SEARCH Group, Incorporated

Happy #SEARCHt4! This week's Tools, Tips, and Techniques Tuesday is brought to you by Program Manager Lauren Wagner from the SEARCH Cybercrime and Digital Forensics Team. She shares the following technique: When conducting an investigation, if you are looking for mugshot photos, check out arrests.org. This site compiles booking photos from various jurisdictions, and while availability varies by state and agency, it can be a valuable resource for identifying individuals. Keep in mind that some records might be outdated or incomplete, and that jurisdictions may request removal of images. However, if an arrest photo is available, it could provide an important visual reference for your investigation. #SEARCHorg #CyberInvestigations #OSINT

Happy #SEARCHt4! This week's Tools, Tips, and Techniques Tuesday is brought to you by Eric Jollymore from the SEARCH Group, Incorporated Cybercrime and Digital Forensics team. PowerShell is a powerful tool in Windows environments, and it's also available for macOS and Linux. While getting comfortable with the command line takes practice and patience, here are some helpful approaches I use when teaching PowerShell fundamentals: 1. GUI-Style Commands Type "show-command" followed by your desired command for a temporary menu window with various options. You can either Run directly or Copy to clipboard. 2. Interactive Selection Hit CTRL + SPACE for a semi-interactive window showing PowerShell's autocomplete options. Use arrow keys to navigate and Enter to select. 3. Tab Completion Use the TAB key to cycle through autocomplete options based on your current context and command. 4. Built-in Help System Access detailed information with "Get-Help Command". Add -Full for examples and detailed explanations. Remember: Always double-check your work before hitting Enter. PowerShell, like most command line environments, executes immediate and decisive actions. #SEARCHorg #SEARCHDFS

Excited to see our work and partnership featured in this article by OSINT Industries, highlighting the impact of open-source intelligence tools in empowering investigators! At SEARCH, we take pride in integrating cutting-edge solutions like those from OSINT Industries into our training programs. These tools, coupled with the expertise of our team—Lauren Wagner, Eric Jollymore, Sherry Torres, and Timothy Lott—are helping investigators work smarter, uncover leads faster, and combat online child exploitation more effectively. Together, we are making a difference in the fight for justice and safety. Check out the article to learn more about how these partnerships are driving real change! #OSINT #OSINTforgood #training #lawenforcement #SEARCHorg #morethantheISPlist #ICAC

SEARCH is proud to have been the long-standing host of the industry-leading SEARCH ISP List—a comprehensive database of approximately 3,400 legal contacts for service of legal process across electronic service providers. 𝗡𝗼𝘄 𝘄𝗲 𝗮𝗿𝗲 𝘁𝗮𝗸𝗶𝗻𝗴 𝗶𝘁 𝘁𝗼 𝘁𝗵𝗲 𝗻𝗲𝘅𝘁 𝗹𝗲𝘃𝗲𝗹 𝘄𝗶𝘁𝗵 𝗼𝘂𝗿 𝗻𝗲𝘄 𝗔𝗣𝗜 𝗶𝗻𝘁𝗲𝗴𝗿𝗮𝘁𝗶𝗼𝗻! Organizations with an API key can now seamlessly integrate the ISP List into their tools and workflows. This means: 🔍 Faster Access – No more manual lookups. ⚙️ Enhanced Efficiency – Automated access to up-to-date contact information. 📈 Custom Integration – Tailored to fit your specific systems and processes. At SEARCH, our mission is to empower law enforcement professionals with the tools they need to streamline their work and enhance their effectiveness. This API unlocks new potential for those who rely on accurate, up-to-date information to serve legal processes quickly and efficiently. If you're interested in learning more or want to explore how this API can benefit your organization, feel free to reach out at cyber@search.org.

