Author: Lee Whitfield

  • Moving On

    I’ve never worked anywhere for as long as I’ve worked at SANS. I started in February of 2017 and have had several roles in the company since. I started supporting OnDemand students and made my way up until I was testing lab exercises for many of the classes taught at SANS. I love the company […]

  • 2022 Forensic 4:cast Awards – Voting is now OPEN

    Yes, finally the voting is open. It has been a long road to getting here this year, just so much going on. As the DFIR Summit isn’t happening until August this year, where’s the harm in delaying the voting until such time that I could give it the attention it deserves? Also, I won’t be […]

  • Forensic 4:cast Awards – Update

    So I keep getting the question, ”when will voting for the awards open?” Well… soon. My host has been troubleshooting my site for about a month now and we’ve finally identified and resolved the issue. Now that everything is up and running again (and much time has been wasted) I’m going to keep the nominations […]

  • The Strength of a Tree

    If you’ve clicked on the link looking for a technical article, you’re going to be disappointed. This post is more about something that I’ve been thinking about for a while. Last month Texas suffered another ice storm. Before moving to this state, I’d never heard of “freezing rain” and just assumed it was Texan for […]

  • Mac Randomization in Windows

    In a break from the norm, I’m going to start with a Bible reference. Romans 2:21 says:“Thou therefore which teachest another, teachest thou not thyself?” As a SANS Instructor this couldn’t be truer. Every time I teach a class, I am asked at least one question where I think, “huh, I’d never considered that before,” or […]

  • We Didn’t Start DFIR

    I started this back in April and hoped to have it finished for the 4:cast Awards last month. Sadly, life got in the way. This evening I had the time to finish it off. Hope you enjoy it. Lyrics below: Harlan Carvey, EnCase, Cellebrite, X-Ways Champlain, Huber, Exiftool, Ultradock 5 Sysinternals, Paraben, tools from Eric […]

  • 2022 Forensic 4:cast Awards – Nominations are Open!

    Wait, what? Didn’t the awards just finish like 3 days ago? Yes, yes they did. So why are we already seeing nominations for next year? I’m glad you asked… For the last 13 years, the Forensic 4:cast Awards has run in June/July BUT the awards are meant to be for work carried out from January […]

  • 2021 Forensic 4:cast Awards – Results

    The 2021 Forensic 4:cast Awards took place on Friday, July 23, 2021 as part of the SANS DFIR Summit. The nominees and winners are listed below: DFIR Commercial Tool of the Year Magnet Forensics Cellebrite Belkasoft DFIR Blog of the Year D20 Forensics Cellebrite Ask the Expert DFIR.ru DFIR Book of the Year Practical Mobile […]

  • 2021 Forensic 4:cast Awards – Voting is now OPEN

    Its that time of year once more. The nominations have been counted and the top three in each category is now available for voting. Thanks for our, again, record-breaking number of nominations this year. I’d also like to thank those that wrote in for a new category, DFIR CTF/Challenge of the Year. I heard you […]

  • 2021 Forensic 4:cast Awards – Nominations are OPEN

    The nominations for the 2020 Forensic 4:cast Awards are now open! Please take the time to post your nominations at the link below and remember that we’re asking for nominations for work that was performed in 2020 only. Anything that has happened this year (2021) will wrap into next year’s awards. By following the link, […]