Hello there, new update, new tools, new sections~ I found myself with a lot more tools and sections so let's jump right into them

Focus: Legal registries, MY vessel search. Legislature search and more professional members directories

New Sections

[Legal registries]

• Court case registry (ejudgment)

• Cause list— current case list (Cause List)

[Malaysian Vessel Search]

• Name search for Malaysian ship — In Malay (senarai kod)

• Rajang Port Vessel Schedule (Vessels Schedule — Official Website of Rajang Port Authority)

• Tanjung Pelepas Vessel Schedule (Vessel Schedule)

• Live AIS vessel tracker (Live Vessel Tracker — Malaysian Coasts — MarineCraft Global Sdn Bhd)

Update sections

[Legislature search]

• Court Case Repository (Court Case Repositories | Department of Trade Union Affairs)

• Official Terengganu Law Repository— In Malay (Perundangan Terengganu | LAWNET)

• Official Law of Sarawak Repository (Sarawak LawNet System v 1.0)

• Complete Sabah Law Resource (Sabahlaw 2009–20)

[Licensed Professional]

• Medical Specialists (National Specialist Register of Malaysia)

• Surveyors (Membership Directory | RISM)

• Quantity Surveyors (Registered Member — Board of Quantity Surveyors Malaysia)

• Geologist (Board of Geologists Malaysia (BoG) — Registered Geologists)

With this I end this update.

Thank you for reading :)

Hello there, this week has been quite eventful for Malaysian OSINT scene and as the active maintainer of this resource list, it would not be fair if I did not include the good works of others so let’s go.

Other Malaysian toolkit

One rule applies: the toolkit will be featured if the toolkit provided something unique.

For this section, I will highlight why the toolkit makes the cut

OSINT-for-countries/OSINT_in_Malaysia: OSINT methods in Malaysia, ways to search for data and information on Malaysia.

• Highlight: this screenshot is one section out of many but it is enough to highlight the level of details available in this particular toolkit

OSINT of Malaysia — by UNISHKA Research Service

• Highlight: Different tools from the startme with clear description

Malaysia — SA WEST Global Intelligence -Content here is covering the other two limitation

• Highlight: the most interactive list by far, still covers things that are not covered by the other two

Election data

ElectionData.MY

Comment: when we talk Election data in Malaysia, we cannot go without acknowledging 4 years of work done by Thevesh and his team. The features are a lot, to start you got the most complete and clear Malaysian election data searchable by seats, candidates, parties, elections, by-elections and redelineation.

If somehow, these things are not enough: this site have ability for you to build your own query, download the dataset directly and even have open API for the data, just mind-blowing to be honest🤯

Truly, this is a massive gamechanger for Malaysian open data community, and it is worth its weight in gold.

Also, keep an eye on this field as a lot of brilliant people building items on top of the open election database.

With this I end this update.

Thank you for reading :)

At first glance, NotebookLLM is a learning site provided by Google.

But if examined the site features properly: NotebookLLM is an open-source RAG.

Sounds absurd?

Let me prove my case with possible use case for OSINT:

Justification as of why NotebookLLM is an RAG

Before I show, let’s circle back on the definition of RAG:

RAG or Retrieval-Augmented Generation (RAG) is basically a way to make AI instead of referring their old training dataset, we give external sources like (database or documents) for them to add with AI capabilities.

In update v5(Update v5 (Malaysian OSINT resource list)- AI stuff | by finx | May, 2026 | Medium), we established some ground rules for the RAG that we want to use:

1) Use the select sum of sites to gather the data

2) Able to be shared globally

3) Able to withhold heavy usage

4) Less setup overhead on my end (no payment preferably)

Okay, lets walk through each rules and examine if NotebookLLM works shall we?

1. Use the select sum of sites to gather the data

It is established that each notebook able to have 50 sources, so: for our use case, it is good

2. Able to be shared globally

3. Able to withhold heavy use

As long as you don’t breach the free usage limit tier on the screenshot, I think we’re good.

4. Less setup overhead on my end (no payment preferably)

As seen: you can get the NotebookLLM only via your Google email, this is quite possibly the lowest bar to enter.

So, NotebookLLM is that unicorn that I presented on Update v5. It is right under my nose all along😅

Shall we walk through how to use it then?

How to use NotebookLLM for OSINT

1. Gather your sources, for this POC: I would use the staff directory list I have in Update v4 (Update v4 (Malaysian OSINT resource list) — PSE and Dorking | by finx | Medium)

[Uni directory list]
https://fssm.umt.edu.my/chemical-sciences-program-lecturer-2/
https://www.uim.edu.my/v4/about-uim-2/structure/directory
https://portal.utem.edu.my/oas/directory/stafsearch_SMSM.asp
https://cyberjaya.edu.my/university/staff/staff-directory
https://aviation.edu.my/staff-directory/
https://registrar.ums.edu.my/staffdirectory/web/public/index
https://www.iium.edu.my/directory/
https://library.oum.edu.my/oumlib/staff_directory
https://www.ukm.my/pusatsiswazah/staff-directory-2/
https://mitrans.uitm.edu.my/index.php/directory
https://hep.utem.edu.my/direktori-staf/
https://pppl.umt.edu.my/directori-staf/
https://konvokesyen.uitm.edu.my/v2/index.php/direktori
https://telefon.uthm.edu.my/
https://www.um.edu.my/list-staff.php?kodPTJ=GF&kodJAB=GF01
https://directory.usm.my/
https://direktori.unimap.edu.my/DIREKTORI/index.jsp?ABC=
https://www.utm.my/directory/
https://uitm.edu.my/en/discover-uitm/administration/office-directory
https://miat.unikl.edu.my/staff-directory/

2. Copy all your sources in NotebookLLM. There are two ways to do so:

3. Let the model read the sites and start your query

And, that’s pretty much it. You got a powerful notebook for you to do recon on your target or whatever you want to utilize on

With this, I end this blog,

Thank you for reading

So, let’s scale back~

Maybe you’re reading my post about those updates and stuff and thinking to yourself:

finx, I am not gonna research Malaysian Goverment or do CSE or sort, so does OSINT have any use to me?

