search

Digital-Forensics-Discord-Server / TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts

The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportunity to write a chapter of a book to get their name out there, get a publication on their resume with an actual ISBN number, and ideally lower the bar for people to contribute something back to the DFIR Community. Want to write a chapter? Let me know and let's make it happen!
MIT License
185 stars 22 forks source link

Author desciption added #203

Closed mark-b1980 closed 1 year ago

github-actions[bot] commented 1 year ago

@check-spelling-bot Report

:red_circle: Please review

See the :open_file_folder: files view, the :scroll:action log or :angel: SARIF report for details.

Unrecognized words (800) ``` AAAAAAAAEVo aaae abcdef abcdefghijklmnopqrstuvwxyz aboutdfir abrignoni acelab ACIA Aclosed Acw additon addon adpos Adroid AEAD afteracademy AGEAd AGk agpid AGQAIABQAGEAe AHQAc AHQAIAAi ALEAPP algotythm Alibaba alibabacloud Alienware Alordicode Amcache AMN AMSI anab analisys andriller angcyo ano antiscan apfs api apk appications APPKEY apps Aqw archlinux arin ARIs arp ASEP asq Asvyix athoritative Attr ATw AUr ause autoconfiguration Autodetect autodetection autorun Autorunsc autostart avml Axagon AYg AYQBk backend Banaanhangwagen baseword bashrc BAz bbf BBK bda bdw Beckers Beginnersand belkasoft bettercap bfuscated bga bgrundy Bitbucket bitlocker blkcalc blog blogger blogspot blueteam blueyard Boettcher breadcrumbs Brignoni brootware Brunskill bruteforcing BSY btf BTLO btr btrfs budle bundleid bunsofwrath caine canva Capuano ccf CCME ccna CDFE CDFP ceb Cellebrite Cermak certs certutil cerutil cff chainsaw changelog chapterj charset checkbox chokepoints chromebook Cimq cleanroom CLEAPP cloudflare cmdlet cmp cmpid codependency commmands compareed config courseware creativecommons crowdsourced CRR cryptocurrency Cryptor CSV ctfs Cubrilovic curid CVE cyber Cybercrime cybercriminals cyberdefenders cybersecurity Cynosureprime daolya datacent datasheet dbc dcfldd Dco dcode DDBEE ddc ddd DDI ddrescue Debian decompiled decompiling decomplied decryptors Dedupe deduplicate deduplicated deepspar demoing deobfuscate deobfuscating desolder desoldering destianation detacsufb Devvq DFDS dfir dfirdiva dfirmadness DFL dfrws DHCP digitalcorpora direcotries discordapp distro distrubuted dll dmde dns docm docx doku dongles doubleblak downloader downloadprocdotbinaries DRQ dsa DVD DVR DWF EAAAA eaff EALw ebe eca ecbfcd ecc eccf EDvs Efq electronical emailing emails encompasing ericrzimmerman ericzimmerman etir EVTX EWF ewfacquire ewfinfo ewfmount Excell exe executables exfat exfiltrated exterro extid facebook fafbd fakedns Fastport Featureset FFFF filesystem findstr finetune Firefox firewalls firsthop fls followingt forenisc forensicating forensicator frac freecodecamp freenode frida fsstat ftk Funday gamers Gamification GASF GBFA gcc GCFE gchq GCIA GCIH gclid Geeksfor geeksforgeeks gentilkiwi GFM GIAC Gillis githubusercontent gitlab GNDe google googlegroup GPEN GPT GPUs GREM grep Gretzky GSEC GSLC guardonix gui Guideto Guus guusbeckers Guymager GWAPT GXPN gzip Hamdard hardcoded harddisks hashcat hashconv hashesorg hashfile hashkiller hashlog hashwindow hayabusa hdd headmap HECF heckpoint hexchat hfs hfsl hfsp hiberfil HKCU HKEY HKLM hof hollykennedy homepage hotkeys HPA htm html htmlcodes http Huawei HUMINT hve Hylns hypervisor IAAAAAAAEA ibb icat icmp icopybot IDX iex ight IIV imagecopy imagefile img imgur Imh implmenetations IMQH IMSI infinitelogins inish inode insidepro instagram interoperability Introducting Intup IOSR ipv istat itunes jadx JBC JCKWt jdk jdtristram JLVICAGWc Joyn jpeg jpg jpzl Jrnl json JTAG JTVEISKz jumplists kaim kape Kapooht kde kevin kevinpagano keyholders keyspace keytool KIVc KKy Klavdii Koishigawa kroll kruuna kwid labmates Lahr latexmath lba leanpub leapp leded libesedb libevtx libewf libffi libimobiledevice libjpeg liblnk libregf libscca libssl libxml libxslt libyal lifecycle linkedin linktr linqapp linux linuxleo linuxmint llux LNK lockpicks logfile lordicode Loshin losmilzo lsblk LSko Lutkevich LVFQ LZMA MACB magnetforensics MAJ makeuseof maliciousdomain malicousdomain malware manjaro markmckinnon markua MBR MCFE messagebox metadata MFU microsoft mimikatz minix mkape mkdir mlc mmls MNT MOBI mobileforensics mobileforensicsfreenode mobsf modding motherboards MOUNTPOINTS mrt mrtlab MSAB msc Muemw multiline muni MUO MUQIA Mwordlist MXpr Myanmar myspace MZAAAA mzrst natsar NCFI netcat Netflow netresec netstat networkacademy Nextron NFet Niazi Nintendo Nir nirsoft Nisarg NMZW NONAME noob ntfs ntlm NTLMv ntuser NVIDIA NVMe Oaker offcornerdev ofs ofsz ojasav OLQ onlinehashcrack onsite openjdk opensource openwall osboxes OSCE OSCP OSED OSEP OSINT OSWE OSWP OTix OUIs outsource pagano pagebreak pagefeed pagefile Paruch passware PBA PCAP PCBs PCIe pdf pendrive PHGl phishing Phison php Picolet pixabay Playstation plist plugin png postimg potfile powershell PPEE prebuilt precaching prefetch prefetcher prefetching prefixx preloading privacyinternational procdot procexp procmon pubpub punctionation Pwd pwned pyewf QBs QCLc qemu Qjw Qualcomm Radeon randomisation ransomware raph rapidspar Rasperry Rathbun readthedocs readtoend rebranded redhat Regedit regex regfinfo regfmnt regfmount Regshot remoting REPARSE resouce rleapp rling rockyou rusolut Sabilizer SACCTg samdump Samsung Schweihofer screenshot sda sdb Sdq Seabreg searchsecurity secb Secura securityonion Sediv sektor semrush SESSIO Seyer shellbag shtml signaturable simsong SIV skerritt skillsets skylot slackware sleuthkit Smartphone Snapchat spacebar Splunk spoolsv spredsheets sqlite sqlitebrowser SRCH SRUDB srum SSDs SSID SSL stabi standalone stdout Steuart streamable stux subfolders subkey submap subsituted sudo Sumk sumuri suse Suthar sutharnisarg svg swgde SYPv sys sysinternals systemd systeminformer szechuan takeaways Taskbar Taskforce taskinfo tasklist tatus Tbqpc tclahr tcp tcpview Tdw teamers techcrunch techtarget teeltech thebinaryhick Thiago Thu Tik timeline timelining timestamping timezone Timout tkape tlds TLS todo Tok toolbar toolsandartifacts toolset torrenting torvald touchscreen tprimary traige triaging trys TSOP Tsrugi TTPs TTQa tupperwarez tuptu uac UCJV Udemy udma UDME udp ufrisk ufsexplorer ules umeng Unicode uninstalls uniq url usb usbdetective username Usn usr utils utlizing utm utput Velan velociraptor venv Verizon VHDX virtualbox virtualization virtualized virustotal Vkn vmdk VMware VNR Vodafone volatilityfoundation VPBILEp VTech vxv wal walkthrough weakpass webinars webpage webserver website whitelisting wiki wikimedia wikipedia winitor winsiderss wireshark wixstatic wkhtmltopdf wordlist workflow workspaces worldatlas would've writeblocker wsl www XBHFNXZ xfce XFS XML Xmount Xolxw Xpress xuhang Xutm xxd YAAAAT yara ydkhatri YHQ Yihua Yogesh youtube ypass zff ZFS zhiliaoapp zlib zos zstd Zuyd ```
Some files were automatically ignored These sample patterns would exclude them: ``` ^\Qmanuscript/resources/UnfinishedChapters/ChL/01_Select_Adapter.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/02_Case_name.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/03_device_selection.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/04_No_of_chips.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/05_taskinfo.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/06_read_chip_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/07_chip_id_found.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/07_error_chip_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/08_read_chip.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/09_read_to_dump.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/10_read_parameters_01_normal.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/10_read_parameters_02_extended.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/11_reading_process.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/12_ecc_correction_start.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/13_ecc_found.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/14_reread_mode_check.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/15_reread_modes_list.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/16_map.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/17_submap_ecc.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/18_submap_ecc_type.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/19_submap_ecc_result.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/20_raw_recovery.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/21_raw_result.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/22_raw_image.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/23_add_search_results.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/24_result_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/25_page_designer.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/26_divide.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/27_divide_count.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/28_add_parts.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/29_divide_sector.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/30_sector_length.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/31_tree_view.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/32_apply_page_design.