Author: Lee Whitfield

  • Voting Closing Date

    Several people have pointed out that I’ve not included a deadline for the voting in the 2015 Forensic 4:cast Awards. It looks like everyone is anxious to know when the voting will be over so they can get every potential vote in. With that in mind I’m announcing that voting for the awards will close…

  • Crypto-whatever…

    My car radio doesn’t work. I bought a bluetooth stereo a year ago but never got around to purchasing the adapter for the antenna. This means that I can’t listen to the radio at all during my commute to work or while traveling to various on-site engagements. Instead I listen to audiobooks and podcasts. One…

  • Human Cost

    As mentioned in yesterday’s post I’ll be presenting at the SANS DFIR Summit in Austin in July. My main presentation is entitled “The Human Cost”. It is a non-technical presentation discussing 1) how our mistakes potentially affect other people’s lives, and 2) how working with images of child sexual abuse affect the examiner. The latter…

  • See You At The Summit

    Have I ever mentioned that my favorite conference of the whole year is the SANS DFIR Summit? “Why is it my favorite?” I hear you ask. Here’s why: It is held in Austin, one of the coolest cities in the world. There’s so much to do. You can see live music at virtually any time…

  • NOT An April Fools

    Last year’s post resulted in a lot of angry people. Some of them still haven’t forgiven me. This year I’m really not in a joking mood. It seems as if I only post when the awards are happening or when something is happening in my personal life. Today is the latter. I write this as…

  • Forensic 4:cast Awards 2015 – Nominations are Open

    Every year at the SANS DFIR Summit (held in Austin, Texas) the Forensic 4:cast Awards are held. These awards are meant to celebrate the achievements of those dedicated people in the field of digital forensics who labor tirelessly to bring us new tools and techniques that make our jobs and lives simpler and exciting. The…

  • Why You Should Take the SANS Mac Forensics Class

    I had an experience a few months ago in which one of our cases required an out-of-state collection. The client didn’t want to pay travel expenses so they asked for a local forensics expert to image the system and then conduct the analysis. When he arrived on site he called the client and explained that…

  • 4:cast Awards 2014

    We held the 4:cast Awards on Monday evening. The results can be found here: https://forensic4cast.com/forensic-4cast-awards/2014-results/ First of all I want to thank everyone for nominating and voting. It may take you a few minutes to do it, but it means the world to me and to everyone that is nominated. Second, I want to congratulate all…

  • Awards Update – DEADLINE CHANGE

    I’m happy to report that this year we have seen the largest number of votes in the history of the awards. You guys are all obviously very passionate about the resources you use on a daily basis. I will be traveling and giving testimony the week before the awards so I won’t have time to…

  • Be SMART

    Last week I was probably a little more annoyed than I should have been. I read an article (later to find it was an advertisement) on the DFINews website that said that “groundbreaking” research had been conducted resulting in finding data on a drive that determines how long the drive has been in use, how…