Consider these glorious use case:

1. List of cheap places to eat around campus (with reviews)
2. List of dating place you guys ever done in your relay (with comments)
3. List of super-secret fishing lair

etc, etc..

Usually what did you share? A block of text with google maps link, right?

What if I tell you: You can share custom maps with custom pinning and custom comments?

Yes: you read it correctly: in OSINT, at least to my knowledge: we have tools that do exactly that: sharable custom map

Let me show you how to do it~

The site of Sharable Custom Map

[The resource]

I have one link in mind for you:

My Maps

Granted, there are a lot more ways to do it: but…this is the easiest by far (if I do miss any site that can create easier sharable custom map, please do tag me and inform me)

Now, let's walk through the steps on how to do a custom map

Step by step on how to do a custom map

Use case for example: Dead malls in PJ.

1. Press this red button to start creating your map

2. Press the create button on the popup

3. Edit in the name of your map and layers

4. Add in items to the layers

Lets do two examples, one for Niche malls, one for Truly empty

• Niche malls: Amcorp Mall

• Truly empty: Jaya Shopping Centre

Repeat steps done for niche malls

5. Done

That’s pretty much it. The only item we need to do is, sharing the map

The output:

But we have one more bonus feature.

This open map can be opened on Google Earth

With Google Earth, you can get Historical Imagery (which might be useful for reminiscing stuff)

[Step by step]

1. Press the 3 dot and go to “View in Google Earth” option

2. Hover to the Historical Imagery icon

3. Interact with the Historical Imagery

And, that’s how you able to enhance sharing of:

1. List of cheap places to eat around campus (with reviews)
2. List of dating place you guys ever done in your relay (with comments)
3. List of super-secret fishing lair

or whatever super serious research you had~

With this, I end this blog: thank you for reading :)

OSINT in Malaysia resources — Start.me

Well, back-to-back updates, what happened?

Actually, we got demand for this topic, well, not this, it's more so GLC (government linked corporation) but to explain this, I need to explain MY Govt structure.

So, here we are~

Like a big corporation, MY government have a lot and I mean a lot of levels and layers, that initial analysis is a nightmare.

So, for this update: I will follow format in this site: MyGovernment — Government of Malaysia’s Official Portal

Visually it looked like this:

Federal

This level is where ministries and their portfolios reside.

Note: this is accurate as of 7/5/26. Federal portfolios tend to change due to election/political landscape so refer to the reference for accurate list if this one not accurate

[Reference]

Malaysian Ministries | Malaysia Cabinet

For these lists, I will be linking this link for each ministry because it is enriched with explainers, context and subsidiaries under each ministry

Let me take an example of Prime Minister:

[The structure]

• Prime Minister’s Office

Summary: PM is basically the head honcho of the whole operation responsible for pretty much everything

Reference Link: Prime Minister’s Office | Malaysia Cabinet

• Ministry of Rural and Regional Development

Summary: This portfolio covers rural development program and activities focused on regional developments

Reference Link: Ministry of Rural and Regional Development | Malaysia Cabinet

• Ministry of Energy Transition and Water Transformation

Summary: Covers ways to move from fosil fuels, focusing on renewable energy also manages electric supply and water services

Reference Link: Ministry of Energy Transition and Water Transformation | Malaysia Cabinet

• Ministry of Agriculture and Food Security

Summary: Support workforce related to food security

Reference Link: Ministry of Agriculture and Food Security | Malaysia Cabinet

• Ministry of Communications

Summary: Oversees local broadcasting standards, local film and creative content industry

Reference Link: Ministry of Communications | Malaysia Cabinet

• Ministry of Defense

Summary: National Defense

Reference Link: Ministry of Defence | Malaysia Cabinet

• Ministry of Digital

Summary: Deals with anything digital, broadband, e-govt services, cybersecurity and digital industry

Reference Link: Ministry of Digital | Malaysia Cabinet

• Ministry of Domestic Trade and Cost of Living

Summary: Sets domestic trade practices, supply of essential goods and deals with intellectual property

Reference Link: Ministry of Domestic Trade and Cost of Living | Malaysia Cabinet

• Ministry of Economy

Summary: National Economy, Statistical data collection and analysis

Reference Link: Ministry of Economy | Malaysia Cabinet

• Ministry of Education

Summary: Sets national curriculum standards, manages teachers and administers pubic examinations

Reference Link: Ministry of Education | Malaysia Cabinet

• Ministry of Entrepreneur, Development and Cooperatives

Summary: National Entrepreneur Growth

Reference Link: Ministry of Entrepreneur Development and Cooperatives | Malaysia Cabinet

• Ministry of Federal Territories

Summary: Manages Federal Territories (KL, Labuan, Putrajaya)

Reference Link: Ministry of Federal Territories | Malaysia Cabinet

• Ministry of Finance

Summary: National Finance

Reference Link: Ministry of Finance | Malaysia Cabinet

• Ministry of Foreign Affairs

Summary: Manages connections Malaysia have with other countries

Reference Link: Ministry of Foreign Affairs | Malaysia Cabinet

• Ministry of Health

Summary: National Health

Reference Link: Ministry of Health | Malaysia Cabinet

• Ministry of Higher Education

Summary: QA of higher education institution and manages international education promotion

Reference Link: Ministry of Higher Education | Malaysia Cabinet

• Ministry of Home Affairs

Summary: Border control, film censorship and Quran publication control.

Reference Link: Ministry of Home Affairs | Malaysia Cabinet

• Ministry of Housing and Local Government

Summary: Public affordable housing, urban and rural planning standard, waste and planning cleansing managemet and fire and rescue services

Reference Link: Ministry of Housing and Local Government | Malaysia Cabinet

• Ministry of Human Resources

Summary: Labor standards and local workforce

Reference Link: Ministry of Human Resources | Malaysia Cabinet

• Ministry of Investment, Trade and Industry

Summary: Free trade agreements and export

Reference Link: Ministry of Investment, Trade and Industry | Malaysia Cabinet

• Ministry of Law and Institutional Reform

Summary: Develops and implements policies that shape Malaysia’s legislative framework

Reference Link: Ministry of Law and Institutional Reform | Malaysia Cabinet

• Ministry of National Unity

Summary: National unity, preserving Malaysia’s culture through national archives, library and museum network

Reference Link: Ministry of National Unity | Malaysia Cabinet

• Ministry of Natural Resources and Environmental Sustainability

Summary: Protecting environment, land, mineral, forestry, wildlife. Geospatial surveying falls under this portfolio

Reference Link: Ministry of Natural Resources and Environmental Sustainability | Malaysia Cabinet

• Ministry of Plantation and Commodities

Summary: Coordinates Malaysia’s plantation and commodity industries

Reference Link: Ministry of Plantation and Commodities | Malaysia Cabinet

• Ministry of Religious Affairs

Summary: Oversees Islamic system in Malaysia (Halal, Islamic court system and Qur'anic studies)

Reference Link: Ministry of Religious Affairs | Malaysia Cabinet

• Ministry of Sabah and Sarawak Affairs

Summary: Federal policies and programs affecting Sabah and Sarawak in line of Malaysia Agreement 1963

Reference Link: Ministry of Sabah and Sarawak Affairs | Malaysia Cabinet

• Ministry of Science, Technology and Innovation

Summary: National Science and Tech, also covers debt financing, venture capital and early-stage grant funding

Reference Link: Ministry of Science, Technology and Innovation | Malaysia Cabinet

• Ministry of Tourism, Arts and Culture

Summary: National Tourism industry, protect national heritage sites and artefacts

Reference Link: Ministry of Tourism, Arts and Culture | Malaysia Cabinet

• Ministry of Transport

Summary: Manages all transport modes (public transport, aviation, maritime)

Reference Link: Ministry of Transport | Malaysia Cabinet

• Ministry of Women, Family and Community Development

Summary: Community service, women’s development, family resilience

Reference Link: Ministry of Women, Family and Community Development | Malaysia Cabinet

• Ministry of Works

Summary: Plans, develops and maintains federal roads, highways and public infrastructure assets

Reference Link: Ministry of Works | Malaysia Cabinet

• Ministry of Youth and Sports

Summary: Youth organizations and sports

Reference Link: Ministry of Youth and Sports | Malaysia Cabinet

State

Quick refresher: Malaysia has 14 states and each state have their own governing body covers statewide issues

[Things to note]

• Federal Territories (KL, Putrajaya, Labuan) are directly managed by federal govt
• Sabah and Sarawak have constitutional autonomy according to Malaysia Agreement 1963
• SUK — Setiausaha Kerajaan (the rest of the state)
• SUP — Setiausaha Persekutuan (ONLY Sabah and Sarawak)

[Reference]

For this section, there are no sites that conveniently tags everything so 2 parts, one would be Google Dork for that specific state and website for each state

[The Structure]

1) Wilayah Persekutuan — Federal Territories (KL, Putrajaya, Labuan)

site:*.gov.my wilayah persekutuan

- https://www.jwp.gov.my/

- https://www.dbkl.gov.my/

- https://www.ppj.gov.my/

- https://www.pl.gov.my/

2) Selangor

site:*.gov.my selangor

https://www.selangor.gov.my/

3) Negeri Sembilan

site:*.gov.my negeri sembilan

https://www.ns.gov.my/

4) Melaka

site:*.gov.my melaka

https://www.melaka.gov.my/ms/

5) Johor

site:*.gov.my johor

https://www.johor.gov.my/

6) Pahang

site:*.gov.my pahang

https://www.pahang.gov.my/

7) Terengganu

site:*.gov.my terengganu

https://www.terengganu.gov.my/index.php/ms/

8) Kelantan

site:*.gov.my kelantan

https://www.kelantan.gov.my/

9) Perak

site:*.gov.my perak

https://www.perak.gov.my/

10) Kedah

site:*.gov.my kedah

https://www.kedah.gov.my/

11) Penang

site:*.gov.my penang

https://www.penang.gov.my/

12) Perlis

site:*.gov.my perlis

https://www.perlis.gov.my/

13) Sabah

site:*.gov.my sabah

https://sabah.gov.my/

14) Sarawak

site:*.gov.my sarawak

https://www.sarawak.gov.my/

PBT

Pihak Berkuasa Tempatan/Local Authorities covers local area need (city/municipal/district)

[Reference]

Malaysian Association of Local Authorities — Persatuan Pihak Berkuasa Tempatan Malaysia

Senarai PBT — Portal Rasmi Jabatan Kerajaan Tempatan

[Things to note]

In Malaysia, Local Authoritiy scales start from Dewan Bandaraya(City Hall) -> Majlis Bandaraya (City Council) -> Majlis Perbandaran(Municipal Council)-> Majlis Daerah (District Council)

[The Structure]

PERLIS

1. MAJLIS PERBANDARAN KANGAR (Kangar Background | Kangar Municipal Council)

KEDAH

1. MAJLIS BANDARAYA ALOR SETAR (MAJLIS BANDARAYA ALOR SETAR — Portal PBT Kedah)
2. MAJLIS PERBANDARAN KULIM (MAJLIS PERBANDARAN KULIM — Portal PBT Kedah)
3. MAJLIS PERBANDARAN SUNGAI PETANI (MAJLIS PERBANDARAN SUNGAI PETANI — Portal PBT Kedah)
4. MAJLIS PERBANDARAN LANGKAWI BANDARAYA PELANCONGAN (MAJLIS PERBANDARAN LANGKAWI BANDARAYA PELANCONGAN — Portal PBT Kedah)
5. MAJLIS DAERAH BALING (MAJLIS DAERAH BALING — Portal PBT Kedah)
6. MAJLIS PERBANDARAN KUBANG PASU (MAJLIS PERBANDARAN KUBANG PASU — NEW — Portal PBT Kedah)
7. MAJLIS DAERAH BALING (MAJLIS DAERAH BALING — Portal PBT Kedah)
8. MAJLIS DAERAH PENDANG (MAJLIS DAERAH PENDANG — Portal PBT Kedah)
9. MAJLIS DAERAH YAN (MAJLIS DAERAH YAN — Portal PBT Kedah)
10. MAJLIS DAERAH SIK (MAJLIS DAERAH SIK — Portal PBT Kedah)
11. MAJLIS DAERAH PADANG TERAP (MAJLIS DAERAH PADANG TERAP — Portal PBT Kedah)
12. MAJLIS DAERAH BANDAR BAHARU (MAJLIS DAERAH BANDAR BAHARU — Portal PBT Kedah)
13. PBT TAMAN PERINDUSTRIAN HI-TECH KULIM (PBT TAMAN PERINDUSTRIAN HI-TECH KULIM — Portal PBT Kedah)

PULAU PINANG

1. MAJLIS BANDARAYA PULAU PINANG (Portal Rasmi Majlis Bandaraya Pulau Pinang — Utama)
2. MAJLIS BANDARAYA SEBERANG PERAI (Laman Utama MBSP)

PERAK

1. MAJLIS PERBANDARAN MANJUNG (MAJLIS PEBANDARAN MANJUNG — BANDAR PELANCONGAN DAN MARITIM)
2. MAJLIS DAERAH KAMPAR (Portal Rasmi Majlis Daerah Kampar — Utama)
3. MAJLIS DAERAH SELAMA (Portal Rasmi Majlis Daerah Selama — Utama)
4. MAJLIS PERBANDARAN TAIPING (Portal Rasmi Majlis Daerah Selama — Utama)
5. MAJLIS PERBANDARAN TELUK INTAN (Portal Rasmi Majlis Perbandaran Teluk Intan — Latar Belakang)
6. MAJLIS PERBANDARAN KUALA KANGSAR (Majlis Perbandaran Kuala Kangsar — Laman Utama)
7. MAJLIS BANDARAYA IPOH (Portal Rasmi Majlis Bandaraya Ipoh — Utama)
8. MAJLIS DAERAH BATU GAJAH (Laman Web Rasmi Majlis Daerah Batu Gajah — Utama)
9. MAJLIS DAERAH KERIAN (Majlis Daerah Kerian — Laman Utama)
10. MAJLIS DAERAH PERAK TENGAH (Laman Web Majlis Daerah Perak Tengah — Halaman Utama)
11. MAJLIS DAERAH PENGKALAN HULU (Portal Rasmi Majlis Daerah Pengkalan Hulu — Laman Utama)
12. MAJLIS DAERAH TANJUNG MALIM (MAJLIS DAERAH TANJONG MALIM — Halaman Utama)

SELANGOR

1. MAJLIS BANDARAYA SHAH ALAM (Majlis Bandaraya Shah Alam)
2. MAJLIS BANDARAYA PETALING JAYA (Portal Rasmi Majlis Bandaraya Petaling Jaya (MBPJ) |)
3. MAJLIS BANDARAYA SUBANG JAYA (Laman Utama | Majlis Bandaraya Subang Jaya)
4. MAJLIS PERBANDARAN SEPANG (MAJLIS PERBANDARAN SEPANG — Sepang Bersih, Hijau Dan Sejahtera)
5. MAJLIS PERBANDARAN SELAYANG (Utama | Majlis Perbandaran Selayang)
6. MAJLIS PERBANDARAN KLANG (Laman Utama | Portal Rasmi Majlis Bandaraya Diraja Klang (MBDK))
7. MAJLIS PERBANDARAN KAJANG (Majlis Perbandaran Kajang)
8. MAJLIS DAERAH SABAK BERNAM (Majlis Daerah Sabak Bernam)
9. MAJLIS PERBANDARAN KUALA LANGAT (Portal Rasmi Majlis Perbandaran Kuala Langat — Halaman Utama)
10. MAJLIS PERBANDARAN HULU SELANGOR (Majlis Perbandaran Hulu Selangor — Halaman Utama)
11. MAJLIS PERBANDARAN AMPANG JAYA (Portal Rasmi Majlis Perbandaran Ampang Jaya (MPAJ) |)
12. MAJLIS PERBANDARAN KUALA SELANGOR (Portal Rasmi Majlis Perbandaran Kuala Selangor)

NEGERI SEMBILAN

1. MAJLIS BANDARAYA SEREMBAN (Portal Rasmi Majlis Bandaraya Seremban (MBS))
2. MAJLIS PERBANDARAN PORT DICKSON (Portal Rasmi Majlis Perbandaran Port Dickson (MPPD))
3. MAJLIS DAERAH JELEBU (Portal Rasmi Majlis Daerah Jelebu (MDJ) |)
4. MAJLIS DAERAH KUALA PILAH (Portal Rasmi Majlis Daerah Kuala Pilah (MDKP))
5. MAJLIS DAERAH TAMPIN (Portal Rasmi Majlis Daerah Tampin (MDT) |)
6. MAJLIS DAERAH REMBAU (Portal Rasmi Majlis Daerah Rembau — Utama)
7. MAJLIS DAERAH JEMPOL (Portal Rasmi Majlis Perbandaran Jempol (MPJL) |)

MELAKA

1. MAJLIS BANDARAYA MELAKA BERSEJARAH (Portal Rasmi Majlis Bandaraya Melaka Bersejarah (MBMB) — Halaman Utama)
2. MAJLIS PERBANDARAN HANG TUAH JAYA (Laman Utama)
3. MAJLIS PERBANDARAN JASIN (Laman Utama)
4. MAJLIS PERBANDARAN ALOR GAJAH (Portal Rasmi MPAG — Majlis Perbandaran Alor Gajah)

JOHOR

1. MAJLIS BANDARAYA JOHOR BAHRU (Portal Rasmi Majlis Bandaraya Johor Bahru)
2. MAJLIS BANDARAYA ISKANDAR PUTERI (Portal Rasmi Majlis Bandaraya Iskandar Puteri)
3. MAJLIS PERBANDARAN MUAR (Portal Rasmi Majlis Perbandaran Muar (MPM))
4. MAJLIS PERBANDARAN BATU PAHAT (Portal Rasmi Majlis Perbandaran Batu Pahat (MPBP))
5. MAJLIS PERBANDARAN KLUANG (Portal Rasmi Majlis Perbandaran Kluang (MPK))
6. MAJLIS PERBANDARAN KULAI (Portal Rasmi Majlis Perbandaran Kulai)
7. MAJLIS BANDARAYA PASIR GUDANG (Portal Rasmi Majlis Bandaraya Pasir Gudang (MBPG))
8. MAJLIS DAERAH KOTA TINGGI (Portal Rasmi Majlis Daerah Kota Tinggi (MDKT) |)
9. MAJLIS DAERAH TANGKAK (Laman Web Rasmi Majlis Daerah Tangkak (MDT))
10. MAJLIS DAERAH MERSING (Web Server JKT) — deadlink
11. MAJLIS PERBANDARAN SEGAMAT (www.mpsegamat.gov.my) — deadlink
12. MAJLIS PERBANDARAN PENGERANG (Portal Rasmi Majlis Perbandaran Pengerang |)
13. MAJLIS DAERAH LABIS (Portal Rasmi Majlis Daerah Labis |)
14. MAJLIS DAERAH SIMPANG RENGGAM (Portal Rasmi Majlis Daerah Simpang Renggam (MDSR) |)
15. MAJLIS DAERAH YONG PENG (Portal Rasmi Majlis Daerah Yong Peng (MDYP) |)
16. MAJLIS PEMBANDARAN PONTIAN (Portal Rasmi Majlis Perbandaran Pontian (MPPn) |)

PAHANG

1. MAJLIS BANDARAYA KUANTAN (Portal Rasmi Majlis Bandaraya Kuantan)
2. MAJLIS PERBANDARAN BENTONG (Portal Rasmi Majlis Perbandaran Bentong (MPB))
3. MAJLIS PERBANDARAN TEMERLOH (Portal Rasmi Majlis Perbandaran Temerloh (MPT) |)
4. MAJLIS PERBANDARAN PEKAN (Portal Rasmi Majlis Perbandaran Pekan Bandar Diraja — (MPPBDR))
5. MAJLIS DAERAH BERA (Portal Rasmi Majlis Daerah Bera (MDB))
6. MAJLIS DAERAH CAMERON HIGHLANDS (Portal Rasmi Majlis Daerah Cameron Highlands (MDCH) |)
7. MAJLIS DAERAH JERANTUT (Portal Rasmi Majlis Daerah Jerantut)
8. MAJLIS DAERAH LIPIS (Portal Rasmi Majlis Daerah Lipis (MDL))
9. MAJLIS DAERAH MARAN (Portal Rasmi Majlis Daerah Maran (MDM))
10. MAJLIS DAERAH RAUB (Portal Rasmi Majlis Daerah Raub (MDR) |)
11. MAJLIS DAERAH ROMPIN (Halaman Utama)
12. LEMBAGA PEMBANGUNAN TIOMAN (TIOMAN)

TERENGGANU

1. MAJLIS BANDARAYA KUALA TERENGGANU (Portal Rasmi Majlis Bandaraya Kuala Terengganu (MBKT))
2. MAJLIS PERBANDARAN KEMAMAN (Portal Rasmi Majlis Perbandaran Kemaman (MPK) |)
3. MAJLIS DAERAH BESUT (Portal Rasmi Majlis Daerah Besut — Besut District Council)
4. MAJLIS DAERAH HULU TERENGGANU (Portal Rasmi Majlis Daerah Hulu Terengganu — Halaman Utama)
5. MAJLIS DAERAH SETIU (Portal Rasmi Majlis Daerah Setiu — Halaman Utama)
6. MAJLIS PERBANDARAN DUNGUN (Laman Utama)
7. MAJLIS DAERAH MARANG (Halaman Utama)

KELANTAN

1. MAJLIS PERBANDARAN KOTA BHARU (MAJLIS PERBANDARAN KOTA BHARU BANDAR RAYA ISLAM)
2. MAJLIS DAERAH KETEREH (HOME — Laman Web Rasmi Majlis Daerah Ketereh)
3. MAJLIS DAERAH JELI/TANAH MERAH (Portal Rasmi Majlis Daerah Jeli (MDJ) — Home)
4. MAJLIS DAERAH PASIR PUTEH (Home — MDPP)
5. MAJLIS DAERAH GUA MUSANG (Majlis Daerah Gua Musang — Home)
6. MAJLIS DAERAH MACHANG (Home — MAJLIS DAERAH MACHANG)
7. MAJLIS DAERAH PASIR MAS (UTAMA — Majlis Daerah Pasir Mas)
8. MAJLIS DAERAH DABONG (UTAMA — Majlis Daerah Dabong (MDD))
9. MAJLIS DAERAH TUMPAT (503 Service Temporarily Unavailable) — deadlink

SABAH-

1. DEWAN BANDARAYA KOTA KINABALU (Selamat Datang | Dewan Bandaraya Kota Kinabalu)
2. MAJLIS DAERAH LAHAD DATU (MAJLIS DAERAH LAHAD DATU)
3. MAJLIS PERBANDARAN SANDAKAN (Portal Majlis Perbandaran Sandakan)
4. MAJLIS DAERAH KINABATANGAN (Home | MAJLIS DAERAH KINABATANGAN) — template site
5. MAJLIS DAERAH KENINGAU (MAJLIS DAERAH KENINGAU)
6. MAJLIS PERBANDARAN TAWAU (MAJLIS PERBANDARAN TAWAU | MAJLIS PERBANDARAN TAWAU)
7. MAJLIS DAERAH KOTA MARUDU (Majlis Daerah Kota Marudu)
8. MAJLIS DAERAH KOTA BELUD (MAJLIS DAERAH KOTA BELUD — MDKB)
9. LEMBAGA BANDARAN KUDAT (DAERAH) (KE LAMAN WEB LEMBAGA BANDARAN KUDAT)
10. MAJLIS DAERAH BELURAN (Majlis Deerah Beluran )
11. MAJLIS DAERAH SEMPORNA (Majlis Daerah Semporna |)
12. MAJLIS DAERAH BEAUFORT (Laman Web Rasmi Majlis Daerah Beaufort)
13. MAJLIS DAERAH KUALA PENYU (Majlis Daerah Kuala Penyu)
14. MAJLIS DAERAH KUNAK (LAMAN WEB RASMI)
15. MAJLIS DAERAH NABAWAN (Majlis Daerah Nabawan)
16. MAJLIS DAERAH PAPAR (MAJLIS DAERAH PAPAR)
17. MAJLIS DAERAH PENAMPANG (MPP — Laman Web Majlis Perbandaran Penampang)
18. MAJLIS DAERAH RANAU (MAJLIS DAERAH RANAU)
19. MAJLIS DAERAH SIPITANG (MAJLIS DAERAH SIPITANG |)
20. MAJLIS DAERAH TAMBUNAN (Ke Laman Web Rasmi Majlis Daerah Tambunan)
21. MAJLIS DAERAH TENOM (Majlis Daerah Tenom / Tenom District Council)
22. MAJLIS DAERAH TUARAN (𝐌𝐀𝐉𝐋𝐈𝐒 𝐃𝐀𝐄𝐑𝐀𝐇 𝐓𝐔𝐀𝐑𝐀𝐍)
23. MAJLIS DAERAH PUTATAN (KE LAMAN WEB MAJLIS DAERAH PUTATAN)
24. MAJLIS DAERAH PITAS (MAJLIS DAERAH PITAS)
25. MAJLIS DAERAH TONGOD (MAJLIS DAERAH TONGOD)
26. MAJLIS DAERAH TELUPID (MAJLIS DAERAH TELUPID)

