Author: Lee Whitfield

  • Forensic 4:cast Awards 2023 – Nominations are now open!

    Admit it, you thought I’d forgotten, didn’t you? No, life and my new job are pretty busy, so finding time can be difficult. Maybe I’ll get ChatGPT to write the blurb to save me some time. OK, here goes… It’s your boy Snoop D-O-Double-G, and I’m here to tell you about the Forensic 4:cast Awards! […]

  • Moving On

    I’ve never worked anywhere for as long as I’ve worked at SANS. I started in February of 2017 and have had several roles in the company since. I started supporting OnDemand students and made my way up until I was testing lab exercises for many of the classes taught at SANS. I love the company […]

  • 2022 Forensic 4:cast Awards – Voting is now OPEN

    Yes, finally the voting is open. It has been a long road to getting here this year, just so much going on. As the DFIR Summit isn’t happening until August this year, where’s the harm in delaying the voting until such time that I could give it the attention it deserves? Also, I won’t be […]

  • Forensic 4:cast Awards – Update

    So I keep getting the question, ”when will voting for the awards open?” Well… soon. My host has been troubleshooting my site for about a month now and we’ve finally identified and resolved the issue. Now that everything is up and running again (and much time has been wasted) I’m going to keep the nominations […]

  • The Strength of a Tree

    If you’ve clicked on the link looking for a technical article, you’re going to be disappointed. This post is more about something that I’ve been thinking about for a while. Last month Texas suffered another ice storm. Before moving to this state, I’d never heard of “freezing rain” and just assumed it was Texan for […]

  • Mac Randomization in Windows

    In a break from the norm, I’m going to start with a Bible reference. Romans 2:21 says:“Thou therefore which teachest another, teachest thou not thyself?” As a SANS Instructor this couldn’t be truer. Every time I teach a class, I am asked at least one question where I think, “huh, I’d never considered that before,” or […]

  • We Didn’t Start DFIR

    I started this back in April and hoped to have it finished for the 4:cast Awards last month. Sadly, life got in the way. This evening I had the time to finish it off. Hope you enjoy it. Lyrics below: Harlan Carvey, EnCase, Cellebrite, X-Ways Champlain, Huber, Exiftool, Ultradock 5 Sysinternals, Paraben, tools from Eric […]

  • 2022 Forensic 4:cast Awards – Nominations are Open!

    Wait, what? Didn’t the awards just finish like 3 days ago? Yes, yes they did. So why are we already seeing nominations for next year? I’m glad you asked… For the last 13 years, the Forensic 4:cast Awards has run in June/July BUT the awards are meant to be for work carried out from January […]

  • 2021 Forensic 4:cast Awards – Results

    The 2021 Forensic 4:cast Awards took place on Friday, July 23, 2021 as part of the SANS DFIR Summit. The nominees and winners are listed below: DFIR Commercial Tool of the Year Magnet Forensics Cellebrite Belkasoft DFIR Blog of the Year D20 Forensics Cellebrite Ask the Expert DFIR Book of the Year Practical Mobile […]

  • 2021 Forensic 4:cast Awards – Voting is now OPEN

    Its that time of year once more. The nominations have been counted and the top three in each category is now available for voting. Thanks for our, again, record-breaking number of nominations this year. I’d also like to thank those that wrote in for a new category, DFIR CTF/Challenge of the Year. I heard you […]