“If you don't have time to read, you don't have the time (or the tools) to write. Simple as that.” – Stephen King

The DFIR Book Share Challenge (I made that up by the way, but it works for me)

First, hats off to those authors contributing their books to the DFIR Book Share Challenge and participating in this endeavor.

And just as important, thanks to the winners of the books who are fulfilling the challenge of passing the books along after reading them. My high hope is to create positive communications in our community with the books, in that we have a chance to be in the path of where the books will travel; in that we can talk about the content of the books in a manner to share information; and in that we can talk to each other as we hand off the book from one person to another.  Sign up to win a book here:  https://www.social.dfir.training/groups/viewgroup/3-dfir-book-giveaways  

So far, I have shipped out three books in October ( Investigating

Read more

Publishing or Perishing in the DFIR world

Following up on a forensic artifact project database idea , the end result is that the idea is dead before it started.

The twitter poll (one of the most unscientific, but easiest polls to do) didn’t show a lot of promise. Also, there were a LOT of DMs and email discussions.  Thanks to everyone giving me their thoughts. 

Here are the main points that I received, summarized in three statements:

-Publishing research must be in academia (journals)

-Publishing research must be in books (publishers)

-We don’t need project management in research

On top of these points, the fear of lack of contributors holds me back.  According to the Twitter poll, less than

Read more