digital-forensics-discord-server / thehitchhikersguidetodfirexperiencesfrombeginnersandexperts Goto Github PK

Author: Nisarg12

CrowdsourcedDFIRBook is not a great title :) Anyone have any ideas?

EDIT: 5/26/2022

Go here for a link to first round of voting: #4 (comment)

Write a chapter providing a methodology to attack unsupported artifacts. The process to be described covers the following topics:

• Introduction to the methodology
• Discover
• Test
• Find
• Parse
• Share

DeeFIR

Things to discuss:

• Beginnings in IRC
• Move to Discord
• Mobile Forensics Discord Server -> Digital Forensics Discord Server
• Member growth
• Hosting the Magnet Virtual Summit 2020
• Community engagement within the server
• Impact on the DFIR community
• Future

Markdown Preview: https://github.com/Digital-Forensics-Discord-Server/CrowdsourcedDFIRBook/blob/main/manuscript/chapter1.md
For Leanpub: https://github.com/Digital-Forensics-Discord-Server/CrowdsourcedDFIRBook/blob/main/manuscript/chapter1.txt

https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/blob/main/manuscript/chapterL.txt

Here you go, enjoy!

If any chapter points to an external URL for an image, we need to save a copy of the image and host it in the repo. If the site hosting the image breaks, we can't generate a new version of the book until that's fixed.

I like what @jdwilkins75 did with including a link to his Twitter so people can follow him. Same with the online presence added by @abrignoni in his section. I also like how @jijames and I have images on the first page of our respective chapters. I feel like we should have some sort of standardized first page for each chapter, especially given that this book is not written by one person. Each chapter is its own entity from the other parts of the book, if that makes sense.

Loosely thinking something like this

Chapter Name Goes Here

[text](image_filename.jpg)

By: FirstName LastName

**something should go here for Twitter or whatever preferred social media presence**

Anything more? Anything less? Anything different? Let me know your thoughts!

All discussion about what kind of graphic should go on the cover should occur here.

Feedback from a reader:

"The images in Chapter 2, Pages between 29 to 35 and pages 56 to 59 are the ones."

Fierry137

Some ideas:

• NCMEC
• IWF

81 total

Credit to DigitalFerret (Mod)

Law Enforcement [Argentina]	 		9
Law Enforcement [Albania]			2
Law Enforcement [Australia]			97
Law Enforcement [Austria]			27
Law Enforcement [Bangladesh]		2
Law Enforcement [Belgium]			76
Law Enforcement [Bosnia]			2
Law Enforcement [Brazil]			35
Law Enforcement [Canada]			270
Law Enforcement [Chile]				2
Law Enforcement [China]				2
Law Enforcement [Colombia]			3
Law Enforcement [Croatia]			2
Law Enforcement [Cyprus]			1
Law Enforcement [Czech Republi		5
Law Enforcement [Denmark]			43
Law Enforcement [Dominican Re.		2
Law Enforcement [Estonia]			7
Law Enforcement [Europe]			13
Law Enforcement [Finland]			16
Law Enforcement [France]			144
Law Enforcement [Germany]			246
Law Enforcement [Greece]			16
Law Enforcement [Grenada]			1
Law Enforcement [Iceland]			3
Law Enforcement [India]				37
Law Enforcement [Indonesia]			13
Law Enforcement [Iran]				2
Law Enforcement [Iraq]				1
Law Enforcement [Ireland]			47
Law Enforcement [Israel]			23
Law Enforcement [Italy]				32
Law Enforcement [Jamaica]			8
Law Enforcement [Japan]				3
Law Enforcement [Korea]				6
Law Enforcement [Kuwait]			1
Law Enforcement [Latvia]			8
Law Enforcement [Lebanon]			2
Law Enforcement [Liechtenstein]		1
Law Enforcement [Lithuania]			9
Law Enforcement [Luxembourg]		5
Law Enforcement [Maldives]			5
Law Enforcement [Malaysia]			2
Law Enforcement [Malta]				3
Law Enforcement [Mongolia]			2
Law Enforcement [Mauritius]			1
Law Enforcement [Mexico]			2
Law Enforcement [Monaco]			1
Law Enforcement [Myanmar]			3
Law Enforcement [Nepal]				1
Law Enforcement [Netherlands]		150
Law Enforcement [New Zealand]		19
Law Enforcement [Nigeria]			2
Law Enforcement [Norway]			111
Law Enforcement [Pakistan]			6
Law Enforcement [Peru]				1
Law Enforcement [Philippines]		2
Law Enforcement [Poland]			30
Law Enforcement [Portugal]			30
Law Enforcement [Romania]			79
Law Enforcement [Royal Cayman...	3
Law Enforcement [Russia]			2
Law Enforcement [Saudi Arabia]		1
Law Enforcement [Senegal]			2
Law Enforcement [Serbia]			1
Law Enforcement [Seychelles]		1
Law Enforcement [Singapore]			22
Law Enforcement [Slovakia]			6
Law Enforcement [Slovenia]			3
Law Enforcement [Spain]				13
Law Enforcement [Sweden]			205
Law Enforcement [Switzerland]		70
Law Enforcement [Taiwan]			4
Law Enforcement [ Tûrkiye]			5
Law Enforcement [UAE]				10
Law Enforcement [UK]				719
Law Enforcement [Ukraine]			8
Law Enforcement [UN]				3
Law Enforcement [Uruguay]			2
Law Enforcement [USA]				1799
Law Enforcement [Vietnam]	 		5

