NOWHERE TO HIDE: Open Source Intelligence Gathering - CASEBOOK: How the FBI, Media, and Public Identiified the January 6, 2021 U.S. Capitol Rioters

NOWHERE TO HIDE: Open Source Intelligence Gathering provides practical insight into the investigative tools and open source intelligence gathering (commonly known as “OSINT”) used by law enforcement, the media, and the general public to identify individuals involved in the events of January 6, 2021, at the U.S. Capitol Building in Washington, DC. NOWHERE TO HIDE retraces the FBI’s investigative techniques – some using cutting-edge technology and others using old fashioned, knocking-on-doors detective work – used to pursue the hundreds of thousands of leads received from the general public. NOWHERE TO HIDE is filled with real world case studies, specific resources and practical “how to” guides to equip both beginner and seasoned OSINT investigators with the right tools for their OSINT toolboxes. This insightful volume includes 36 case studies that follow the FBI’s investigations of individual persons of interest, including the tactics, techniques, and procedures used by law enforcement, the media, and public sleuths to track down, identify, and – most importantly – verify the identities of suspected rioters. Learn how the FBI sifted through hundreds of thousands of leads, false positives, dead ends, as well as numerous unexpected leads to perform their investigations. NOWHERE TO HIDE provides vivid context around the events of January 6, 2021, at the U.S. Capitol Building in Washington, DC, which left five people – one police officer and four protestors – dead by the end of the assault. Effective OSINT research requires a combination of technical knowledge to find the Who, What, When, Where, and How threads of data and information as well as taking into account our unpredictable human nature that sometimes leads us to do the things we do (the Why). OSINT is both science and art. NOWEHERE TO HIDE provides practical, actionable information to help both novice and expert investigators, researchers, advocates, and journalists navigate and penetrate OSINT resources to find the information and evidence they seek. Daniel Farber Huang is author of “Practical Cyber Security for Extremely Busy People” and a consultant to a wide range of organizations on cyber and strategy issues. He has worked closely with numerous federal, state, and local law enforcement agencies across the U.S. on providing solutions to their mobile technology requirements. He has focused on providing hardware and software solutions to federal field agents, investigators, the police, and other authorities to support them in performing their duties. He is a strategic consultant helping a wide range of companies in different industries reduce risks at all levels of their organizations, including their cyber security. Daniel is also a documentary photographer and freelance journalist. Introduction Section I ‒ Assault on the United States Capitol Chapter 1 - Who, What, When, Where, How, Why? Chapter 2 ‒ January 6, 2021 Chapter 3 - A Note on Definitions and Approach Chapter 4 ‒ Broadcasting the “revolution” Chapter 5 ‒ FBI Calls on the Public for Help Chapter 6 - FBI Capabilities and Resources Chapter 7 – The Hunt for the Capitol Pipe Bomber Chapter 8 ‒ The Media’s Hunt for Suspects Chapter 9 ‒ Social Media Crackdown Chapter 10 ‒ Public Crowdsourcing Section II – Identifying the Capitol Rioters Chapter 11 ‒ Knock Knock Section III – Tactics, Techniques and Procedures Chapter 12 – Best practices for OSINT Investigators Chapter 13 ‒ Deepfakes and Cheapfakes Chapter 14 ‒ Facial recognition Chapter 15 ‒ Image Research Chapter 16 ‒ Exercises in Photo Observation Chapter 17 ‒ Reverse Engineering Social Media Chapter 18 – Investigating Social Media Accounts Chapter 19 ‒ Fringe Social Media Chapter 20 ‒ Real World Data Chapter 21 ‒ Archiving Data Appendix A Primer on Key Terms and Definitions Capitol Breach Cases About the Author Bibliography Index