by Matthew Golabek
Today’s world has people afraid, angry, and traumatized by both COVID-19 and global events. It makes our jobs as investigators difficult. Fear of offending someone or being characterized as falsely reporting something has started to affect security—in and out of uniform. If a protest group is terrorizing the neighborhood or burning down the police department, report that in your investigative findings. The greatest disservice you as an analyst can do is to sugar coat your research results to appease a traumatized client.
As an intelligence analyst, your core purpose—your calling—is to report the facts as accurately as possible. It’s difficult to monitor and report on oppressed groups protesting with real claims. Yes, their arguments may be legitimate and should be heard, however the investigator’s job is to research and inform. If you always say “Yes” to your boss and report only findings that support your boss’s argument, then you are not an analyst.
Hg’s work has involved monitoring cyber-grown protest groups (the Boogaloo movement, Antifa, Q’Anon, Proud Boys, etc.). To us, this work is no different than investigating counterfeiters, gangs, and Anonymous. Our findings are often striking: Anti-vaxxer soccer moms protesting alongside burly gun advocates.
Your job, dear analyst, is not to judge but to explain the facts as you find them. If the person reading your legitimate, well-researched report becomes upset with the well-founded results, you have successfully done your job.
In this timely blog series on predictive intelligence Hg’s Matthew Golabek discusses how to assess risks by tracking people and events through social media monitoring. This week, he focuses on Telegram.
Very similar to Reddit in all areas, Telegram is a cloud-based instant messaging platform where people can talk one-on-one or in massive groups. There are two ways to search Telegram; the first is by having the platform and being invited into a chat where you have access to all conversations and details within that chat. The second way to search Telegram is if someone provides a link to their Telegram conversation through the internet; anyone who sees the link has the ability to search the contents of the conversation. Telegram is typically used by major social movement groups when discussing their plans for upcoming events. One example of Telegram use is the 2019 Hong Kong Extradition protest when the so-called leader Joshua Wong publicly announced that the group communicates through Telegram.
As one can conclude from reading about Telegram, there are numerous reasons why social media would be used to locate and monitor location-specific events—whether it be for a large, peaceful gathering of individuals that could have an effect on the local area, or it be for a small, violent social movement group that is planning to target someone or someone’s property.
Whatever the case may be, social media will often easily provide information and details about the situation prior to its occurring, during the event itself, as well as all discussions and conversations about the event after it has been completed.
Are you an analyst or investigator looking for advanced OSINT training on predictive intelligence and risk monitoring? If so, check out Hg’s webinar series on social media investigative training, where you can attend live sessions and receive CEUs or watch previously recorded sessions to beef up your investigative skills.
Are you concerned about your company’s or employees’ social media imprint? Has you or your company been the target of a protest? Using proprietary software and popular current awareness vendor tools, Hetherington Group monitors over 20 million sources, sites, and Dark Web markets. As an extension of your own security and intellectual property team, our seasoned professional analysts conduct continuous monitoring for executives and company and brand names.. Learn how our team can assist you in assessing and monitoring your risks.
Mattthew Golabek is an investigative analyst at Hetherington Group, where he specializes in online risk assessments. Mr. Golabek has a keen eye for extracting content from social media accounts, tracking activities and monitoring subjects for clients from a wide range of industries, including pharmaceutical, technological, retail, and entertainment.He is a contributing writer to Hg’s Data2Know, Industry Undercover, and OSINT Slack channels. On his lunch break, he can be found outside playing frisbee with his four-legged colleagues.