.
Ryan it.
Okay.
So now we're in our browser.
This is actually based off of Chrome.
So an upper corner, just like any other browser you have at home.
Go back, go for reload your page and here we can capture a screenshot.
And see it here.
It takes a screenshot.
It's because you can see this peer and g pdf jpeg.
It creates a file, automatic file name, date time.
There's your SHA256 hash again.
You could use that to make sure that no one modified your entire evidence there.
What Sandy also is it tells you the URL you grabbed that from and you can put your notes there.
So I'm just going to cancel that since I really don't need it.
Now in here, you can sort of video capture it.
This is fantastic.
So if you need to prove the methods, methods that you used during your investigation, you can click
this button here and it'll start recording everything you do on here.
So if I do this.
I put down.
Looking for criminal.
I clicked start and in here you can see it.
On the screen here that everything I'm doing is being recorded.
And again in here it has a file name, the date, the shot if we refer to 56 hash and your notes.
So again, if you if you want to record the steps you're taking or if it's required, it's fantastic.
Just click that and just start your own investigation.
And here you could touch on in your case, if you have whatever evidence, like you pull down certain
files, pictures, videos, PDF, files, pastebin docs, you could attach it there and with your notes.
And here you can add a note to your case.
And right here you could you could type in your URL just like any other browser here.
We could click the audit log and it's actually keeping a log of everything that we're doing here.
Websites, we loaded action, so we took OSHA t actions and here you can see my loaded case attachments,
videos and completed tasks.
And if your investigation is pretty large, you could type in a search for whatever you're looking for
to help make things easier.
And.
Bookmarks, search engines, Google, Bing, DuckDuckGo, Yahoo!
And usual ones.
You could set up your network tool central of who is mind.
So you can put up domain information.
It has a couple of people search sites already bookmarked in here.
Purple is a really good morning to use Norm's excellent one.
Also in here you have your air in it archives.
So the your wayback machine, your archive is.
So if you're looking for something like a social media site where whoever you're investigating potentially
deleted a incriminating post, you could see if the Wayback Machine or or if the.
Archive.
IRS has a cache copy of that and potentially get them that way.
And here.
These are also excellent sites until techniques is one of the best sites to go to for ocean work.
Then you have the ocean framework on Strat and this quick guide here can help you with your online investigation.
Keywords Details.
Google Search operate geo locations.
You know, just a.
Really handy.
Quick guide if you need it.
Okay.
So although again, this is an excellent tool, if you if you have to use a Windows investigation,
it just makes things a lot easier.
Attachments.
Archiving everything, logging everything on here.
Again, this was an os i r t browser.
And it can be found at OS Iot browser dot com.
And again, this is a Windows only tool.