OSINT Deep & Dark Web Investigation 3

Question 1

What is I2P (Invisible Internet Project) primarily used for in dark web investigations?

Accepted Answer

An alternative anonymizing network using garlic routing for internal services

Answer

I2P is a separate anonymizing overlay network using garlic routing, primarily designed for internal services called 'eepsites' (.i2p).

Question 2

When investigating dark web forums, what is the OSINT value of analyzing a user's writing style across multiple posts?

Accepted Answer

Stylometric analysis can link anonymous accounts to real identities or other aliases

Answer

Stylometric analysis of vocabulary, grammar patterns, and phrasing can correlate anonymous personas with known individuals or other accounts.

Question 3

Which cryptocurrency is considered more privacy-preserving than Bitcoin and is commonly found in dark web transactions?

Accepted Answer

Monero (XMR)

Answer

Monero uses ring signatures, stealth addresses, and RingCT to obscure sender, receiver, and transaction amounts on its blockchain.

Question 4

What does 'operational security (OPSEC) failure' typically reveal in dark web marketplace investigations?

Accepted Answer

Personally identifiable information left in metadata, posts, or cross-platform activity

Answer

OPSEC failures expose investigators or subjects through metadata, reused usernames, email addresses, or behavioral patterns across platforms.

Question 5

What is a 'dead drop' in the context of dark web intelligence tradecraft?

Accepted Answer

A method of passing information without direct contact, often via hidden online locations

Answer

Dead drops involve leaving information at a pre-arranged location (physical or digital) for retrieval without sender and receiver meeting directly.

(OSINT) Open Source Intelligence Certification Practice Test