When you say "exchange" of information, do you mean something more
oriented towards 'original' research -- however that would be defined --
which would be the forensic equivalent of the content we see in the
vuln-dev lists?
I have two projects that I've roughed out in outline form, and I need to
make sure that I'm not reinventing the wheel. I'd also like to get some
feedback regarding their feasibility, and a critical evaluation as to
how much value the finished projects would actually provide to the
community. In turn, if others have related projects that fall in areas
where I have some useful experience, I'd offer the same.
I'm not an academic, so my work is on my own dime, and unfortunately
can't name a group that I feel I could engage for this type of
interaction. The available resources that we have are great, and I'm
thankful to see the awareness of the field continue to grow, but this is
an area that isn't adequately addressed.
I'm not sure if I'm interpreting the question in the way you meant it,
but this is the chord that it struck with me.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jeff Reava
Pfizer gSecurity Senior Analyst - Kalamazoo
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Hey, all,
I'm looking for a forensics community resource (forum, webboard, etc)
that's about the *exchange* of information. I was wondering if anyone
on >the list could make a recommendation.
What I'm looking for is a resource dedicated to the exchange of
information, where discussions are kept on track and on topic by the
folks >involved, and where original content is exchanged, discussed,
etc. Most of >the resources I'm currently familiar with have little in
the way of >original content, and most of the content that is available
is people >looking for information on how to get started in "the field".
Input and comments are appreciated. Thanks.
H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
