210 words

July 4, 2024

1 minute read

Full archive of a discord about forensics for LE and spyware companies

So, about a month ago, I was browsing Twitter, Xitter, or whatever, and I saw the Graphene OS account discussing a Discord server named DFIR that they had been on before being banned. This Discord server only accepts members who are active law enforcement personnel, forensic students, or representatives of forensic products (such as Cellebrite and similar spyware companies). Naturally, when something is restricted, I want to see it. After searching more of Graphene OS's tweets about the server, I discovered that due to the way they set up their permissions, you could access the Discord server's content without joining it. Instead, you could use Discord's discovery feature.

Unable to read the messages at the time, I had to find a way to archive the server without being able to join it. I was able to do so by using a little JavaScript code on the browser. This post exists to share the data I obtained so you can maybe learn some interesting techniques and countermeasures from it (educationnal purpose only). Here is the data unformatted, available in .xlsx format, organized by categories and channels.

https://1337.black/archive/data/digital_forensics_discord.zip

PS : My GPT lawyer advised me to make it clear that this data was publicly accessible and that I’m nowhere near the US.


Leet
i[a]sy.st
I’m ██████████ █████, a ██ years old working at ████████ ███████████.
leak forensics