OpSec (Operations Security) is the act of protecting your identity during an investigation.
Beforehand, the threat model must be determined: against whom or what do we want to protect ourselves and why.
This threat model will then enable us to define the protection measures to be implemented:
- use of a sock puppet account (online identity you use only for an investigation).
- use of a VPN (Virtual Private Network)
- …
It is an illusion to seek to secure oneself online without having defined the risks linked to an investigation in a reasoned way.