Back To The Basics With Asset Tracing.



During 2021 a client reached out to CyberOne Intelligence to see if our team could locate the company that owns a semi-truck that had damaged his work vehicle and ran from the scene. Our client went to the police to file an official report and was told that due to the poor quality of the security footage the police could not make out any identifiers, he decided to take matters into his own hands and contact cyber intelligence professionals to see if we could locate any details that would aid the police investigation.


Using only the low-quality security footage supplied by the Client, CyberOne was able to locate the company that owns the semi-truck and submit this information to the police department.



Below is the photo the client had submitted for us to start our research

Looking at the photo the client submitted, unfortunately we could not make out any of the words or any critical identifiers.

How To Extract Frames Using VLC Player


Extracting frames from security footage can help you identify more key information regarding logos, license plates, and identifying landmarks. A free open-source video software called VLC player can assist you in a multitude of ways. CyberOne will show you how we use VLC player to extract frames that can be used in an investigation.


Download VLC Player –

https://www.videolan.org/


Open VLC Player –

Locate “Preferences”


Preferences Menu –

Scroll down and select “Show All”


Scene Filters –

Select the drop-down menu Video -> Filters -> then scroll down and select “Scene Filter”


Scene Filter –

Located in the Scene Filter section are options to change the image format and where you would like to store the frames that are being extracted. The “Recording Ratio” is how many frames per second you would like to extract. Input your preferred settings and click “Save”


Enable Scene Filter –

Located in the “Filters” section are options to click to enable preferences. Scroll down until you see the option to check enable “Scene Video Filter” then click save! This will enable your Scene Filter settings above.


The Exporting Process –

The final step is to open the video you are looking to export frames from within VLC Player. When the video begins to play the frames will start automatically exporting into the folder path you designated. The video pause and play button will also stop and enable the exporting of the frames.


The Key Details

This is how CyberOne was able to identify the company who owns the semi-truck. To start, CyberOne requested the raw security footage from our client. We then used software to isolate and examine each frame, searching for a clearer photo to work from. After combing through all the still frames, we were able to capture a much clearer image.


When looking at this photo we extracted, what identifiers do you see? What could give us a lead?

The still frame we were able to extract from the footage which led us to the solution.

In the picture above, we have some identifiers:


● A company logo

● A company slogan

● A flatbed trailer

● The semi-truck appears to have an extended cab for sleeping


The Search

How can these identifiers give us a lead to start our research?


There are a lot of different specialties when it comes to driving semi-trucks. Some Semi trucks only transport within their state and others travel nationally. The type of cargo a truck carries and how they transport it can vastly vary as well.


Knowing this, we can focus on two main identifiers in our photo:

● The semi-truck has what appears to be a sleeping unit and a flatbed trailer. This means that the semi-truck travels interstate and the company could be anywhere within the United States and not necessarily where the security footage was taken.

● The flatbed indicates that this company specializes in flatbed transport.


With these two critical identifiers, we can start compiling a list of possible trucking companies that fit this criterion. Using a technique known as Google Dorking (the application of search strings that use advanced search operators to find information that is not easily accessible on the internet) with the keywords “Hire”, “Flatbed transport”, and “Interstate transport list” yielded a result for a job posting for a flatbed semi-truck driver.


What is Google Dorking? Google Dorking or Google Hacking is a hacking technique that uses the advanced search functionality in Google's search engine. Check out this amazing blog about google hacking: https://securethelogs.com/2019/05/02/how-to-hack-with-google-dorks/


The Corroboration


Comparing the logo from the job post and the logo from the security footage we can determine that this is a similar match. Any professional Intelligence/Investigator would have to do his/her due diligence and verify that the conclusion and data is correct and corroborated with additional data/evidence.








The two logos look very similar but let’s get more information to conclude that this company was confirmed to be the owner of the semi-truck in the security footage. After finding the website and looking into all the pictures and social media related to the company “McSHEER” Scott Bennett from CyberOne found a photo of a semi-truck with the same logo and company motto located on the company’s social media.




The Conclusion

After gathering the photos from McSHEER Trucking and comparing them to the security footage our client submitted to us, we can write our report with confidence that we have accomplished our clients’ goals in locating what company owns the semi-truck that hit and damaged our client’s vehicle.


Want to discuss more about asset tracing?

Feel free to contact me at ScottB@cyberoneintel.com or reddit.com/user/ScottyB-INT

235 views0 comments