Quick Start Guide

Introduction

The EMM OSINT Suite is a software package to help you search the Internet or a collection of files on disk. You can download search results from web search engines and then find relevant documents in the set of downloaded documents. In addition you can import documents from local disk for analysis. The software can process the most popular file formats, such as HTML, PDF, MS Office and others.

The core of the software is the entity extraction module which matches text locations against pre-defined patterns for different type of entities, such as person, organisation and place names, credit card numbers, VAT identifiers, URLs, etc.. User defined patterns can be added to find investigation specific entity types, such as number plates or tax identifiers.

Running the application

Getting to know the application window

The application window consists of four main areas:

The left view area with the Workspace Navigator view and Entity Browser view in the upper-left corner and the Search Tools view and Reports view in the lower-left corner
An editor area in the centre of the window (empty at startup), this area hosts multiple editors which are usually used to edit files or contain web browser windows
A bottom view area with multiple views, such as a the Progress View the Properties view and the Console view
The right view area containing views related to the open editor (hidden or empty at startup)

$images_download\attachments\2588681\OSINT-main-window.png$

The Workspace Navigator view shows all user created files. The root of the workspace is the chosen workspace root. The files within the workspace directory are organised in project folders (we call these projects Case Projects). The Workspace Navigator provides file operations such as cut, copy, paste, delete and rename to manage all user files.

The Entity Browser view shows you the extracted entity information and allows you to find documents where a specific entity was found. (In the beginning this view is empty, we first need to add some documents and run the entity extraction).

The editor area in the centre of the application window hosts multiple editors at the same time (after startup it is empty). It is used to edit files of the workspace or to interact with the web using a browser view.

The different views in the bottom view area and in the right view area show information related to files and objects selected in other views or editor windows (Properties view) or show status information (Console view) or the progress of background operations (Progress View).

You can close views and later open them again by using the main menu: Window > Show View and then select the desired view

Performing an Internet Search and Downloading of Bookmarks

Carrying out the following steps, we could perform a search on the Internet using the EMM-OSINT suite:

Performing Entity Extraction and reviewing results

Once we have the documents downloaded under the Documents folder, the next step is to run the Entity Extraction process in order to analyze and detect the entities found in each document. Once the Entity Extraction process has finished, then we can search for any entity by using the Entity Browser view or show their relationships with other entities by using the Graph view.

Creating a Report of the data

Reports are a way to export analysis data from a Case Project. The data can be exported into human readable formats, such as HTML, or machine readable formats such as tsv files (tab separated value - to be imported into MS Excel).

The EMM-OSINT Suite contains a function to create reports of the extracted data. A report can be used to export data from the software and open it in another program. The system can use a report template (there are a few basic ones already included), enriches the template with the extraction data and produces an output file, such as a HTML file. Therefore, there are two possibilities for creating a Report of the data: