SANS Digital Forensics and Incident Response Blog

Digital Forensics Case Leads: Certs and Books and Meetings - Oh My!


Good Reads:

  • Dominik Weber of Guidance Software has a very interesting writeup regarding acquisition of flash drives. The wear-leveling technology that is incorporated to extend the lifetime of flash devices can cause apparently random changes in hash values between acquisitions of the device, so it's important to take this into account. With the increasing popularity of SSD drives in computers, this will likely become increasingly important.


  • Not to be outdone by Guidance Software's acquisition of Tableau, Access Data announced that it is merging with CT Summation to provide an end-to-end software solution for eDiscovery.
  • The forensics certification world is getting more crowded; CyberSecurity Institute is now offering CyberSecurity Forensic Analyst (CSFA) certification, adding more urgency for the need for consolidation and unification in the certification area.
  • The Digital Forensics Certification Board is also working on a unifying certification; this one bears a lot of promise, especially considering the high quality of expertise backing it. More info on this one available here.
  • Apple has an online seminar titled Mac for Computer Forensics & e-discovery - register and view the webinar here.
  • Mobile Forensics World was held in Chicago 4-8 May. Photos and copies of presentations are now available.
  • I'm reading Eoghan Casey's excellent book Digital Evidence and Computer Crime to prepare for the CCE exam later this summer. I spoke to Eoghan at SANSFire in Baltimore and he is hard at work on a new (third) edition of this book, and hopes to have it finished and ready for order by the end of the year. Great news - this is a book that belongs in your library if you don't already have it.
  • Syngress (part of Elsevier) is seeking proposals on Legal Guide to Digital Forensics. The proposal form is here. For more information, contact @angelinaward.

Coming Events:

(A word to the wise: The Forensics classes are some of the most popular SANS classes, and they often sell out quickly. Be sure to sign up promptly to avoid disappointment!)

Digital Forensics Case Leads for 20100624 was compiled by Ray Davidson, PhD, CISSP, GFCA, ETC, assistant professor at Purdue Calumet, SANS Mentor and serial facilitator, and principal at Vigil Inc.


Posted June 24, 2010 at 6:16 PM | Permalink | Reply

Rob D

Apple seminar link is bad but you can find it from the seminar page under "Enterprise"

Posted June 28, 2010 at 4:02 PM | Permalink | Reply


I believe the direct link is
Sorry about that, and thanks for catching it!