SARAWAK

1. DEWAN BANDARAYA KUCHING UTARA (The Official Website of the Commission Of The City Of Kuching North)
2. MAJLIS BANDARAYA KUCHING SELATAN (Official Website of Council of the City of Kuching South)
3. MAJLIS BANDARAYA MIRI (Official Website of Miri City Council)
4. MAJLIS PERBANDARAN SIBU (Pentadbiran Bahagian Sibu)
5. LEMBAGA KEMAJUAN BINTULU (BINTULU IN GENERAL — Official Website of Bintulu Development Authority)
6. MAJLIS DAERAH SRI AMAN (Laman Web Majlis Daerah Sri Aman)
7. MAJLIS DAERAH LUAR BANDAR SIBU (Laman Web Rasmi Majlis Daerah Luar Bandar Sibu)
8. MAJLIS DEARAH LIMBANG (Laman Web Rasmi Majlis Daerah Limbang)
9. MAJLIS DAERAH SARIKEI (Laman Web Rasmi Majlis Daerah Sarikei)
10. MAJLIS PERBANDARAN KOTA SAMARAHAN (Portal Rasmi Pentadbiran Bahagian Samarahan)
11. MAJLIS PERBANDARAN PADAWAN (The Official Website of Padawan Municipal Council)
12. MAJLIS DAERAH SUBIS (Laman Web Rasmi Majlis Daerah Subis)
13. MAJLIS DAERAH BAU (Laman Web Rasmi Majlis Daerah bau)
14. MAJLIS DAERAH BETONG (Majlis Daerah Betong)
15. MAJLIS DAERAH DALAT & MUKAH (Laman Web Majlis Daerah Dalat & Mukah)
16. MAJLIS DAERAH KANOWIT (Official Website of Kanowit District Council)
17. MAJLIS DAERAH KAPIT (Laman Web Rasmi Majlis Daerah Kapit)
18. MAJLIS DAERAH LAWAS (Laman Web Rasmi Majlis Daerah Lawas)
19. MAJLIS DAERAH LUBOK ANTU (Majlis Daerah Lubok Antu)
20. MAJLIS DAERAH LUNDU (Laman Web Rasmi Majlis Daerah Lundu)
21. MAJLIS DAERAH MARADONG & JULAU (Official Website of Maradong and Julau District Council)
22. MAJLIS DAERAH MARUDI (Laman Web Rasmi Majlis Daerah Marudi)
23. MAJLIS DAERAH MATU & DATO (Laman Web Agensi Kerajaan)
24. MAJLIS DAERAH SARATOK (Portal Rasmi Pentadbiran Bahagian Betong) — duplicate
25. MAJLIS DAERAH SERIAN (Laman Web Majlis Daerah Serian)
26. MAJLIS DAERAH SIMUNJAN (x)
27. MAJLIS DAERAH GEDONG (Majlis Daerah Gedong)

Related Stuff

This section is for items that is related but too compact to be smushed with other section

I however will cap this update here as my brain is not braining😵‍💫, I need time to recover since this update is a hefty one.

We will circle back on this one at a later update

Thank you for reading this far :)

OSINT in Malaysia resources — Start.me

Let’s face fact: we are in AI bubble; we got lots of AI tools and AI tech around.

Naturally, OSINT also got affected by this change.

But I am no expert, still a noob in this field😅.

However, I found one account that can help to understand the mystical world of OSINT and AI~

• CyberRaya

This is a long overdue inclusion in this list; I am aware of your work for quite some time, and I am aware of your talk on Nanosec with something named n8n or something. Right now, as I rekindle myself back in this world, I find myself referring to your account as SME in this field (OSINT + AI) and gatekeeping it won’t help. So, making this account visible is crucial for the growth of this field.

AI use case

The reason why I started reading up on AI stuff is, I have a problem and I think AI able to solve my problem:

Update v4 (Malaysian OSINT resource list) — PSE and Dorking | by finx | Apr, 2026 | Medium

Remember last update? We have build a PSE for staff directory. This got me thinking, what if we make an AI that can scan select sum of site and enrich the output.

Now, you realize: hold on, in this diagram you put RAG?

What is RAG🧐?

RAG or Retrieval-Augmented Generation (RAG) is basically a way to make AI instead of referring their old training dataset, we give external sources like (database or documents) for them to add with AI capabilities.

In this context, since I have the list of websites already, might as well I use those as the external source and get any AI to enrich the search.

Make sense right?

But as I learned: implementing it is tougher than I anticipated.