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/33_apply_ok.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/34_service_infos.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_3.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/36_Block_number_0000.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/37_block_number_0000_dialog.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/38_dead_Block_number.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/39_first_sector.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/40_Block_number_1001_failed_automatic.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/41_block_number_1001_manual.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/41_block_number_1001_manual_check_sa_data.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/42_block_number_1001_success.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/43_save_data.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/CHIPS.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DDI_Initialisation.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DFL_DE_read_mode.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_error.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_imaging_running.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_scan.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_select_drive.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_3.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4390.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4728.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4730.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/MRT_Edit_HDD_ID.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/MRT_read_mode.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/PC_3k_flash_complex_transf_graph.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/ROM_List.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/imaging_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/imaging_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/status_flags.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/usb_stabi_log.PNG\E$ ``` You should consider excluding directory paths (e.g. `(?:^|/)vendor/`), filenames (e.g. `(?:^|/)yarn\.lock$`), or file extensions (e.g. `\.gz$`) You should consider adding them to: ``` .github/actions/spelling/excludes.txt ``` File matching is via Perl regular expressions. To check these files, more of their words need to be in the dictionary than not. You can use `patterns.txt` to exclude portions, add items to the dictionary (e.g. by adding them to `allow.txt`), or fix typos.
To accept :heavy_check_mark: these unrecognized words as correct, run the following commands ... in a clone of the [git@github.com:mark-b1980/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts.git](https://github.com/mark-b1980/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts.git) repository on the `main` branch ([:information_source: how do I use this?]( https://github.com/check-spelling/check-spelling/wiki/Accepting-Suggestions)): ``` sh curl -s -S -L 'https://raw.githubusercontent.com/check-spelling/check-spelling/main/apply.pl' | perl - 'https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/actions/runs/5170456885/attempts/1' ```
Available :books: dictionaries could cover words not in the :blue_book: dictionary Dictionary | Entries | Covers -|-|- [cspell:cpp/src/cpp.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/cpp/src/cpp.txt)|30216|98| [cspell:software-terms/src/software-terms.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/software-terms/src/software-terms.txt)|1237|80| [cspell:python/src/python/python-lib.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/python/src/python/python-lib.txt)|3873|33| [cspell:php/php.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/php/php.txt)|2597|33| [cspell:node/node.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/node/node.txt)|1768|25| [cspell:win32/src/win32.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/win32/src/win32.txt)|53509|19| [cspell:filetypes/filetypes.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/filetypes/filetypes.txt)|264|18| [cspell:aws/aws.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/aws/aws.txt)|218|18| [cspell:typescript/typescript.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/typescript/typescript.txt)|1211|17| [cspell:npm/npm.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/npm/npm.txt)|288|17| Consider adding them using (in `.github/workflows/spelling.yml`): ``` yml with: extra_dictionaries: cspell:cpp/src/cpp.txt cspell:software-terms/src/software-terms.txt cspell:python/src/python/python-lib.txt cspell:php/php.txt cspell:node/node.txt cspell:win32/src/win32.txt cspell:filetypes/filetypes.txt cspell:aws/aws.txt cspell:typescript/typescript.txt cspell:npm/npm.txt ``` To stop checking additional dictionaries, add: ``` yml with: check_extra_dictionaries: '' ```
Pattern suggestions :scissors: (21) You could add these patterns to .github/actions/spelling/patterns.txt: ``` # Automatically suggested patterns # hit-count: 356 file-count: 24 # https/http/file urls (?:\b(?:https?|ftp|file)://)[-A-Za-z0-9+&@#/%?=~_|!:,.;]+[-A-Za-z0-9+&@#/%=~_|] # hit-count: 44 file-count: 17 # hex runs \b[0-9a-fA-F]{16,}\b # hit-count: 24 file-count: 2 # version suffix v# (?:(?<=[A-Z]{2})V|(?<=[a-z]{2}|[A-Z]{2})v)\d+(?:\b|(?=[a-zA-Z_])) # hit-count: 15 file-count: 11 # Contributor \[[^\]]+\]\(https://github\.com/[^/\s"]+\) # hit-count: 14 file-count: 8 # GitHub SHAs (markdown) (?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|) # hit-count: 13 file-count: 6 # While you could try to match `http://` and `https://` by using `s?` in `https?://`, sometimes there # YouTube url \b(?:(?:www\.|)youtube\.com|youtu.be)/(?:channel/|embed/|user/|playlist\?list=|watch\?v=|v/|)[-a-zA-Z0-9?&=_%]* # hit-count: 9 file-count: 8 # Twitter status \btwitter\.com/[^/\s"')]*(?:/status/\d+(?:\?[-_0-9a-zA-Z&=]*|)|) # hit-count: 8 file-count: 5 # githubusercontent /[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]* # hit-count: 8 file-count: 5 # uuid: \b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b # hit-count: 8 file-count: 2 # microsoft \b(?:https?://|)(?:(?:download\.visualstudio|docs|msdn2?|research)\.microsoft|blogs\.msdn)\.com/[-_a-zA-Z0-9()=./%]* # hit-count: 6 file-count: 3 # Wikipedia \ben\.wikipedia\.org/wiki/[-\w%.#]+ # hit-count: 4 file-count: 4 # Amazon \bamazon\.com/[-\w]+/(?:dp/[0-9A-Z]+|) # hit-count: 3 file-count: 1 # URL escaped characters \%[0-9A-F][A-F] # hit-count: 2 file-count: 1 # discord /discord(?:app\.com|\.gg)/(?:invite/)?[a-zA-Z0-9]{7,} # hit-count: 2 file-count: 1 # hex digits including css/html color classes: (?:[\\0][xX]|\\u|[uU]\+|#x?|\%23)[0-9_a-fA-FgGrR]*?[a-fA-FgGrR]{2,}[0-9_a-fA-FgGrR]*(?:[uUlL]{0,3}|u\d+)\b # hit-count: 1 file-count: 1 # gist github \bgist\.github\.com/[^/\s"]+/[0-9a-f]+ # hit-count: 1 file-count: 1 # ibm [a-z.]*ibm\.com/[-_#=:%!?~.\\/\d\w]* # hit-count: 1 file-count: 1 # imgur \bimgur\.com/[^.]+ # hit-count: 1 file-count: 1 # Internet Archive \barchive\.org/web/\d+/(?:[-\w.?,'/\\+&%$#_:]*) # hit-count: 1 file-count: 1 # freecodecamp.org \bfreecodecamp\.org/[-\w/.]+ # hit-count: 1 file-count: 1 # IPv6 \b(?:[0-9a-fA-F]{0,4}:){3,7}[0-9a-fA-F]{0,4}\b ```
Errors (5) See the [:open_file_folder: files](203/files/) view, the [:scroll:action log](https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/actions/runs/5170456885/jobs/9313366977#step:2:1) or [:angel: SARIF report](https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/security/code-scanning?query=is:open+pr:203) for details. [:x: Errors](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions) | Count -|- [:information_source: binary-file](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#binary-file) | 65 [:information_source: candidate-pattern](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#candidate-pattern) | 43 [:x: check-file-path](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#check-file-path) | 3 [:x: forbidden-pattern](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#forbidden-pattern) | 10 [:information_source: large-file](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#large-file) | 4 See [:x: Event descriptions](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions) for more information.
If the flagged items are :exploding_head: false positives If items relate to a ... * binary file (or some other file you wouldn't want to check at all). Please add a file path to the `excludes.txt` file matching the containing file. File paths are Perl 5 Regular Expressions - you can [test]( https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your files. `^` refers to the file's path from the root of the repository, so `^README\.md$` would exclude [README.md]( ../tree/HEAD/README.md) (on whichever branch you're using). * well-formed pattern. If you can write a [pattern](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns) that would match it, try adding it to the `patterns.txt` file. Patterns are Perl 5 Regular Expressions - you can [test]( https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your lines. Note that patterns can't match multiline strings.
github-actions[bot] commented 1 year ago

@check-spelling-bot Report

:red_circle: Please review

See the :open_file_folder: files view, the :scroll:action log or :angel: SARIF report for details.