SEARCH Cybercrime and Digital Forensics Program Manager Lauren Wagner was excited to share resources today with the Idaho ICAC Task Force at the Idaho ICAC Commanders Update Brief. To make things even easier, she put all the key information into a single-page reference document, attached here for quick access! SEARCH is proud to be a trusted partner in equipping law enforcement with the tools and expertise needed to tackle cybercrime and digital forensics challenges. #SEARCHorg #morethantheISPlist #buttheISPlistisawesome

Happy #SEARCHt4 This week’s Tools, Tips, and Techniques Tuesday is brought to you by Program Manager Lauren Wagner from the SEARCH Cybercrime and Digital Forensics team. Bluesky, with its rapidly growing user base—reportedly surpassing 25 million users—has emerged as a valuable OSINT asset for investigators and researchers. Its decentralized model and evolving features offer unique opportunities to gather insights, explore connections, and uncover valuable digital evidence. She shares this Bluesky OSINT workflow: 🔍 Bluesky Resources 🔍 1️⃣ Profile Exploration: * View profiles directly in your browser: bsky[.]app/profile/𝙝𝙖𝙣𝙙𝙡𝙚 * Investigate connections: * Followers: bsky[.]app/profile/𝙝𝙖𝙣𝙙𝙡𝙚/followers * Following: bsky[.]app/profile/𝙝𝙖𝙣𝙙𝙡𝙚/follows 💡 Tip: When typing these URLs directly into your browser, remove the square brackets around the period and replace 𝙝𝙖𝙣𝙙𝙡𝙚 with the target profile’s specific handle. 2️⃣ Profile Insights: * Use clearsky.app to find DIDs and see accounts blocking your target. * Visit internect.info to confirm account existence and find the first appearance date. 3️⃣ Boolean Searches Without an Account: * Use bsky.app/search for browser-based searches. Examples: Quotes for exact phrases: "Lauren Wagner" Hashtags: #SEARCHt4 Date ranges: since:2024-01-01 until:2024-12-16 Targeted handles: from:𝙝𝙖𝙣𝙙𝙡𝙚 or mentions:𝙝𝙖𝙣𝙙𝙡𝙚 * Use site:bsky.app in Google to search Bluesky profiles and posts. Example: "lauren wagner" site:bsky.app 4️⃣ Starter Pack Insights: * Check what starter packs a profile belongs to using: skyzoo.blue/stats * Explore starter packs by keyword: https://lnkd.in/enA_YNj4 These tools, tips, and techniques give investigators robust capabilities to gather data and assess a target’s digital footprint. As always, ensure proper legal authority when using this information in official investigations. #SEARCHorg #OSINT #BlueskyInvestigations ✨ 𝗪𝗲 𝗵𝗼𝗽𝗲 𝘆𝗼𝘂'𝘃𝗲 𝗲𝗻𝗷𝗼𝘆𝗲𝗱 𝘁𝗵𝗲 #SEARCHt4 𝗹𝗶𝗺𝗶𝘁𝗲𝗱 𝘀𝗲𝗿𝗶𝗲𝘀! ✨ This series ran from October through December, and we've loved sharing tips and techniques with you. We're considering another series for 2025. If you've benefited from this content or have other topics you'd like to see featured, let us know in the comments below! ⬇️

Happy #SEARCHt4 This week’s Tools, Tips, and Techniques Tuesday is brought to you by Director of Cybercrime and Digital Forensics Timothy Lott from the SEARCH Cybercrime and Digital Forensics team. He shares the following tip: If you're using an IP address to identify a suspect—whether from a Cybertip or P2P lead—it’s essential to know if that IP is part of the Tor network. ExoneraTor (a free tool from the Tor Project) can help determine if that IP address is part of the Tor network: https://lnkd.in/dVCFXzUy. Need to check multiple IP addresses as part of your law enforcement investigation? Save time with a SEARCH-developed script that processes a .csv file with a single IP address per line and flags any Tor exit nodes. The TOR Exit Node IP Checker (plus other valuable SEARCH scripts) can be found at search.org/scripts. These tools can streamline your workflow and make investigations more efficient. #SEARCHorg #cybercrime #InvestigationTools #morethantheISPlist