The idea is straight forward as is but to find a way to build RAG that:

1. Use the select sum of sites to gather the data
2. Able to be shared globally
3. Able to withhold heavy usage
4. Less setup overhead on my end (no payment preferably)

I have better shot spotting a unicorn rather than having all these checkmarks fulfilled😵‍💫

But I have a Proof of Concept:

Uni Staff Searcher Test | finxy’s first studio

Granted this is only for one site: Chemical Sciences Program Lecturer — FAKULTI SAINS DAN SEKITARAN MARIN

Now, you ask: how? How do I do this:

Short story: I opened the website, create an agent and put the site as the sole knowledge base

Long story: just read this: Pickaxe User Manual: How to do everything in Pickaxe | Pickaxe Blog

Now, the limitation:

As you can see, PoC only done with one site and one query. Even then, the cost is something else.

To scale this operation is a nightmare, so: back to square one.

With this, I end this update.

Thank you for reading

Disclaimer: this is a point of reference for yours truly (not free from mistake), feel free to inform me if any mistake you see.

If anyone asks me: finx, what is the main core of your current work (SOC L1)?

I will say confidently: Templates

Now you ask: hey, what’s template that you meant here?

To recap: L1 SOC analyst job to turn data -> information -> intelligence.

Simple terms: You’re the human to turn alerts into something actionable for SOC, either you escalate for incident, raise for misconfiguration, notify of kbp and even closing it as failed attack or even resolved (I will explain each and everyone of the state later in the blog)

There’s this quote from Navy SEAL: “Under pressure, you don’t rise to the occasion. You sink to the level of your training.”

So, for L1 SOC Analyst, in tough times, you will sink to your template to organize data and do follow up actions

Clear template -> Easier to refer -> Smooth communication through your shiftmates and upper level.

Template Goal

What is the purpose of the templates?

Credit to SAT course by Kraven Security, it finally clicked to me. You are doing ACH under pressure

Analysis of competing hypothesis (ACH): You present multiple facts to support your hypothesis

[Analysis of competinng Hypothesis]



+--------------+----------------+----------+-----------------+---------------+------------------+--------------------+---------+
| Ticket Facts | Escalate to L2 | Resolved | False Positive  | Failed Attack | Misconfiguration | Known Bad Practice | Testing |
+--------------+----------------+----------+-----------------+---------------+------------------+--------------------+---------+
|              |                |          |                 |               |                  |                    |         |
|              |                |          |                 |               |                  |                    |         |
+--------------+----------------+----------+-----------------+---------------+------------------+--------------------+---------+




- Resolved (Everything that can be done have been done)
- Escalate to L2 (Either legit malicious threat or first time trigger, raise for further actions)
- False Positive (Alerts that is not malicious false flagged as malicious)
- Failed attack (Alert that looked like an attack but failed to do so)
- Misconfiguration (Other's people's issue that affected our parts)
- Known Bad Practice (User do not follow best practice)
- Testing (Security testing/assessments)

Note: everything is in your head, mind you ACH is an intensive process but ideally this is how you do your analysis, you gather facts to prove your hypothesis as fast as you can (sounds daunting but with enough time, you’ll get the flow)

Now your question: finx, how do I find the facts? This is where fundamentals of cybersecurity (what is stuff) and hands-on experience (how to find stuff) come in handy.

This is where your knowledge comes in handy, and this is where the science and art of investigation live. Analyst A and B could arrive at the same hypothesis with vastly different facts.

Plus, breaking through each type of threat and each use case is extensive (this is where those 1000+ pages SOC Analyst guide shine). Unfortunately, I can’t distill this part as clearly enough, you need to be in the line of fire to truly build your skills.

Template View

Now, with all the logic behind the way, how does a template look?

[Metadata]
- Case details 
.
.

[Analysis remark]
- Your analysis
.
.

Well, that looked very simple. It is because this is the skeleton of the template. The meat of the investigation, you need to put it in yourself since I cannot do it justice here, you actually need to be in the line of fire.

Couple of guidelines:

1. make sure you make everything in point form, easier to read
2. do not assume anything, write every step down since audit will come check and by the time they come, bam: you forgot the assumption which will bite you back. So, clear steps and write everything.
3. this is not a fixed template. You can fix/adjust according to the alert.
4. If you’re liaising with multi country team, please put time zone in your notes, save yourself the hassle.

I think that’s all from my end, thank you for reading this far.

Thank you, and have a good day ☺️

OSINT in Malaysia resources — Start.me

Seriously, I have reciepts to prove to you that the last update is 3 years ago:

Update v3 (Malaysian OSINT resource list) | by finx | Medium

3 years huh, if you’re wondering: hey, where does finx goes? Refer to here:

Life Update + 2 cents as SOC Analyst | by finx | Apr, 2026 | Medium

Why here, why now? Well..that’s a secret~ in due time I will tell😉.

But let me do one overdue update:

I check back the list after a while..and I can’t deny it any longer: the staff directory section is a mess.

Touch base: Staff Directory is a collection of staff contact compiled by a company (often public record — hence why it is OSINF)

Seriously, for a Google scrape job: it's a mess😵‍💫.

So, let’s clean this mess once and for all:

However, as you can see this is a big scope. There’s a lot of links😅.

This project will be done by phases, and I guess this blog is the first step.

The question is how? How do you make this mess be less annoying?

Lucky for you, we got Programmable Search Engine

Programmable Search Engine? what’s that??

The link: Programmable Search Engine by Google

Simply said: you can build a search engine searching only select sum of sites.

Now your question: why don’t you dork it? easier than..whatever this is.

To that I say: why don’t you use it in tandem? This PSE thingy is for optimization.

Let me explain core concept of this PSE thingy using an example:
Imagine Google results kind of like an ocean. You want a shrimp in that sea.

So, two methods here: you can pick a bucket and check shrimp from that bucket OR you can just search the shrimp in the ocean.

Programmable Search Engine: You scoop some water in your bucket and search for the shrimp

Dorking: Actually searching it at the open ocean

In this example, you see: Programmable Search Engine, you shrink down the search to make it more efficient. For our problem (Staff Directory), we have the sum of sites, just needed a place for anyone to search. You can Dorking, in fact I will show you method to do so if the Programmable Search Engine is not yielding what you want after the PSE setup (CTRL + f it if you want to skip the setup)

PSE setup

okay, let’s do the setup:

1. Setup the list of the sites that we want to search for (note: below is just uni staff directory, much leaner to do proof of concept).