Unrecognized words (800) ``` AAAAAAAAEVo aaae abcdef abcdefghijklmnopqrstuvwxyz aboutdfir abrignoni acelab ACIA Aclosed Acw additon addon adpos Adroid AEAD afteracademy AGEAd AGk agpid AGQAIABQAGEAe AHQAc AHQAIAAi ALEAPP algotythm Alibaba alibabacloud Alienware Alordicode Amcache AMN AMSI anab analisys andriller angcyo ano antiscan apfs api apk appications APPKEY apps Aqw archlinux arin ARIs arp ASEP asq Asvyix athoritative Attr ATw AUr ause autoconfiguration Autodetect autodetection autorun Autorunsc autostart avml Axagon AYg AYQBk backend Banaanhangwagen baseword bashrc BAz bbf BBK bda bdw Beckers Beginnersand belkasoft bettercap bfuscated bga bgrundy Bitbucket bitlocker blkcalc blog blogger blogspot blueteam blueyard Boettcher breadcrumbs Brignoni brootware Brunskill bruteforcing BSY btf BTLO btr btrfs budle bundleid bunsofwrath caine canva Capuano ccf CCME ccna CDFE CDFP ceb Cellebrite Cermak certs certutil cerutil cff chainsaw changelog chapterj charset checkbox chokepoints chromebook Cimq cleanroom CLEAPP cloudflare cmdlet cmp cmpid codependency commmands compareed config courseware creativecommons crowdsourced CRR cryptocurrency Cryptor CSV ctfs Cubrilovic curid CVE cyber Cybercrime cybercriminals cyberdefenders cybersecurity Cynosureprime daolya datacent datasheet dbc dcfldd Dco dcode DDBEE ddc ddd DDI ddrescue Debian decompiled decompiling decomplied decryptors Dedupe deduplicate deduplicated deepspar demoing deobfuscate deobfuscating desolder desoldering destianation detacsufb Devvq DFDS dfir dfirdiva dfirmadness DFL dfrws DHCP digitalcorpora direcotries discordapp distro distrubuted dll dmde dns docm docx doku dongles doubleblak downloader downloadprocdotbinaries DRQ dsa DVD DVR DWF EAAAA eaff EALw ebe eca ecbfcd ecc eccf EDvs Efq electronical emailing emails encompasing ericrzimmerman ericzimmerman etir EVTX EWF ewfacquire ewfinfo ewfmount Excell exe executables exfat exfiltrated exterro extid facebook fafbd fakedns Fastport Featureset FFFF filesystem findstr finetune Firefox firewalls firsthop fls followingt forenisc forensicating forensicator frac freecodecamp freenode frida fsstat ftk Funday gamers Gamification GASF GBFA gcc GCFE gchq GCIA GCIH gclid Geeksfor geeksforgeeks gentilkiwi GFM GIAC Gillis githubusercontent gitlab GNDe google googlegroup GPEN GPT GPUs GREM grep Gretzky GSEC GSLC guardonix gui Guideto Guus guusbeckers Guymager GWAPT GXPN gzip Hamdard hardcoded harddisks hashcat hashconv hashesorg hashfile hashkiller hashlog hashwindow hayabusa hdd headmap HECF heckpoint hexchat hfs hfsl hfsp hiberfil HKCU HKEY HKLM hof hollykennedy homepage hotkeys HPA htm html htmlcodes http Huawei HUMINT hve Hylns hypervisor IAAAAAAAEA ibb icat icmp icopybot IDX iex ight IIV imagecopy imagefile img imgur Imh implmenetations IMQH IMSI infinitelogins inish inode insidepro instagram interoperability Introducting Intup IOSR ipv istat itunes jadx JBC JCKWt jdk jdtristram JLVICAGWc Joyn jpeg jpg jpzl Jrnl json JTAG JTVEISKz jumplists kaim kape Kapooht kde kevin kevinpagano keyholders keyspace keytool KIVc KKy Klavdii Koishigawa kroll kruuna kwid labmates Lahr latexmath lba leanpub leapp leded libesedb libevtx libewf libffi libimobiledevice libjpeg liblnk libregf libscca libssl libxml libxslt libyal lifecycle linkedin linktr linqapp linux linuxleo linuxmint llux LNK lockpicks logfile lordicode Loshin losmilzo lsblk LSko Lutkevich LVFQ LZMA MACB magnetforensics MAJ makeuseof maliciousdomain malicousdomain malware manjaro markmckinnon markua MBR MCFE messagebox metadata MFU microsoft mimikatz minix mkape mkdir mlc mmls MNT MOBI mobileforensics mobileforensicsfreenode mobsf modding motherboards MOUNTPOINTS mrt mrtlab MSAB msc Muemw multiline muni MUO MUQIA Mwordlist MXpr Myanmar myspace MZAAAA mzrst natsar NCFI netcat Netflow netresec netstat networkacademy Nextron NFet Niazi Nintendo Nir nirsoft Nisarg NMZW NONAME noob ntfs ntlm NTLMv ntuser NVIDIA NVMe Oaker offcornerdev ofs ofsz ojasav OLQ onlinehashcrack onsite openjdk opensource openwall osboxes OSCE OSCP OSED OSEP OSINT OSWE OSWP OTix OUIs outsource pagano pagebreak pagefeed pagefile Paruch passware PBA PCAP PCBs PCIe pdf pendrive PHGl phishing Phison php Picolet pixabay Playstation plist plugin png postimg potfile powershell PPEE prebuilt precaching prefetch prefetcher prefetching prefixx preloading privacyinternational procdot procexp procmon pubpub punctionation Pwd pwned pyewf QBs QCLc qemu Qjw Qualcomm Radeon randomisation ransomware raph rapidspar Rasperry Rathbun readthedocs readtoend rebranded redhat Regedit regex regfinfo regfmnt regfmount Regshot remoting REPARSE resouce rleapp rling rockyou rusolut Sabilizer SACCTg samdump Samsung Schweihofer screenshot sda sdb Sdq Seabreg searchsecurity secb Secura securityonion Sediv sektor semrush SESSIO Seyer shellbag shtml signaturable simsong SIV skerritt skillsets skylot slackware sleuthkit Smartphone Snapchat spacebar Splunk spoolsv spredsheets sqlite sqlitebrowser SRCH SRUDB srum SSDs SSID SSL stabi standalone stdout Steuart streamable stux subfolders subkey submap subsituted sudo Sumk sumuri suse Suthar sutharnisarg svg swgde SYPv sys sysinternals systemd systeminformer szechuan takeaways Taskbar Taskforce taskinfo tasklist tatus Tbqpc tclahr tcp tcpview Tdw teamers techcrunch techtarget teeltech thebinaryhick Thiago Thu Tik timeline timelining timestamping timezone Timout tkape tlds TLS todo Tok toolbar toolsandartifacts toolset torrenting torvald touchscreen tprimary traige triaging trys TSOP Tsrugi TTPs TTQa tupperwarez tuptu uac UCJV Udemy udma UDME udp ufrisk ufsexplorer ules umeng Unicode uninstalls uniq url usb usbdetective username Usn usr utils utlizing utm utput Velan velociraptor venv Verizon VHDX virtualbox virtualization virtualized virustotal Vkn vmdk VMware VNR Vodafone volatilityfoundation VPBILEp VTech vxv wal walkthrough weakpass webinars webpage webserver website whitelisting wiki wikimedia wikipedia winitor winsiderss wireshark wixstatic wkhtmltopdf wordlist workflow workspaces worldatlas would've writeblocker wsl www XBHFNXZ xfce XFS XML Xmount Xolxw Xpress xuhang Xutm xxd YAAAAT yara ydkhatri YHQ Yihua Yogesh youtube ypass zff ZFS zhiliaoapp zlib zos zstd Zuyd ```
