CF/IR magazine or blog

Greetings,

A friend of mine blogs on pen-testing here

http//blog.clearnetsec.com/

THe "Security Monkey" blogs on computer forensics here

http//blogs.ittoolbox.com/security/investigator/

Jamie's blog is on this forum's site.

I'd love to find others….

-David

David,

Thanks for the reply.

A friend of mine blogs on pen-testing here

http//blog.clearnetsec.com/

Okay, not IR/CF, but okay…thanks.

THe "Security Monkey" blogs on computer forensics here

http//blogs.ittoolbox.com/security/investigator/

Jamie's blog is on this forum's site.

I'd love to find others….

Besides my own (http//windowsir.blogspot.com) I know of a couple of others.

The next thing I'd like to know is

1. What do folks look for in a blog that deals with incident response and computer forensics? Or maybe a better question is…do you look for such things?

2. Is there any interest in (reading, as well as contributing to) an IR/CF e-zine similar to Security Horizon or Hackin9, or something like 2600?

H

Greetings,

I do look for good blogs, on many subjects, and generally find them wanting. Here are some reasons

1) Often, the blog is a paragraph or two of "what if" and "isn't it interesting" material with no depth. It might spark my interest, but I'll end up learning about the subject in depth elsewhere.

2) Blogs that depend on too many other links to get the point across drive me crazy. I know, linking to other blogs is part of the trick to drive traffic, but I really want to read most of the material in one shot without clicking and context switching.

Some friends and my marketing guy have been encouraging me to blog and I've been putting it off due to, oh, lack of time, lack of material, lack of a good place to put it. If it was done in conjunction with other people and provided some opportunity for peer review and bouncing ideas around, I'd be interested in contributing.

-David

Greetings,

A good format for a collaborative blog might be the Radar O'Reilly site

http//radar.oreilly.com/

-David

Hi Harlan,

most of the IR/CF blogs I read are listed on your side.
I have three on my igoogle side, that is yours, that of andreas schuster and the taosecurity blog.

I always look for new experiences in the field of IR/CF, things like memory analysis.

I think an e-zine would be a great thing.

Timo

David,

I do look for good blogs, on many subjects, and generally find them wanting. Here are some reasons

1) Often, the blog is a paragraph or two of "what if" and "isn't it interesting" material with no depth. It might spark my interest, but I'll end up learning about the subject in depth elsewhere.

Just out of curiosity, do you ever contact the author(s) and ask questions, or express what you've listed above? I ask, as I often find myself in the same position, looking for greater detail. Sometimes asking evokes a response with greater detail, and sometimes I end up doing it myself.

2) Blogs that depend on too many other links to get the point across drive me crazy. I know, linking to other blogs is part of the trick to drive traffic, but I really want to read most of the material in one shot without clicking and context switching.

Some friends and my marketing guy have been encouraging me to blog and I've been putting it off due to, oh, lack of time, lack of material, lack of a good place to put it. If it was done in conjunction with other people and provided some opportunity for peer review and bouncing ideas around, I'd be interested in contributing.

Well, there are plenty of sites available for that…the current site included…

Thanks,

Harlan

Greetings,

Yes, I do write to them at times. Often, though, I find forums such as this to be better for the give-and-take discussion.

Finding a place to put the blog was pretty low priority. Deciding to write enough material to justify putting it somewhere is my first challenge. There are a lot of blogs out there that started off strong and simply faded away. Not quite the message I want to put out for my clients….

-David

Interesting…79 views and only two people responded.

David, thanks for your responses. I've been trying to determine what folks want to see, who wants to contribute, etc. Maybe we'll just have to wait a bit longer and see…

H;

Give these links a look-see. I'm not sure if they have what you want, as they are mainly a catalog of "events," but they are extensive

Incident Year in Review (1995 - June 2006)

Incident Year in Review (through 05/2007)

Dr. Mich Kabay, the editor of these lists, was looking for a research assistant to continue the work (which has REALLY become a huge endeavor) as of this past Spring. AFAIK he's still looking….

-AWT