WEBVTT 00:00.720 --> 00:05.400 During your own investigation, chances are you're going to run into phone numbers at some point. 00:06.210 --> 00:12.570 And it can be a little confusing on what you could actually do with a phone number other than, say, 00:13.230 --> 00:17.880 looking it up and determining who the phone number belongs to. 00:18.150 --> 00:23.670 Well, there's actually quite a bit of information we can pull from phone numbers, depending on what 00:23.670 --> 00:26.730 type they are and even if we have. 00:27.970 --> 00:31.570 Say a phone number that's a voice over IP or VoIP number. 00:32.770 --> 00:39.790 And these are going to be things like pseudo, Google Burner, any number of services that allows us 00:39.790 --> 00:45.520 to create a phone number on, say, a computer and make phone calls and receive phone calls. 00:45.910 --> 00:50.470 But we could still get a lot of information from that, too, and it'll help us build again that bigger 00:50.470 --> 00:51.760 picture that we're looking for. 00:52.780 --> 00:53.800 So this is a chart. 00:53.800 --> 00:58.150 And of course, I'm going to have this up for you, for everyone to download. 00:59.450 --> 01:02.090 But this gives you kind of idea what you could do with phone numbers. 01:02.840 --> 01:05.600 In a matter of fact, today I actually had somebody that came in. 01:06.170 --> 01:12.140 It was a email someone got and there was a and they asked for a phone number and they called the number 01:12.230 --> 01:19.640 and the person was looking, oh, it was basically a scam to try to get Apple gift card prepaid cards 01:19.640 --> 01:20.120 out of them. 01:21.080 --> 01:25.970 So again, you may run into phone numbers from a variety of situations. 01:25.970 --> 01:32.300 Could be like the case I had where a phone number is being used to try to scam people. 01:32.900 --> 01:35.660 It could be a phone number calling you directly. 01:35.660 --> 01:37.480 It could be a phone number tied to something else. 01:37.500 --> 01:41.570 You might be able to find a phone number working through social media or whatnot. 01:42.880 --> 01:45.400 So what information we grab for phone numbers? 01:45.520 --> 01:49.750 Well, from the original number, we could find out different things. 01:49.780 --> 01:52.420 The basics are going to be what's the area code? 01:52.450 --> 01:57.550 Well, Erica will help determine the basic area along with the country code. 01:57.970 --> 01:59.170 What's the country code? 01:59.440 --> 02:03.940 Well, one is going to be for United States and we can go on from there. 02:04.600 --> 02:08.560 Country code, of course, will determine what country will determine what country it is. 02:09.490 --> 02:15.610 It'll basically determine what reversed number of service we're going to use or potentially where our 02:15.610 --> 02:16.930 search is going to take us. 02:19.830 --> 02:25.140 We can look at voicemail a lot of times and we'll take a look at some software that actually allows 02:25.140 --> 02:29.490 us to listen to voicemail without actually calling the phone number, which is pretty cool. 02:30.550 --> 02:35.200 So from the voicemail work, we turned to determine, well, we could find out things like. 02:36.380 --> 02:37.640 Do they have a voice mail? 02:38.060 --> 02:42.950 Is the voice mail a generic generic voice mail? 02:42.980 --> 02:45.290 One already pre canned. 02:46.700 --> 02:49.580 If it is, we can actually find out information from that to. 02:51.230 --> 02:56.840 From the pre canned voice mail, we can potentially figure out, well, it might be a Verizon AT&T phone, 02:56.840 --> 02:57.590 for example. 02:58.870 --> 03:03.040 We could also take a look at if the person left a personalized voice. 03:04.060 --> 03:04.450 We could. 03:04.480 --> 03:07.810 Well, now we potentially have the person's voice. 03:08.110 --> 03:15.040 So we actually introduce a man or a woman potentially, and some other distinguishing facts about them. 03:15.490 --> 03:21.370 What what is the voicemail content to leave anything interesting as a background noise or other things 03:21.370 --> 03:22.900 that we can use to identify them? 03:23.960 --> 03:28.040 Well, we can run a reverse number lookup, which is going to be pretty common. 03:28.670 --> 03:32.480 So for reverse numbers, typically we find things like a name. 03:32.900 --> 03:34.040 We can do people searches. 03:34.040 --> 03:35.390 We can look for addresses. 03:36.080 --> 03:39.590 Well, from there we can take a look at where they part of a data breach. 03:40.900 --> 03:42.670 We could take a look at the phone carrier. 03:43.570 --> 03:50.200 We can take a look again, if it's a voice over IP number in if it's a voice over IP number, chances 03:50.200 --> 03:55.600 are it's going to be much harder or you're not going to get a physical location by doing a reverse number, 03:55.960 --> 04:01.220 typically because, well, it's those numbers are again generated by a computer. 04:01.240 --> 04:04.000 They're designed to be burned and recreated again. 04:04.840 --> 04:11.020 That's kind of the good and bad thing about burner numbers, but we can still potentially get some useful 04:11.020 --> 04:12.010 information out of it. 04:13.510 --> 04:18.940 We can, if we might be able to determine, well, they use Google, they use this other service. 04:18.940 --> 04:23.440 It might be a unique service that's available in other countries. 04:24.690 --> 04:28.170 We could potentially call the number, preferably with our own burner number. 04:29.130 --> 04:32.040 And we can see who do they identify themselves as? 04:32.070 --> 04:35.010 Do they have an accent that might be able help determine origin? 04:35.760 --> 04:37.560 I've had people call me on. 04:37.590 --> 04:39.480 I'm on VoIP numbers and I. 04:40.530 --> 04:43.650 I actually called them back, which was pretty fun when they. 04:45.350 --> 04:51.530 I do enjoy when people try to scare me sometimes because I like to kind of see where things go and where 04:51.530 --> 04:53.300 things work and where things kind of fall apart. 04:53.990 --> 04:59.900 But typically for me, I'll use a burner number and some of the things I'll look for is again, do they 05:00.080 --> 05:04.190 who do they identify themselves and what company, what a name they're using? 05:04.370 --> 05:07.010 Do they have accent or look for background noises? 05:07.310 --> 05:09.650 See if there's anything, some of these things. 05:09.650 --> 05:13.580 I'll hear several other people in the background, like during a large call center. 05:13.850 --> 05:19.670 They're probably in a building with a bunch of computers and VoIP, VoIP numbers scamming other people. 05:20.780 --> 05:25.970 And I'll determine what are they asking for, what are they looking for, what type of information they're 05:25.970 --> 05:26.420 trying to get? 05:26.420 --> 05:30.020 For me, you know, that kind of helps, again, build that bigger picture. 05:30.350 --> 05:32.690 So these are some things we could look at. 05:32.690 --> 05:37.820 And again, as we progress through the course, we'll take a look at a lot of different tools that we 05:37.820 --> 05:42.950 could use to use those phone numbers and grab more information from them. 05:43.160 --> 05:45.620 So again, this is a just a little chart. 05:45.620 --> 05:49.250 Again, like everything else, you'll expand off this. 05:49.250 --> 05:52.190 You've taken bits and pieces that will work for you. 05:52.910 --> 05:54.980 So hopefully this is going to be useful for you. 05:55.130 --> 05:56.060 Thank you for watching. 05:56.060 --> 05:56.460 I'll see you in.