Today I have the great pleasure of announcing a partnership that has formed between Devon Ackerman and myself. Devon had been sharing a DFIR resource that was similar to my Threat Intel list but we have now merged those two projects into one bigger and better repository that we host at AboutDFIR.com!
Our merger is still a work in progress so if you don't see a familiar data set, it's probably because we haven't quite ported everything over yet. One of our goals is to offer continuous, timely and meaningful resources, in a very easy to use format and in one central repository.
I'd like to thank a few people who have been silent cheerleaders during this transition period, offering their support, wisdom, and in some cases their own resources. David Cowen, who took a big chunk of his very valuable time to answer several questions and offer guidance. Josh Sutfin, who offered valuable data which we will look forward to adding as time allows. Matt Bromiley, Harlan Carvey, Phill Moore, and Andreas Sfakianakis, each industry rockstars in their own right, have been so kind to mention my research.
Last but certainly not least, I'd like to thank Devon. Devon quickly became a friend, and when I would get really stressed about the added pressure of a project of this magnitude on top of a full-time job and raising two children (which is another FT job LOL!), he would simply remind me that this was a hobby, and something that we chose to do because it was fun, so no angina allowed!
One more thing, if you're reading this and you are new to the field of DFIR, Threat Intelligence, Malware Analysis/Research or perhaps deciding whether or not to pursue a career in Information Security, I hope you will find our new shared resource DFIR - The Definitive Compendium Project helpful. There is real community in Security, and one of our goals is to shine a light on that. Enjoy!