Webinar Description
Key Takeaways
- Examines Telegram and dark web platforms as intelligence sources for national security investigations
- Covers terrorism, espionage, geopolitical activity and criminal network tracking
- Designed for investigators, intelligence analysts and security professionals
- Presented by Falkor and DarkOwl, specialists in OSINT and dark web intelligence
- Features expertise in Telegram intelligence, influence operations and counter-terrorism research
Expanding the Scope of Dark Web Intelligence
A webinar presented by Falkor and DarkOwl on 16 September 2026 addresses the evolving role of Telegram and dark web platforms in national security investigations. While these channels have traditionally been associated with cybercrime, they now serve as critical infrastructure for a broader range of threats, including terrorism, state-sponsored espionage, geopolitical operations and organised criminal networks. The session is aimed at investigators and analysts seeking to expand their intelligence-gathering capabilities beyond conventional cybercrime frameworks.
About This Event
This webinar brings together specialists from Falkor and DarkOwl to examine how investigators can leverage Telegram and dark web sources for national security purposes. The discussion moves beyond the typical focus on financial fraud and data breaches to explore how these platforms facilitate terrorism coordination, influence operations and cross-border criminal activity. Participants will gain insight into methodologies for uncovering hidden activity and tracking networks that operate across multiple jurisdictions and platforms.
Telegram as an Intelligence Source
Telegram has emerged as a significant platform for threat actors due to its combination of accessibility, encryption options and limited content moderation. Unlike traditional dark web forums that require specialised software to access, Telegram operates as a mainstream messaging application while hosting channels and groups that facilitate everything from extremist recruitment to the coordination of influence operations. This dual nature makes it particularly challenging for investigators, who must navigate a platform that straddles the line between legitimate communication and covert activity.
The webinar addresses how open-source intelligence techniques can be applied to Telegram investigations, including methods for identifying networks, tracking the spread of disinformation and understanding the operational patterns of threat actors. This approach requires different analytical frameworks than those used for traditional dark web marketplaces, where activity tends to be more transactional in nature.
Featured Speakers
Ari Ben Am, Senior OSINT Analyst at Falkor and co-founder of Telemetry Data Labs, brings expertise in Telegram intelligence, influence operations and virtual espionage. His work focuses on modern digital investigations and the intersection of cyber activity with geopolitical developments.
Richard Hancock serves as a Threat Intelligence Researcher at DarkOwl, where he applies OSINT methodologies to counter-terrorism, cybercrime and geopolitical threat research. His background as an Arabic language specialist with overseas experience provides regional context for investigations into extremist and criminal networks operating on Telegram and other platforms.
Who Should Attend
This session is relevant for threat intelligence analysts, national security investigators, counter-terrorism professionals and law enforcement personnel working on cases that extend beyond traditional cybercrime. Analysts responsible for monitoring geopolitical threats, influence operations or transnational criminal organisations will find particular value in the discussion of investigative techniques applicable to encrypted messaging platforms and dark web sources.
The Shifting Landscape of Online Threats
The convergence of national security threats on platforms originally associated with cybercrime reflects broader changes in how hostile actors operate online. State-sponsored groups, terrorist organisations and criminal networks increasingly share infrastructure, techniques and even personnel. Investigators who limit their focus to a single threat category risk missing connections that span multiple domains. This webinar provides a framework for understanding these interconnections and developing investigative approaches that account for the complex reality of modern online threats.