IT Forensics · OSINT
Tracing stolen login credentials using OSINT – Investigating compromised login credentials in a forensically verifiable manner
In numerous data breaches in the past, login details such as email addresses and password hashes have been made public and, in some cases, compiled into searchable databases.
Checking whether the login credentials of a relevant organisation or individual appear in such databases may be relevant in the context of cyber security investigations.
Why LanCologne?
Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.
Our OSINT investigations are always carried out as a complementary component to existing IT forensic, legal or internal corporate enquiries. Every step of the investigation and every piece of digital evidence found is documented and, where technically possible, archived to ensure traceability even if the original online content is subsequently altered or deleted.
Our services
We investigate whether an organisation’s relevant email addresses or domains appear in known data breach databases, and document the results in a manner that is forensically verifiable.
Typical areas of application
This is how an investigation into stolen login details works
Relevant email addresses or domains are checked against known, publicly accessible data breach databases using our tools. Any matches are documented, along with the source and, where known, the date of the underlying breach.
Why is the investigation into stolen login details relevant from a forensic perspective?
Evidence of compromised login credentials can be a key factor in explaining unauthorised access to a system.
Identifying affected accounts at an early stage also enables targeted countermeasures, such as enforced password changes.
Frequently Asked Questions
LanCologne – IT Forensics OSINT Cologne
Do you require a professional OSINT investigation into „Tracking down stolen login credentials using OSINT"? LanCologne supports you in the transparent, documented analysis of publicly available digital sources to complement your IT forensic, legal or internal corporate enquiries.
Related to this topic
- Analysing underground forums using OSINT – Using relevant forums for cybersecurity research in a forensic manner
- Forensic monitoring of darknet marketplaces – forensically documented monitoring of trading platforms on the darknet
- Identifying stolen corporate data on the dark web – conducting forensic investigations into published corporate data
- Tracing cryptocurrency transactions using OSINT – Forensic analysis of public blockchain data