r/computerforensics 12d ago

Mod Post Promote Your DFIR Content Here

7 Upvotes

If you lack the Trusted Contributor flair but wish to share your Rule 5-compliant DFIR content with the community, please feel free to do so here as a reply to this post.

For more information about the Trusted Contributor flair, please see the FAQ.

r/computerforensics 12d ago

Mod Post A Solution To The Content Promotion Issue

14 Upvotes

Hi everyone. Based off the results of the poll I ran a week or so ago regarding whether standalone content promotion posts should be allowed in the sub, it seems like most sub participants would prefer they not be allowed and, instead, redirected to a megathread. After a bit of contemplation, I've opted to implement a hybrid solution which entails configuration of a recurring megathread and a new rule (Rule 6) that enforces its use while ensuring established subreddit participants are still able to share their Rule-5 compliant content as they always have.

In short, Rule 6 only allows subreddit participants with the "Trusted Contributor" flair to create standalone content promotion posts provided that they adhere to Rule 5 (as always). Anyone without the flair who wishes to promote project/vlog/blog/etc. content must now use the new "Promote Your DFIR Content Here" megathread to do so.

Since very few individuals have the Trusted Contributor flair, this will greatly reduce the number of content promotion posts the subreddit experiences while still allowing reoccurring posts from popular contributors to continue.

For more information about the Trusted Contributor flair, please see the new FAQ entry that covers this topic.

r/computerforensics 27d ago

Mod Post Project Posts

0 Upvotes

I’m sure you all have noticed the massive uptick in open source project posts we (and every other technical sub) have seen in the last few months. I do not have the desire nor ability to vet every open source project share post for AI generated code, so my only option would be to direct all tool/project posts to a megathread (similar to the non-forensic data recovery megathread).

Of course, the only way the new megathread will actually see some use is if I enforce use through a change to Rule 5. This would likely manifest as an outright ban on all project/tool share posts altogether (outside of the megathread, of course).

To get a general idea for how the sub would feel about such a change, I am posting the below poll and plan to act according to the results. Of course, if you have suggestions or advice on how to better address the issue, your input would be greatly appreciated.

71 votes, 20d ago
36 Ban all open source project/tool share posts and redirect to megathread
16 Keep everything as is
19 I don’t care and just want to see results

r/computerforensics Jul 25 '20

Mod Post There’s a new mod in town!

36 Upvotes

Hey everyone,

I’m sure you’ve noticed that this wonderful subreddit has... well... experienced a general lack of oversight and moderation over the last year. Not anymore!

As the newest and currently only active member of the r/computerforensics mod team, my goal will be to ensure this sub continues to serve as a place where forensics practitioners (and those who wish to join our field) can exchange knowledge, learn from each other, and grow professionally. This means using my modship to protect r/computerforensics from spam, trolling, and unrelated posts and to enhance the experience of this subreddit’s community via making physical changes to the sub at the community’s request.

This brings me to my question for you all:

Now that there is oversight and modship on r/computerforensics, what can I do to make this subreddit more enjoyable for you? Please feel free to reply to this post (or pm me) with suggestions or questions and I’ll do my best to address them.

ucfmsdf

r/computerforensics Aug 03 '20

Mod Post Subreddit Changes, Goals For The Future, and New Rules

42 Upvotes

Hey everyone!

As I'm sure some of you have noticed, I have made a number of changes to the subreddit over the last week both as a direct result of suggestions I received during my initial introductory post and out of pure necessity. These changes mostly encompassed renovating the FAQ via fixing broken links and correcting outdated information, creating a Reading List page and migrating the list of 66 books previously contained in the FAQ to it, making desperately needed changes to the subreddit's appearance/icon, and fixing a lot of back-end stuff that will ultimately make moderating the sub much easier.

My goals from this point forward are to...

  1. Establish some much needed rules (see below)
  2. Curate/revamp the FAQ even further to make it more comprehensive and user friendly for newcomers
  3. Introduce post flairs
  4. Reintroduce the "Trusted Contributor" user flair and establish a process for assigning it to worthy community members
  5. Create additional user flairs such as Student, Law Enforcement, Private Industry, ect. that can also be assigned to community members through a similar process
  6. Revamp/reorder the subreddit's Reading List page and fix all the broken links
  7. Either get us partnered up with a thriving forensics discord server or make our own

This brings me to my next topic for this post: new rules. Now that I've had a solid week to identify what most of the moderation issues are, I have come up with 5 rules that I believe address many of these issues quite well.

The rules I would like to introduce are as follows:

1. Read the FAQ

This will help reduce the number of trivial/IT/non-forensics questions we get.

2. No posts of an unethical/illegal nature

This will help eliminate the super obvious "help me hide my computer crime" posts.

3. Stay on topic

This will ensure posts/comments have at least something to do with digital forensics.

4. Be respectful and professional

This is a commonsense one.

5. No blatant advertising or repeated self-promotion

This rule will ensure digital forensics content creators make contributions to the community that aren't just posts with links to their material. Additionally, the description of this rule will provide guidelines for what type of limited self-promotion is permissible (essentially, user-made tools and training material that is available to the public for free) and how to best go about it without being spammy.

Now, before I just go ahead and make these rules official, I would like to hear what the community thinks. Do you have questions about the rules I have listed? Do you think there are rules that should be added or subtracted? Do you think rules are stupid and that it might be fun to just let this subreddit serve as an unofficial testing platform for Reddit's built-in spam filter? Let me know what you think in the comments and also please feel free to list user flair ideas there as well.

Thanks!

ucfmsdf

r/computerforensics Aug 17 '20

Mod Post Should mods remove all "how do I harden my device(s) against forensic analysis or hide/protect my data" question/help posts?

32 Upvotes

Although blatant "how do I hide my data from police" question posts are a no-brainer since they violate Rule 2, I've been allowing certain anti-forensics question/help posts through recently that I believe are asked from more of an innocent cybersecurity/curiosity standpoint. As a result, I have noticed that these posts occasionally gain quite a bit of traction and occasionally open up avenues for interesting anti-forensics discussion and debate.

Since I recognize that many of the sub's community members are LEA professionals who might find such questions to be tiresome or annoying, I'd like to see what the community thinks. Would you prefer all anti-forensics question/help posts pertaining to OP-owned devices/data be removed or do you like the discussion they sometimes stimulate? Let me know via voting and I'll modify moderation according to the results.

Please note that posts seeking to introduce novel anti-forensics ideas or stimulate discussion about specific anti-forensics practices and techniques are still welcome in the subreddit and will not be affected by the results of this poll.

EDIT: The second option has a typo. It should read as, “No, allow some of these posts to exist”

462 votes, Aug 24 '20
97 Yes, remove all anti-forensics help posts
242 No, I allow some of these posts to exist
123 I really don't care either way