Some files were automatically ignored These sample patterns would exclude them: ``` ^\Qmanuscript/resources/UnfinishedChapters/ChL/01_Select_Adapter.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/02_Case_name.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/03_device_selection.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/04_No_of_chips.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/05_taskinfo.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/06_read_chip_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/07_chip_id_found.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/07_error_chip_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/08_read_chip.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/09_read_to_dump.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/10_read_parameters_01_normal.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/10_read_parameters_02_extended.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/11_reading_process.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/12_ecc_correction_start.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/13_ecc_found.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/14_reread_mode_check.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/15_reread_modes_list.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/16_map.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/17_submap_ecc.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/18_submap_ecc_type.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/19_submap_ecc_result.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/20_raw_recovery.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/21_raw_result.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/22_raw_image.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/23_add_search_results.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/24_result_id.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/25_page_designer.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/26_divide.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/27_divide_count.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/28_add_parts.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/29_divide_sector.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/30_sector_length.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/31_tree_view.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/32_apply_page_design.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/33_apply_ok.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/34_service_infos.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/35_serv_infos_3.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/36_Block_number_0000.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/37_block_number_0000_dialog.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/38_dead_Block_number.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/39_first_sector.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/40_Block_number_1001_failed_automatic.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/41_block_number_1001_manual.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/41_block_number_1001_manual_check_sa_data.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/42_block_number_1001_success.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/43_save_data.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/CHIPS.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DDI_Initialisation.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DFL_DE_read_mode.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_error.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_imaging_running.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_scan.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_select_drive.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DMDE_settings_3.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4390.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4728.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/DSC_4730.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/MRT_Edit_HDD_ID.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/MRT_read_mode.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/PC_3k_flash_complex_transf_graph.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/ROM_List.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/imaging_1.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/imaging_2.PNG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/status_flags.JPG\E$ ^\Qmanuscript/resources/UnfinishedChapters/ChL/usb_stabi_log.PNG\E$ ``` You should consider excluding directory paths (e.g. `(?:^|/)vendor/`), filenames (e.g. `(?:^|/)yarn\.lock$`), or file extensions (e.g. `\.gz$`) You should consider adding them to: ``` .github/actions/spelling/excludes.txt ``` File matching is via Perl regular expressions. To check these files, more of their words need to be in the dictionary than not. You can use `patterns.txt` to exclude portions, add items to the dictionary (e.g. by adding them to `allow.txt`), or fix typos.