What a week at the 𝟭𝟮𝘁𝗵 𝗔𝗻𝗻𝘂𝗮𝗹 𝗙𝗹𝗼𝗿𝗶𝗱𝗮 𝗖𝗿𝗶𝗺𝗲𝘀 𝗔𝗴𝗮𝗶𝗻𝘀𝘁 𝗖𝗵𝗶𝗹𝗱𝗿𝗲𝗻 𝗖𝗼𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲! We proudly delivered 𝟵 𝗹𝗮𝗯 𝘀𝗲𝘀𝘀𝗶𝗼𝗻𝘀 at the event, and the feedback has been incredible! One attendee told us, "This is the class I've been waiting for ALL week!" Hearing such enthusiasm fuels our passion for empowering investigators with the tools and knowledge they need. Check out our highlights: 📸 Eric Jollymore meeting an adorable ESD K9 decked in festive lights. 📸 Sherry Torres is all smiles with a funny and very official new badge, thanks to Jeff Shackelford at OSForensics by PassMark Software! 📸 A stunning rainbow outside the venue reminded us of the bright futures we’re helping to protect. 📸 Our packed classrooms were full of engaged attendees—what an amazing group to wrap up the year with! This event marks our 𝗳𝗶𝗻𝗮𝗹 𝘁𝗿𝗮𝗶𝗻𝗶𝗻𝗴 𝗼𝗳 𝟮𝟬𝟮𝟰, and what a year it has been! From helping investigators to fostering new connections, we’re incredibly grateful for every opportunity to make a difference. #SEARCHorg #ICAC #lawenforcement #conference #morethantheISPlist

𝗛𝗮𝗽𝗽𝘆 #SEARCHt4 After receiving a lot of positive feedback on our original post about bringing back the legacy right-click menu in Windows 11, Sherry Torres has created a batch file to make the process even easier—perfect for those who aren’t comfortable editing the Windows Registry or using the Command Line! 🛠️ How it Works: 1️⃣ Right-click on the script and select Run as Admin 2️⃣ Reboot your computer … and that’s it! The legacy right-click menu will be your default menu. Easy, quick, and hassle-free. 🔗 The script is available for everyone on Sherry's GitHub: https://lnkd.in/ejArUxCr 🔗 Find this and many other free scripts designed to support law enforcement investigations on our SEARCH Scripts Portal 👉 search.org/scripts We hope you've been finding our weekly Tools, Tips, and Techniques Tuesday posts helpful! #SEARCHorg #DFIR #lawenforcement #ICAC #registryhack #freescripts #SEARCHscripts #morethantheISPlist

Happy #SEARCHt4 This week’s Tools, Tips, and Techniques Tuesday is brought to you by Digital Forensic Evidence Examiner Eric Jollymore from the SEARCH Group, Incorporated Cybercrime and Digital Forensics team. He shares the following technique: Our tools excel at parsing large amounts of data from various sources. But what happens when the data isn’t pre-parsed? Sometimes, we’re left to rely on our own skills and determination to sift through what can feel like an overwhelming sea of information. This is where regular expressions (RegEx) come to the rescue, giving us the momentum we need to tackle data. RegEx is a powerful tool that works across many digital forensic and open-source platforms, as well as scripting tools like Python and PowerShell. It’s an essential skill for making sense of unparsed data efficiently. Getting started with RegEx? It can be tricky at first—sometimes even downright frustrating—but starting small can make all the difference. Here are a few resources to help you get going: 𝗙𝗼𝗿 𝗯𝗲𝗴𝗶𝗻𝗻𝗲𝗿𝘀, 𝘁𝗿𝘆 𝗮 𝘀𝗶𝗺𝗽𝗹𝗲 𝗮𝗻𝗱 𝗳𝘂𝗻 𝗹𝗲𝗮𝗿𝗻𝗶𝗻𝗴 𝗴𝗮𝗺𝗲: https://regexone.com 𝗥𝗲𝗮𝗱𝘆 𝗳𝗼𝗿 𝗮 𝗰𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲? 𝗧𝗲𝘀𝘁 𝘆𝗼𝘂𝗿 𝘀𝗸𝗶𝗹𝗹𝘀 (𝗮𝗻𝗱 𝗽𝗮𝘁𝗶𝗲𝗻𝗰𝗲) 𝘄𝗶𝘁𝗵: https://regexcrossword.com 𝗡𝗲𝗲𝗱 𝘁𝗼𝗼𝗹𝘀 𝘁𝗼 𝗯𝘂𝗶𝗹𝗱 𝗮𝗻𝗱 𝘁𝗲𝘀𝘁 𝗥𝗲𝗴𝗘𝘅 𝗽𝗮𝘁𝘁𝗲𝗿𝗻𝘀? These are fantastic for crafting and refining your expressions: https://regex101.com https://regexr.com