DarkOwl for Intelligence Agencies - Use Case

1. DarkOwl for Intelligence Agencies How darknet intelligence informs law enforcement and government investigations About the Darknet Darknet sites are continually coming on and offline, with pages vanishing from one minute to the next. The darknet is a series of networks that have been specifically designed to conceal its userbase. Due to the layer of anonymity it provides, the darknet is often as a hub for illegal activity. The Challenge of the Darknet for Law Enforcement and Government The combination of these characteristics poses a severe challenge to law enforcement and government organizations to effectively track criminal activity pertaining to their investigations. Even for the most technologically advanced investigators, the darknet can be a difficult place to gather intelligence and conduct criminal investigations. The Solution for Leveraging the Darknet: DarkOwl Using DarkOwl Vision, our darknet search engine, investigators are able to collect intelligence about persons or subjects of interest, including usernames, aliases, chatroom activity and other potentially incriminating information, and use that data to compile evidence and solve complex crimes. Types of Content on the Darknet • Threats against infrastructure • Threats to public officials • Cryptocurrency fraud • Passports & Identity theft • Counterfeit documents • Human trafficking Our cases are far reaching, and include tracking threat actors, criminal activity (drugs, human trafficking), malware, hacking forums, searching marketplaces for illegal or stolen credentials, personal identifiable information and intellectual property. • Child abuse and pornography • Money laundering • Threat actor actvity • Terrorist chatter • Malware toolkits • Drug trafficking Learn more at DarkOwl.com

2. DarkOwl for Intelligence Agencies DarkOwl Methodology DarkOwl Vision is a darknet search engine that sits on top of a database comprised of billions of darknet websites that are updated in near realtime. format from across the darknet and deep web. DarkOwl’s data archive shortens the timeframe to detection of illegal activity or compromised data, allowing swift detection and mitigation of potential misuse. Unlike conventional offerings which rely heavily on humanpower, DarkOwl Vision automatically, anonymously and continuously collects, indexes and ranks darknet data 24/7/365, resulting in a historical dataset that is crucial for cyber investigations. DarkOwl’s database of darknet intelligence, contains content from well-known darknet marketplaces, and makes it simple to search for vendors, illegal goods, or other subjects of interest. Furthermore, DarkOwl’s access to exclusive authenticated chat-rooms offers pivotal insight in what would otherwise be completely anonymized communications. Using machine learning algorithms, DarkOwl’s web crawlers scrape and index content in rawtext DarkOwl Data Sources • Authenticated Chatrooms • Peer-to-Peer Networks (I2P) • Telegram • Open FTP Sites • • • Data Breaches Tor Zeronet • • • • Darknet Marketplaces Underground Forums High-Risk Paste Sites Internet Relay Chat (IRC) Where Does DarkOwl Vision Fit Into The Intelligence Process? Intel Inputs 1 Investigative Tools 2 • • • • • • • CIDNE (Combined Information Network Exchange) DCGS (Distributed Common Ground System) TIGR (Tactical Ground Reporting System) TIP (Threat Intelligence Platform) POLS (Pattern of Life System) CPCE (Command Post Computing Environment) OSINT Analysis tools such as Maltego or Palantir DarkOwl Vision 3 Further Dissemination 4 Learn more at DarkOwl.com