To accept :heavy_check_mark: these unrecognized words as correct, run the following commands ... in a clone of the [git@github.com:mark-b1980/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts.git](https://github.com/mark-b1980/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts.git) repository on the `main` branch ([:information_source: how do I use this?]( https://github.com/check-spelling/check-spelling/wiki/Accepting-Suggestions)): ``` sh curl -s -S -L 'https://raw.githubusercontent.com/check-spelling/check-spelling/main/apply.pl' | perl - 'https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/actions/runs/5183462068/attempts/1' ```
Available :books: dictionaries could cover words not in the :blue_book: dictionary Dictionary | Entries | Covers -|-|- [cspell:cpp/src/cpp.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/cpp/src/cpp.txt)|30216|98| [cspell:software-terms/src/software-terms.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/software-terms/src/software-terms.txt)|1237|80| [cspell:python/src/python/python-lib.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/python/src/python/python-lib.txt)|3873|33| [cspell:php/php.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/php/php.txt)|2597|33| [cspell:node/node.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/node/node.txt)|1768|25| [cspell:win32/src/win32.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/win32/src/win32.txt)|53509|19| [cspell:filetypes/filetypes.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/filetypes/filetypes.txt)|264|18| [cspell:aws/aws.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/aws/aws.txt)|218|18| [cspell:typescript/typescript.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/typescript/typescript.txt)|1211|17| [cspell:npm/npm.txt](https://raw.githubusercontent.com/check-spelling/cspell-dicts/v20220816/dictionaries/npm/npm.txt)|288|17| Consider adding them using (in `.github/workflows/spelling.yml`): ``` yml with: extra_dictionaries: cspell:cpp/src/cpp.txt cspell:software-terms/src/software-terms.txt cspell:python/src/python/python-lib.txt cspell:php/php.txt cspell:node/node.txt cspell:win32/src/win32.txt cspell:filetypes/filetypes.txt cspell:aws/aws.txt cspell:typescript/typescript.txt cspell:npm/npm.txt ``` To stop checking additional dictionaries, add: ``` yml with: check_extra_dictionaries: '' ```
Pattern suggestions :scissors: (21) You could add these patterns to .github/actions/spelling/patterns.txt: ``` # Automatically suggested patterns # hit-count: 356 file-count: 24 # https/http/file urls (?:\b(?:https?|ftp|file)://)[-A-Za-z0-9+&@#/%?=~_|!:,.;]+[-A-Za-z0-9+&@#/%=~_|] # hit-count: 44 file-count: 17 # hex runs \b[0-9a-fA-F]{16,}\b # hit-count: 24 file-count: 2 # version suffix v# (?:(?<=[A-Z]{2})V|(?<=[a-z]{2}|[A-Z]{2})v)\d+(?:\b|(?=[a-zA-Z_])) # hit-count: 15 file-count: 11 # Contributor \[[^\]]+\]\(https://github\.com/[^/\s"]+\) # hit-count: 14 file-count: 8 # GitHub SHAs (markdown) (?:\[`?[0-9a-f]+`?\]\(https:/|)/(?:www\.|)github\.com(?:/[^/\s"]+){2,}(?:/[^/\s")]+)(?:[0-9a-f]+(?:[-0-9a-zA-Z/#.]*|)\b|) # hit-count: 13 file-count: 6 # While you could try to match `http://` and `https://` by using `s?` in `https?://`, sometimes there # YouTube url \b(?:(?:www\.|)youtube\.com|youtu.be)/(?:channel/|embed/|user/|playlist\?list=|watch\?v=|v/|)[-a-zA-Z0-9?&=_%]* # hit-count: 9 file-count: 8 # Twitter status \btwitter\.com/[^/\s"')]*(?:/status/\d+(?:\?