Bitcoin forensics - visualizing blockchain transactions with Maltego

Ғылым және технология

Cryptocurrency investigations - like Bitcoin forensics - usually involve blockchain transaction analysis. You can use blockchain.com Explorer to look up Bitcoin, Etherium, and other blockchain transactions or addresses. However, the site is not very useful when attempting to analyze many transactions. Instead, visualizing the blockchain is much more helpful.
Thank you to all of our Patrons for sponsoring DFIR Science.
Especially The Ranting Geek. Thank you so much!
Blockchain analysis usually ends by finding a cryptocurrency exchange the suspect uses or when the suspect purchases services using illicit cryptocurrency. Active monitoring may be necessary to watch addresses of interest over time. Additionally, intelligence gathering is helpful when associating cryptocurrency addresses with service providers.
00:00 What we covered so far
00:19 Bitcoin blockchain transactions
00:31 Blockchain.com Explorer
01:07 Free Blockchain analysis with Maltego Community Edition
01:30 Start a new investigation
01:49 Analyze a Bitcoin address
02:13 Investigate victims paying a suspect
03:32 Suspect wallet investigation
04:51 High-level overview of transaction graph
05:32 Overview of Maltego and similar Blockchain analysis tools
05:56 Overview of Bitcoin transaction forensics
We use Maltego Community Edition with the blockchain.com transform to analyze WannaCry Ransomware Bitcoin transactions on the Bitcoin blockchain. Maltego will create a graph where nodes are Bitcoin addresses, and edges are the direction of transactions. Maltego can automatically generate node graphs based on either address relationships or blockchain transactions.
Getting started with Bitcoin forensics Maltego and the blockchain transform is an easy and free way to begin. Maltego can also include intelligence from many other sources, not just the Bitcoin blockchain. You can use investigation intelligence to enrich your graphs and find suspects' true identities behind the addresses.
bit.ly/2Ij9Ojc - 👍 Subscribe for weekly videos
❤️ Get early access and bonus content - / dfirscience
Links:
* blockchain.com/explorer
* www.maltego.com
== Recommended Books ==
Investigating Cryptocurrencies: Understanding, Extracting, and Analyzing Blockchain Evidence (amzn.to/3r5jB4x)
Blockchain Bubble or Revolution: The Future of Bitcoin, Blockchains, and Cryptocurrencies (amzn.to/3zP3VGv)
#Bitcoin #Maltego #DFIR #cryptocurrency #forensics
010001000100011001010011011000110110100101100101011011100110001101100101
Help make DFIR tutorials
👍 Subscribe → bit.ly/2Ij9Ojc
🛒 Shop → swag.dfir.science
❤️ Patreon → / dfirscience
🕸️ Blog → DFIR.Science
🤖 Code → github.com/DFIRScience
🐦 Follow → / dfirscience
📰 DFIR Newsletter → bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing and probably allow its use.

Пікірлер: 33

  • @RowelSuarez
    @RowelSuarezАй бұрын

    Outstanding job, *Adriannotch* I'm so glad you're out there battling these vile con artists. We must take every precaution to protect the general people and the elderly from these vile con artists!! Bravo to you! You ought to be awarded the Nobel Prize for protecting us. Big up, brother

  • @AtisJot
    @AtisJotАй бұрын

    A job well done, *Adrian notch* - Your being out there fighting these scum is a relief. The public and especially the elderly are vulnerable to these despicable scam artists, and we must take all necessary measures to safeguard them. I am really happy for you! Keep us secure; for that, you should get the Nobel Peace Prize.

  • @Cathy-ci9wd
    @Cathy-ci9wdАй бұрын

    I would like to sincerely thank you from the bottom of my heart! So many from tough harsh living conditions that suffer and you helping and giving them something that they desperately need just to survive. I thank God for wonderful people like you that are making the differences that truly matter most! God bless THE ADRIAN NOTCH !

  • @TheFluffyFix
    @TheFluffyFix2 жыл бұрын

    Awesome! Thank you :)

  • @SecurityTalent
    @SecurityTalent2 жыл бұрын

    Thanks

  • @SlackersIndustry
    @SlackersIndustry2 жыл бұрын

    awsome didnt know a lot of this existed, always learning something new, been trying to track some ada that arrived at nexo but it never showed in my balance even though i could see it did arrive in the block chain been waiting for nexo to reapond but customer service is no good 2 months now and havent heard anything from them. thanks for the video awsome

  • @DFIRScience

    @DFIRScience

    2 жыл бұрын

    Yeah, I've heard of Nexo taking a long time to validation transactions. Even so, two moths is waaaayyyy too long.

