Hi, minions:
I've been pretty disconnected for a while. There have been several reasons, both personal and professional, that have brought me back to this moment of absence. This is not a good time for me. These are not good times at all. In part, it's impostor syndrome stuff, things from my own handicaps, many of them generated by myself. Maybe that's why I also have to admit that what happened with the last article I published affected me a lot. I don't like bad situations, with nobody. I hate bad experiences, bad interpretations. But you learn from everything. After all,
It is clear that such situations occur very often on Social Networks and it is clear that some people put up with it better than others. For me it has been a complete disappointment. Really, this has been my first time with that experience. But I think it indicates that I try to comply with a famous quote that says:
A million thanks for that nomination and for giving me that moral injection, so necessary!
And now... I'm going to expose my nominations! As they say in these cases, it has not been easy to make a decision. The DFIR Industry is very large, with many and very good resources.
I've been pretty disconnected for a while. There have been several reasons, both personal and professional, that have brought me back to this moment of absence. This is not a good time for me. These are not good times at all. In part, it's impostor syndrome stuff, things from my own handicaps, many of them generated by myself. Maybe that's why I also have to admit that what happened with the last article I published affected me a lot. I don't like bad situations, with nobody. I hate bad experiences, bad interpretations. But you learn from everything. After all,
We are human and we are imperfect.After reading a fantastic article written by Brett Shavers, I think I should have stopped to think a little more and not publish mine. Have a bit of a 'cool mind', let it go, try to find another way to clarify some of the issues that occurred during those conversations, or just ignore it. But sometimes I can't, because I hate disrespect and hatred that is done to other people.
It is clear that such situations occur very often on Social Networks and it is clear that some people put up with it better than others. For me it has been a complete disappointment. Really, this has been my first time with that experience. But I think it indicates that I try to comply with a famous quote that says:
Stop arguing about what a good man is; be one.On the other hand, I recently came across the opposite side of the coin. And, from here, I would like to dedicate these brief lines to publicly thank the CyberForensicator team (Igor Mikhaylov and Oleg Skulkin), who have nominated me as "DFIR Newcomer of the Year" in the Forensic 4:cast 2019 awards. Sincerely, I have no words of gratitude for this nomination. It's not something I've been waiting for or desperately looking for. I did not aspire, nor do I aspire, for anyone to nominate me for these awards, or any others. But the simple fact that someone mentions me, the simple fact that someone values my small contribution to the DFIR Community, gives me a tremendous moral boost to move forward in this exciting field. After all, I'm just curious about it :)
And now... I'm going to expose my nominations! As they say in these cases, it has not been easy to make a decision. The DFIR Industry is very large, with many and very good resources.
DFIR Commercial Tool of the Year
There aren't many commercial tools I've been able to test, with full functionality, but Magnet Axiom is one of them and I consider it to be in constant evolution and the Community participates in it, through the 'Magnet Forensics Artifact Exchange'.DFIR Non-commercial Tool of the Year
I can say that I know many non-commercial tools, (not all). After all, I try to test everything I read about these tools. I think Eric Zimmerman's toolkit is a must-have arsenal for any analyst. I think he's doing an impeccable job of developing it, creating new tools and making frequent updates.DFIR Show of the Year
I think David Cowen's 'Forensic Lunch' channel is a very good show, where you can find tutorials on forensic methods, tool reviews, interviews and collaborations with other great experts in the field. All this, in video and once a week.
DFIR Blog of the Year
In this category I have chosen 'Cyber Forensicator'. I think it is a Blog that can not miss in our favorites, both by the excellent healing of content by Igor Mikhaylov and Oleg Skulkin, and by the publications themselves.
DFIR Book of the Year
I think Harlan Carvey has done an excellent job publishing the book 'Investigating Windows Systems'. Throughout its 5 chapters, Harlan exposes the content very well. Very good reviews have been written on the DFIR Training site and the Computer Forensics World site.
DFIR Article of the Year
This has undoubtedly been the most difficult decision to make. I didn't know whether to choose a technical article or a non-technical article. In the end, I chose to choose an article by Gabriele Zambelli, entitled "What was my IP? Ask DoSvc on Windows 10". Not in vain, has been recently validated and published on the site of DFIR Review.
DFIR Social Media Contributor of the Year
For this category my vote had to go, yes or yes for Brett Shavers. He does a job worthy of admiration, both in his personal Blog, where he exposes a DFIR philosophy to which I give a lot of value, and in the DFIR Training site, where he does an immense job, sharing and updating all the resources on DFIR that are published over time.
DFIR Degree Program or Training Class of the Year
I'd love to say I've taken great certifications, but I'd be lying. I consider myself a self-taught person. In fact, I've only taken a couple of courses this year. I must say that after publishing the first article I wrote in this Blog, Brett Shavers had the courtesy to invite me to take the 'Placing the Suspect Behind the Keyboard' course, offered by himself, at DFIR Training, and I was amazed at how he exposes each lesson, at the ease with which he explains the course material.
Most Valuable Threat Intel Contribution
I think Adam always contributes in this field, helping the DFIR Community with constant publications, both on Twitter and on the Hexacorn Blog.
DFIR Groundbreaking Research of the Year
I think Maxim Suhanov has done and is doing an incredible job of researching the NTFS file system on his personal blog.
DFIR Newcomer of the Year
I'd be lying if I said I wouldn't look forward to this award. (Although I don't have that kind of aspirations). Those of you who know me, know how I am and know that I don't like to ask anyone for anything (it's the other way around). So, and since some people have valued my small contributions, you could nominate me for this award, but only if you really think I deserve it.
DFIR Resource of the Year
I think Phill Moore is the ideal candidate for this category, as the work he does with the weekly publication of This week in 4n6 is simply magnificent, with excellent content healing. It is a resource that must be open in all browsers.
DFIR Team of the Year
I think the About DFIR team, led by Devon Ackerman, deserves to be in this category because they do a lot of work, offering education, reading, research, resources, jobs, to the DFIR Community.
Digital Forensic Investigator of the Year
I believe that Alexis Brignoni, during the 33 articles he has published in his personal Blog, added to his contributions in his Github profile, highlighting the development of the UsRT tool, has conducted extensive research related to mobile device artifacts.
And this is my choice, which doesn't have to be yours.
I remind you that you can make your vote in the following link: https://forensic4cast.com/forensic-4cast-awards/2019-awards/
And I remind you that the nominations close on the 14th of May. So you still have some days to calmly make your choice.