[Uni directory list]
https://fssm.umt.edu.my/chemical-sciences-program-lecturer-2/
https://www.uim.edu.my/v4/about-uim-2/structure/directory
https://portal.utem.edu.my/oas/directory/stafsearch_SMSM.asp
https://cyberjaya.edu.my/university/staff/staff-directory
https://aviation.edu.my/staff-directory/
https://registrar.ums.edu.my/staffdirectory/web/public/index
https://www.iium.edu.my/directory/
https://library.oum.edu.my/oumlib/staff_directory
https://www.ukm.my/pusatsiswazah/staff-directory-2/
https://mitrans.uitm.edu.my/index.php/directory
https://hep.utem.edu.my/direktori-staf/
https://pppl.umt.edu.my/directori-staf/
https://konvokesyen.uitm.edu.my/v2/index.php/direktori
https://telefon.uthm.edu.my/
https://www.um.edu.my/list-staff.php?kodPTJ=GF&kodJAB=GF01
https://directory.usm.my/
https://direktori.unimap.edu.my/DIREKTORI/index.jsp?ABC=
https://www.utm.my/directory/
https://uitm.edu.my/en/discover-uitm/administration/office-directory
https://miat.unikl.edu.my/staff-directory/

2. Open Programmable Search Engine by Google

3. Put the name of our search engine

4. Input the sites that we want to search

5. Settle the remainder of the setup

note: if this is not enough, please refer to How to Build Your Own Search Engine: What You Need to Know

[The output]

The PSE link: Programmable Search Engine

[The backend]

And, that’s pretty much it for setup of Programmable Search Engine.

Dorking

What’s dorking? Basically: you make a query in Google to tailor what you need

Resources:
1) TryHackMe | Google Dorking (if you’re open to spend time learning)

2) Google dork cheatsheet (if you just want to use it ASAP)

3) Google Advanced Search (for anyone whom too lazy to learn about query language but wants the result)

Google Dorks to start: “staff directory” location:malaysia

With this, I add the CSE link to a pending section in the list since there are a lot more section to be done.

Again disclaimer: I am aware that the list I use is not expansive enough but due to limitation of Programmable Search Engine(50 domains), so I include dorking resources to help supplement your search.

So, in conclusion:

With this I end this update, thank you for reading this far.

Have a good day👋

Hey there,

It’s been a while since I update this blog: want to know where I have been?. FYI: I am not dying — I managed to snag a job as an L1 SOC analyst. Basically, foot soldier of the whole SOC operation. Sure, there are a lot of people give like 1000+ pages on how to be SOC analyst, I don’t want to do that. I just want to streamline em’. Somethings nobody really tell me about SOC analyst, so buckle up.

*peeking around* wait..you don’t know what SOC analyst do?

Basically, you monitor threats and alerts, write your analysis and do whatever action necessary or escalate if needed. That’s pretty much it

And if you’re asking: hey what SOC have to do with OSINT? I mean we do use tools like Mxtoolbox, Virustotal in our daily rotation..but for me, it is more so the way you approach a ticket:

You see, to write a proper analysis in a compressed time: you need data > information > intel

Data:

You gather the details related to the detection

Information:

You arrange the details and put it in a clean table

Intel:

You answer 5w 1h and see if needed any action or you can close

[Note: it might sound easy now but when stress comes in and you’re panicking, oh boy every structure left the building so this is a reminder to yours truly also]

The bottom line is this: gathering data is like 1/3 of the job. So, OSINT is notorious for being tool graveyard, always was always has been, like: remember twitter open API that got paywalled suddenly? Basically, world is moving and stuff happened plus, having like 100+ link tools makes you like a dragon hoarding gold~ Nice to look at but useless nonetheless. Context matters, otherwise: you just doing OSINF (open source info) rather than OSINT (open source intel).

For a fresh grad, you forced to actually be clean and concise with your analysis since messy analysis makes more not smooth communication, which is again, the whole point of SOC, you communicate through the chain to remediate issues. Two things: you won’t work in silo since you see the chain IRL and you learn to verbalize what you gathered which is a gem

Confident you will do the job well? (Spoilers, you will do well, confirm: the whole SOC wants you to do well)

Now, let me give my two cents, things that you need to have in your mind before getting in the SOC battlefield:

1) SOC analyst learning curve is fast

As my manager said, you will be drinking from the firehose. Still am ngl. So, learning stuff is non-negotiable. Seriously, you need to update stuff a lot or your analysis will suffer

2) SOC job is repetitive

This job ain’t sexy, 12 hr shift where ya bored to death or pressed for incident, nothing in between so prepare yourself

3) Take care of yourself

Cont. From last point, please find a coping mechanism or at least find a way to maintain yourself, 12 hr shift tend to unravel you if you don’t have any coping mechanism, you will be burned out faster than a short candle

I sincerely hope the best for all the new padawans who willing to walk in SOC battlefields. Onwards you go~

Yes, you’re reading this right.

I am deleting the Malaysian Cyber Threat Landscape List off the startme list.

Why you ask? I have finally found an account that perfectly answer my initial problem statement that I put in the previous update :

Within the process of finding the additions, I thought why ASEAN/Malaysia dosen’t have some sort of newsletter about national cyber threat ala Cyber Daily News/CyberWire or threat intel company providing IOC on local threats ala Group IB Threat Intel?

It is useless to keep this list otherwise.

Anyways, here is the account that I mentioned:

• Rectifyq

This account has posted Malaysian based cyber threat articles, built diamond model for the articles and curate data breach news. This account has produced a lot of quality content to the point that I felt guilty retweeting almost all of this account content without any credit upon the account’s owner. If you’re reading this then please know that you’ve done an excellent job curating articles and built diamond model for the articles. Looking forward for your content.

[Social media to follow]

X(twitter): https://x.com/_rectifyq

LinkedIn: https://x.com/_rectifyq

Next section

I have built a gitbook page to give a more intuitive classification to my medium page (let’s face it, this place is a mess. I need to do major clean up for this page) and archive my blogger pages from 2021 for self record.

The link: https://finx-faris-s-organization.gitbook.io/finx-logs

That’s all from my end.

Thank you for reading.