Author: Lee Whitfield

  • See You At The Summit

    Have I ever mentioned that my favorite conference of the whole year is the SANS DFIR Summit? “Why is it my favorite?” I hear you ask. Here’s why: It is held in Austin, one of the coolest cities in the world. There’s so much to do. You can see live music at virtually any time […]

  • NOT An April Fools

    Last year’s post resulted in a lot of angry people. Some of them still haven’t forgiven me. This year I’m really not in a joking mood. It seems as if I only post when the awards are happening or when something is happening in my personal life. Today is the latter. I write this as […]

  • Forensic 4:cast Awards 2015 – Nominations are Open

    Every year at the SANS DFIR Summit (held in Austin, Texas) the Forensic 4:cast Awards are held. These awards are meant to celebrate the achievements of those dedicated people in the field of digital forensics who labor tirelessly to bring us new tools and techniques that make our jobs and lives simpler and exciting. The […]

  • Why You Should Take the SANS Mac Forensics Class

    I had an experience a few months ago in which one of our cases required an out-of-state collection. The client didn’t want to pay travel expenses so they asked for a local forensics expert to image the system and then conduct the analysis. When he arrived on site he called the client and explained that […]

  • 4:cast Awards 2014

    We held the 4:cast Awards on Monday evening. The results can be found here: First of all I want to thank everyone for nominating and voting. It may take you a few minutes to do it, but it means the world to me and to everyone that is nominated. Second, I want to congratulate all […]

  • Awards Update – DEADLINE CHANGE

    I’m happy to report that this year we have seen the largest number of votes in the history of the awards. You guys are all obviously very passionate about the resources you use on a daily basis. I will be traveling and giving testimony the week before the awards so I won’t have time to […]

  • Be SMART

    Last week I was probably a little more annoyed than I should have been. I read an article (later to find it was an advertisement) on the DFINews website that said that “groundbreaking” research had been conducted resulting in finding data on a drive that determines how long the drive has been in use, how […]

  • The Rules (Nay, Commandments) of the 4:cast Awards

    Thou shalt not vote for thyself. Thou shalt not vote for thine own product. Thou shalt not vote for thine own organization. If thou desirest to vote in only one category, thou shalt not randomly pick from the other categories. Thou shalt not complain about not being nominated. Thou mayest nominate a multitude of nominees, […]

  • 2014 Forensic 4:cast Awards – Meet the Nominees

    The nominations have been tallied and the voting is open for the 2014 Forensic 4cast Awards. But what do you know about the nominees? Why should you vote for them? What great feats have they accomplished in the last year? I’m glad you asked… Quotes from submissions are used where appropriate. Remember to vote here: […]

  • 2014 Forensic 4:cast Awards – Voting is Open

    The nominations have been counted and it is now time to unveil the nominees for the 2014 Forensic 4:cast Awards. As always competition is fierce and many people/products/companies were nominated but only the top three in each category make it through for voting so congratulations to those that have made it this far. It shows […]