  • @SouvikHaldarmustang
    @SouvikHaldarmustang11 ай бұрын

    the one output with smaller amount is the change address, which is basically used to return the change to the sender.

  • @mmm-cake
    @mmm-cakeАй бұрын

    Neat

  • @evachong111
    @evachong111 Жыл бұрын

    can it be done with huobi - usdt tracing ?

  • @ifoundthistoday
    @ifoundthistoday2 жыл бұрын

    it's only for btc ? are other blockchains possible ? thx

  • @DFIRScience

    @DFIRScience

    2 жыл бұрын

    Technically this will work with all public blockchains. Most are straightforward like this. However, privacy-preserving currencies try to include tricks so you're unsure who ends up with the currency. You can still see transactions, they are just not 1:1.

  • @itsallaboutcars9068
    @itsallaboutcars90682 жыл бұрын

    I tried ETH, but I didn't get any results. Is that normal? Thank you

  • @DFIRScience

    @DFIRScience

    2 жыл бұрын

    Were you using a Maltego plugin specifically for ETH? Also, check that the plugin is updated. You may need a third-party API to download transactions.

  • @Manuel-wn7tw
    @Manuel-wn7twАй бұрын

    I can't imagine how hard it would be to decide to take on a moneygetback role of scammed persons. The history need to be remembered though and the help that was born through such pain and suffering. Mad respect to these. *Adriannotch* that take on these roles

  • @NomadJan
    @NomadJan2 жыл бұрын

    Are you ever able to track down the actual owners of wallet addresses? The reason I ask is because I'm aware of some scams that have stolen millions of USDT through their scammy website platforms. I would love to be able to help people recover their funds. And if that's not possible, to at least catch the scammers and seize the stolen funds. This might be a long shot, but worth asking the question.

  • @DFIRScience

    @DFIRScience

    2 жыл бұрын

    Yes, *sometimes* identification is possible, but very rarely and usually requires long-term monitoring + law enforcement cooperation.

  • @NomadJan

    @NomadJan

    2 жыл бұрын

    @@DFIRScience Thank you for responding. Every bit of info helps..

  • @tinybowser9459

    @tinybowser9459

    Жыл бұрын

    Me and my team are hunting these people! We developed a similar software as you can see in the video.

  • @Shiva-jt1vg

    @Shiva-jt1vg

    Жыл бұрын

    Madam plz help me ,I have lost all my money in this scammed,plz help me belong to farmer family

  • @leonsmith1942
    @leonsmith1942 Жыл бұрын

    I would love to track down the scammers who stole all my hard earned money, but im so busy paying off my depts I wouldnt find the time to learn how.

  • @mouhamadouseck7340
    @mouhamadouseck73402 жыл бұрын

    Do you help recover stolen funds? I have all the addresses, phone numbers, and websites!

  • @DFIRScience

    @DFIRScience

    2 жыл бұрын

    Happy to try to help. Please contact me for details. dfir.science/contact

  • @SHELLYANNWELLS34

    @SHELLYANNWELLS34

    Жыл бұрын

    @@DFIRScience I was scammed over $10,000 in bitcoin is there anyway you can help me? I have the wallet address.

  • @Exposegadget

    @Exposegadget

    8 ай бұрын

    @@SHELLYANNWELLS34HMU I know someone *TRACEBACKASSETS*

  • @shanecorse-scott3632
    @shanecorse-scott3632 Жыл бұрын

    LOST A LARGE AMOUNT OF MONEY TO A CRYPTO SCAM, CAN YOU HELP?.

  • @Exposegadget

    @Exposegadget

    8 ай бұрын

    Yes *TRACEBACKASSETS*

  • @SophiyaGonzael

    @SophiyaGonzael

    4 ай бұрын

    He’s fast and reliable

  • @tipuuu6749
    @tipuuu67492 ай бұрын

    So what was the secret information here ? All you talked is some public info from the blockchain and repeated bunch of bs

  • @TsannelKoKo
    @TsannelKoKo Жыл бұрын

    2fast talking for us with no mother tongue English Must record and use 0.5x speed 😂😂😂😂

Келесі