[-_0-9a-zA-Z&=]*|)|) # hit-count: 8 file-count: 5 # githubusercontent /[-a-z0-9]+\.githubusercontent\.com/[-a-zA-Z0-9?&=_\/.]* # hit-count: 8 file-count: 5 # uuid: \b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b # hit-count: 8 file-count: 2 # microsoft \b(?:https?://|)(?:(?:download\.visualstudio|docs|msdn2?|research)\.microsoft|blogs\.msdn)\.com/[-_a-zA-Z0-9()=./%]* # hit-count: 6 file-count: 3 # Wikipedia \ben\.wikipedia\.org/wiki/[-\w%.#]+ # hit-count: 4 file-count: 4 # Amazon \bamazon\.com/[-\w]+/(?:dp/[0-9A-Z]+|) # hit-count: 3 file-count: 1 # URL escaped characters \%[0-9A-F][A-F] # hit-count: 2 file-count: 1 # discord /discord(?:app\.com|\.gg)/(?:invite/)?[a-zA-Z0-9]{7,} # hit-count: 2 file-count: 1 # hex digits including css/html color classes: (?:[\\0][xX]|\\u|[uU]\+|#x?|\%23)[0-9_a-fA-FgGrR]*?[a-fA-FgGrR]{2,}[0-9_a-fA-FgGrR]*(?:[uUlL]{0,3}|u\d+)\b # hit-count: 1 file-count: 1 # gist github \bgist\.github\.com/[^/\s"]+/[0-9a-f]+ # hit-count: 1 file-count: 1 # ibm [a-z.]*ibm\.com/[-_#=:%!?~.\\/\d\w]* # hit-count: 1 file-count: 1 # imgur \bimgur\.com/[^.]+ # hit-count: 1 file-count: 1 # Internet Archive \barchive\.org/web/\d+/(?:[-\w.?,'/\\+&%$#_:]*) # hit-count: 1 file-count: 1 # freecodecamp.org \bfreecodecamp\.org/[-\w/.]+ # hit-count: 1 file-count: 1 # IPv6 \b(?:[0-9a-fA-F]{0,4}:){3,7}[0-9a-fA-F]{0,4}\b ```
Errors (5) See the [:open_file_folder: files](203/files/) view, the [:scroll:action log](https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/actions/runs/5183462068/jobs/9341385693#step:2:1) or [:angel: SARIF report](https://github.com/Digital-Forensics-Discord-Server/TheHitchhikersGuidetoDFIRExperiencesFromBeginnersandExperts/security/code-scanning?query=is:open+pr:203) for details. [:x: Errors](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions) | Count -|- [:information_source: binary-file](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#binary-file) | 65 [:information_source: candidate-pattern](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#candidate-pattern) | 43 [:x: check-file-path](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#check-file-path) | 3 [:x: forbidden-pattern](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#forbidden-pattern) | 10 [:information_source: large-file](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions#large-file) | 4 See [:x: Event descriptions](https://github.com/check-spelling/check-spelling/wiki/Event-descriptions) for more information.
If the flagged items are :exploding_head: false positives If items relate to a ... * binary file (or some other file you wouldn't want to check at all). Please add a file path to the `excludes.txt` file matching the containing file. File paths are Perl 5 Regular Expressions - you can [test]( https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your files. `^` refers to the file's path from the root of the repository, so `^README\.md$` would exclude [README.md]( ../tree/HEAD/README.md) (on whichever branch you're using). * well-formed pattern. If you can write a [pattern](https://github.com/check-spelling/check-spelling/wiki/Configuration-Examples:-patterns) that would match it, try adding it to the `patterns.txt` file. Patterns are Perl 5 Regular Expressions - you can [test]( https://www.regexplanet.com/advanced/perl/) yours before committing to verify it will match your lines. Note that patterns can't match multiline strings.