diff --git a/README.md b/README.md index b54ddd0..3f0e3aa 100644 --- a/README.md +++ b/README.md @@ -62,11 +62,16 @@ The software comes packaged in a 7zip archive. Uncompress the archive, and doubl LinkScope was built from the ground up to be modular! In this repository's wiki, there are instructions on how to create your own modules, which can contain custom Entities and Resolutions. There is also an example module in the Modules directory that can act as a template, and has a verbose description of most things that a module creator should need to consider. ## Security and safety -A warning about using the software: +Warnings and best practices on using the software: ### Do NOT use Resolutions obtained by untrusted sources. Resolutions are essentially Python code that ingests information from various data sources. Make sure that the people providing you with code to run are trustworthy, and that you inspect all the modules you use before installing them. Pre-compiled binaries on systems without Python installed are not able to install new resolutions, so compiling custom versions of the client to suit your investigators' needs should effectively mitigate this risk. +### Do NOT interact with unsafe resources without sufficient protection measures. +Some resources that an investigator may access through the software may pose a risk to the investigator and/or the assets used during the investigation. Some examples include, but are not limited to: Sites that host malicious code, torrents for malware, or forums that contain illegal materials. Handling the risk of investigating targets and materials that may be harmful to the investigator and/or the equipment used during the investigation is completely up to the investigator. + +We recommend utilizing virtual machines (VMs) during investigations that may call for interaction with unsafe resources in order to minimize the impact of mishandling dangerous resources. + ## Further reading If you are interested in more information about using the software, tutorials and case studies, check out our blog at https://accentusoft.com/blog/.