Looking at the latest PDF preview, I think we're going to want to spruce up the section dividers. If @stark4n6 or anyone else has any ideas for a simple graphic to fill in these pages (see below for examples), please let me know!

So far we have the following sections:

1. General
2. Mobile Forensics
3. Computer Forensics

Probably one, MAYBE two more sections TBD as more chapters are completed and we figure out which ones are going to be published at the time of publication.

@FullTang passed this on to me that he saw in another book. Maybe we could modify this and stick it somewhere, if we so choose?

“Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.”

Thoughts? Any feedback is appreciated. If we deem it not much of a value add, then we can simply scrap the idea.

bgrundy (LinuxLEO)'s chapter

Chapter by Jason Wilkins

• Change author subheadings from ## to ### - 34da71a
• remove : from Chapter 4's subheadings - c832a4f
• add status of 2022 Forensic 4:cast Awards - e0c85c6
• Add mention of https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/graphs/contributors so smaller contributions can be recognized - EDIT: this is done - 476a0cb
• Added recent contributors to Contributors section - 3d29e14 and d447094
• At least one new chapter - https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/blob/main/manuscript/chapter11.txt
• Add Disclaimer - #159
• Add link to 2022 Forensic 4:cast Awards when it goes live - TBD, may have to wait for v1.2

This list will be added to as time goes on!

i.e., chapter5.txt has references to ![](Ch8/chapter8001.jpg), because it was likely the 8th chapter that was promised, but it was the 5th chapter finished, so the numbers never got "re-aligned", for lack of a better word.

And now, chapter4.txt has references to Ch5\1.png, so I can't rename the folder currently assigned to chapter5.txt to Ch5 because chapter4.txt is currently pointing to Ch5 😆 it's a bit of a mess, but right now "it works", it's just not pretty, but there's a reason for it being this way, but that doesn't mean it needs to stay this way.

The way the chapters are named now (chapter1, chapter2, etc) should align with the resources\ChX folder name, with preference for using the chapter's filename as the guiding light for what the resources folder should be named, aka let's not rename chapter manuscripts, just rename folders where the images currently reside, then replace the references within each chapter. This keeps the order of the book unchanged, whereas if we keep the names of the folders holding the images, then we're reshuffling the order of the book, which doesn't seem ideal.

Reminder for myself to close issues as they're published next week for V1.

Whether going it on your own or growing a consultancy firm, there are decisions to be made about process and the business side of things. This chapter will raise some of these considerations, and it will present tips and solutions along with pros and cons. No legal advice here other than to have an attorney who understands your business draft your agreements.

Example topics:

• Charging for projects (buckets of hrs; fixed pricing; hourly; rate by task or personnel skill level; retainers);
• Retention of evidence (options for storing evidence for customers when a case is ongoing; charge fees? return or destroy?
• Notetaking/documentation/communication/ways to securely deliver productions to clients; (tip: I always TreeSize any drive I send out to a client).
• Working with partners (referral fees/subcontracting/being a sub)
• Testifying and report writing
• Marketing/Brand

Markdown files are only there for the author's benefit to instantly visualize what their chapter should look like.

If you've touched this book in any way and want to be listed as a contributor/author on GitHub based on the nature of your contributions to the book, please make a Leanpub account and message me on Discord with the email account associated with your Leanpub account. I will then invite you to the book as either an Author or a Contributor based on what's most appropriate. Generally speaking, if you have a chapter assigned to you that you authored, you'll be listed as an Author. If you've peer reviewed, edited, or otherwise helped with anything that doesn't include writing a chapter, you'll be considered a Contributor.

Here's what we're working with on Leanpub for when the book goes live.

LE [Peru] was just added tonight as a role, so that's yet another country to add to the list!

Create a page that includes a picture of the award and dedication to the coauthors.

We'll use this issue to discuss the order of the chapters once enough chapters have commitments from authors.

Even though I am assigning this to myself, I welcome all input from the community.

• Purpose of this book
• Setting expectations for what the book is meant to be
• How this book came to be

Any author/contributor/editor/what have you who wants their name attached to the ISBN number, please contact me with the appropriate information so I can associate you with these ISBN numbers officially.

Hey folks, I just took a look at the book repo and I see there tends to be links inside these. As we contribute more contents, more links are going to come in. There’s one technique called markdown link checker with GitHub actions I employed in my one of my own repos to identify dead links. Please let me know if you think this is a good idea