I hope this question falls within the scope of the faq...I'm curious to see what kind of answers I get.
Suppose the following
- A user is posting libel and slander on social media (lets say Twitter for example). The posts may be misleading, propaganda or just downright lying
- A user has suspicions and they believe they know who the user may or may not be in real life
- The user is not as computer savvy, and most likely not security minded like a professional might be. They are using their home computer or telephone to post the content and are not connecting through proxy's or VPN's
How would you go about trying to prove the persons identity - assuming that the social media website will be of no assistance. There's no real plan of legal recourse...just want to prove that a person that we suspect is posting these things, is actually posting these things. Methods must be legal.
I assume that social engineering will be involved in some capacity - in fact, I would imagine this would almost all be done with social engineering. What I was thinking was trying to entice the user to click on a link pointing to a site owned by me, and linking the logged IP address to that of one sent from an e-mail (or something to that effect). How would you attempt to prove the identity of the poster?