Be respectful
Treat everyone the way you would like to be treated. Criticise ideas, never people. Harassment, discrimination and personal attacks are removed, and repeated cases lead to a ban.
Share responsibly
- No live malware. Do not attach working malware, exploit kits or droppers. Share hashes, scan IDs, excerpts or defanged code instead (for example
hxxp://and[.]). - No secrets and no personal data. Remove passwords, API keys, tokens, customer data and personal information before you post. secscan masks secrets in reports; please do the same in your posts.
- Only test what you are allowed to test. Discuss attacks to understand and defend against them. Never encourage attacks on systems without the owner's permission.
- Responsible disclosure. If you find a vulnerability in someone else's product, report it to the vendor first, not publicly here. Vulnerabilities in HEIMDALL itself go to the team through the contact form, not into a public topic.
Keep topics useful
- Search before you post: your question may already have an answer.
- Use a clear title that describes the problem, for example "YARA rule matches minified jQuery: false positive?" rather than "Help!".
- Post in the matching category and stay on topic.
- When your question is solved, say what helped, so the next reader benefits too.
Moderation
Moderators may edit, move, close or hide posts that break these rules, and may suspend accounts. Use Report under a post to tell us about a problem; reports are only visible to the team.