WEBVTT 00:01.010 --> 00:04.850 In this video, we're going to go over the solution, or at least one of them. 00:07.500 --> 00:13.350 So the exercise was to take this tweet and do an investigation. 00:13.910 --> 00:21.440 Your task was to determine whether the tweet was legitimate and if it was based on the tweets content. 00:22.250 --> 00:30.470 Figure out if it is legitimate or isn't, and basically verify your evidence and prove your findings 00:30.470 --> 00:31.490 and write a report. 00:31.490 --> 00:32.210 Finally. 00:34.670 --> 00:39.950 Now, the way I went about it was I started by analyzing the poster. 00:40.900 --> 00:46.600 I took a look at the previous post I made to determine how reliable they were and possible motives. 00:47.410 --> 00:53.950 Also view the the replies to the post who liked the post, who shared it, etc.. 00:59.180 --> 01:01.190 I also noticed a hashtag. 01:01.190 --> 01:06.290 I wasn't familiar with the active ebbs, so I did a little bit of checking on that. 01:06.440 --> 01:07.880 I did some Google searches. 01:07.880 --> 01:14.480 I also put it back into Twitter, which was the quickest thing to do, and Hashtag Active Ebbs, and 01:14.480 --> 01:22.430 it came back with a lot of, uh, QAnon storm has arrived type posts associated with that hashtag. 01:23.300 --> 01:29.540 So I did that also for my own curiosity, since I wasn't familiar with that particular hashtag. 01:32.030 --> 01:38.240 I also took the user and fed it through bots, and we'll see if it was possibly a propaganda bot or 01:38.240 --> 01:41.000 a or anything of that nature. 01:42.170 --> 01:45.470 And it it came back with a pretty low rating. 01:45.470 --> 01:49.820 So uh, most likely not a, not a bot. 01:50.030 --> 01:56.150 Um, at least not according to this based after analyze its posts. 01:57.090 --> 01:58.110 But. 01:59.770 --> 02:01.030 It could be, could it be? 02:01.030 --> 02:06.820 But for the most part, it it looks like it came back as a normal, normal poster. 02:09.910 --> 02:18.550 I also took the time to save the the Twitter post on Wayback Machine in order to preserve the evidence. 02:20.320 --> 02:28.120 So after that, I saved the photo to posted by the user that they posted up as evidence and I began 02:28.120 --> 02:31.360 to test it for AI manipulation. 02:32.590 --> 02:40.330 Uh, I also could have gone through to do see if there was if the photos were altered using Photoshop, 02:40.330 --> 02:41.440 for example. 02:42.100 --> 02:48.340 However, I didn't reach that step because I isolate each photo and did a reverse image search on each 02:48.340 --> 02:49.210 of these. 02:49.420 --> 02:54.310 Uh, in this case, I use Google images, which I actually found everything pretty quick. 02:57.590 --> 03:04.850 So the first photo I found pretty quickly, including the blurred corner and all the data article was 03:04.850 --> 03:06.230 one 1521. 03:06.230 --> 03:06.830 It was. 03:06.830 --> 03:10.160 It was taken from a um. 03:11.690 --> 03:14.660 Article about the capital attacks. 03:17.300 --> 03:19.400 During 2021. 03:20.540 --> 03:27.440 And it talked about watching the Capitol building in place under extremely high tight security since 03:27.710 --> 03:31.190 Donald Trump's supporters overran the halls. 03:31.190 --> 03:33.950 So that's what the original photo was from. 03:35.580 --> 03:44.790 The second photo came back and I found the exact photo used on Washington tunnels, which was 2002. 03:44.820 --> 03:49.260 I'm sorry, 2004 was when that photo was taken. 03:52.970 --> 04:01.010 The final photo I found was actually from protesters over human rights violation at Guantanamo Bay, 04:01.010 --> 04:03.290 and that was on January 11th, 2021. 04:03.290 --> 04:06.110 So all these different dates were different. 04:06.830 --> 04:11.150 Uh, all these different photos were from different dates rather, and different events. 04:11.150 --> 04:13.070 None of them happen at the same time. 04:13.070 --> 04:20.600 And they all were completely unrelated incidents from what they, the original person posted. 04:22.370 --> 04:28.100 Also there, unsurprisingly, there was no news stories to back up these claims that were made and the 04:28.100 --> 04:35.090 previous posts that the user posted a lot of QAnon posts, those also never came to fruition. 04:36.470 --> 04:39.140 So I labeled it false. 04:41.310 --> 04:43.560 Now this was a pretty easy exercise. 04:43.560 --> 04:51.210 However, I do think it was a good exercise in terms of how you can go about with your methodology and 04:51.210 --> 04:52.560 hopefully your reporting. 04:53.880 --> 04:56.130 I also hope you had fun with this. 04:56.860 --> 04:58.540 And found it useful. 05:00.420 --> 05:08.940 Finally, I want to say that despite how quick it is to find the evidence that none of that was actually 05:09.300 --> 05:12.090 what the original posters said it was. 05:12.120 --> 05:21.030 It didn't stop people from viewing it 1.1 million times, with 2753 reposts at the time that I. 05:22.110 --> 05:23.250 Clip this. 05:23.810 --> 05:27.230 5801 likes. 05:27.930 --> 05:31.800 In 1931 bookmarks for a. 05:32.730 --> 05:35.010 A story that was completely false. 05:36.120 --> 05:43.230 Also, there were a lot of users that that backed up and supported what they said. 05:44.250 --> 05:50.520 Now, of course, you can see on the bottom that that someone called them out, that they were surprised 05:50.520 --> 05:52.140 and anyone would believe in this. 05:52.140 --> 05:58.710 And there were there were other posts later on that that started coming up saying, hey, what are you 05:58.710 --> 05:59.490 talking about? 05:59.490 --> 06:05.970 Here's the evidence that that, um, shows that this story is completely false, which is great to see. 06:05.970 --> 06:17.280 But again, we have 2753 repos with 5801 likes, which is probably gone up by since then if this post 06:17.280 --> 06:18.240 is still up. 06:18.240 --> 06:20.460 So that's a really frightening number. 06:20.460 --> 06:25.290 And this is why Osint is extraordinarily important. 06:25.470 --> 06:27.780 And again, I hope you found this interesting. 06:27.780 --> 06:32.580 I hope you had fun with it and I hope it is useful for you in the future. 06:33.360 --> 06:34.800 Thank you so much for watching. 06:34.830 --> 06:36.420 Thanks for participating. 06:36.420 --> 06:37.170 And. 06:37.940 --> 06:38.810 How fun. 06:38.900 --> 06:40.040 I'll see you soon. 06:40.040 --> 06:41.720 And stay safe out there.