Telegram 101 to 401 

This presentation will introduce Telegram as a messaging app and social network and how the analyst/investigator can incorporate Telegram into their open-source investigations. The listener will be taken through the basics of what is Telegram (101), how to access Telegram safely (201), what information can be extracted and how to extract it from the platform (301), and how to process the information into a visual format to derive social network insights (401). To make the presentation actionable, the cases and tutorials presented will be in the lens of the Russian invasion of Ukraine and the Hamas attack on Israel, and how Telegram was used in both events by the attackers and defenders for their respective purposes.
SANS Open-Source Intelligence Summit 2024
Telegram 101 to 401
Stephen Lerner, Intelligence Analyst Team Leader, Cobwebs Technologies
View upcoming Summits: www.sans.org/u/DuS