Author: Lee Whitfield

  • All Good Things…

    I’ve been doing the Forensic 4:cast Awards for 15 years. Just to give you some context of how long I’ve been doing this… In 2009, when the awards started: The awards started as Simon and I wearing suit jackets, standing in front or a white wall in our office at Zentek. The popularity soon grew…

  • Forensic 4:cast Awards 2023 – Voting is now open!

    Yes, I finally found the time to tally the nominations and get the voting up. And there’s some interesting developments. It looks like the 4:cast Awards has garnered international recognition, most in Brasil. Looking at the categories, there’s a lot of good nominees to choose from, so take your time, as you only get one…

  • Forensic 4:cast Awards 2023 – Nominations are now open!

    Admit it, you thought I’d forgotten, didn’t you? No, life and my new job are pretty busy, so finding time can be difficult. Maybe I’ll get ChatGPT to write the blurb to save me some time. OK, here goes… It’s your boy Snoop D-O-Double-G, and I’m here to tell you about the Forensic 4:cast Awards!…

  • Moving On

    I’ve never worked anywhere for as long as I’ve worked at SANS. I started in February of 2017 and have had several roles in the company since. I started supporting OnDemand students and made my way up until I was testing lab exercises for many of the classes taught at SANS. I love the company…

  • 2022 Forensic 4:cast Awards – Voting is now OPEN

    Yes, finally the voting is open. It has been a long road to getting here this year, just so much going on. As the DFIR Summit isn’t happening until August this year, where’s the harm in delaying the voting until such time that I could give it the attention it deserves? Also, I won’t be…

  • Forensic 4:cast Awards – Update

    So I keep getting the question, ”when will voting for the awards open?” Well… soon. My host has been troubleshooting my site for about a month now and we’ve finally identified and resolved the issue. Now that everything is up and running again (and much time has been wasted) I’m going to keep the nominations…

  • The Strength of a Tree

    If you’ve clicked on the link looking for a technical article, you’re going to be disappointed. This post is more about something that I’ve been thinking about for a while. Last month Texas suffered another ice storm. Before moving to this state, I’d never heard of “freezing rain” and just assumed it was Texan for…

  • Mac Randomization in Windows

    In a break from the norm, I’m going to start with a Bible reference. Romans 2:21 says:“Thou therefore which teachest another, teachest thou not thyself?” As a SANS Instructor this couldn’t be truer. Every time I teach a class, I am asked at least one question where I think, “huh, I’d never considered that before,” or…

  • We Didn’t Start DFIR

    I started this back in April and hoped to have it finished for the 4:cast Awards last month. Sadly, life got in the way. This evening I had the time to finish it off. Hope you enjoy it. Lyrics below: Harlan Carvey, EnCase, Cellebrite, X-Ways Champlain, Huber, Exiftool, Ultradock 5 Sysinternals, Paraben, tools from Eric…

  • 2022 Forensic 4:cast Awards – Nominations are Open!

    Wait, what? Didn’t the awards just finish like 3 days ago? Yes, yes they did. So why are we already seeing nominations for next year? I’m glad you asked… For the last 13 years, the Forensic 4:cast Awards has run in June/July BUT the awards are meant to be for work carried out from January…