I updated the dfir.training RSS feeds and in doing so, discovered what I liked and didn't like about DFIR blogs (including the dfir.training blog...). It was a learning experience and here are the top 5 ways that will make your blog lonely on the Internet.
1. Don’t post anything for months (better yet, make it years).
I noticed that many blogs aren’t up dated for months or even years. I don’t see folks visiting outdated blogs more than once since the content never changes. That is just the way it is; websites die eventually. Keeping them online is still appreciated since some things in DFIR never change, or need to be revisited.
2. Don’t allow anyone to put your blog in their RSS feed reader.
Many blogs did not have a RSS feed link on the blog, and if I had to spend more than a few seconds to check if a RSS reader could come up with a feed, I moved on without that blog being listed on dfir.training. When there are hundreds of DFIR/infosec blogs , there is not enough time to force a website without a RSS link into a RSS reader when others work.
3. Use pop-ups.
After clicking hundreds of blog links, besides a few having music playing on page load, the popups got me totally annoyed. I understand the ‘why’ of popups, but talk about a turn-off…as for the music that auto-plays on page load, there is a special place for those who do that…
4. Don’t have dates on your blog posts.
In DFIR work, dates are important. In the DFIR blog world, dates on blog posts are also important. Fishing through a blog to find how old or new the information is should not take longer than seeing the date somewhere near the title. Having to read a blog post and guess the date by the content of the blog totally ruins reading the blog as soon as you find that the blog is a year or more without an update. Personally, I want to read blog posts the same day it is written (ergo, the RSS feeds are on dfir.training so I can catch them same day of posting).
5. Don’t have any social media presence, and if you do, don’t link the accounts on your blog.
And about social media. If your blog is well-liked, that means people (like me) probably want to follow your social media accounts too. But when it’s not on the website anywhere, I’m assuming you don’t want to be followed because trying to find the one Twitter account for a blogger who doesn’t give a full name on the website is way too much time. Just put a link on it ?
If you write and don’t see your blog showing up on the feeds, send me an email. Either (1) I overlooked your blog , (2) you don’t have a RSS for your blog , or (3) I couldn’t find the RSS or get it to work . But now you can enjoy the fruits of the DFIR RSS search labor at dfir.training. The RSS feeds are updated and maximized for speed. The prior RSS feed setup tended to cause the site to slow when pulling the feeds. Now, it’s practically instant and updated more often, usually within the hour the feeds are updated.