SANS Digital Forensics and Incident Response Blog

Digital Forensics Case Leads: Oracle is on the Warpath, Anonymous accused of PlayStation hack.

Oracle is on the warpath with a subpoena for Apache, Anonymous is accused of hacking the PlayStation network. The Forensic 4Cast nominees are out, interviews with several SANS Instructors, FireFox browser forensics and what skeletons are in your ESI closet.

If you have an item you'd like to contribute to Digital Forensics Case Leads, please send it to


  • These are not really tools but thought they would be useful. "Most common openssl commands" and Incident Response Methodology - "Windows Intrusion Detection"
  • Simple Carver suite has a new updated version, with over 60 different tools making up this suite. More information can be found here.
  • Digital Forensics Solutions announces the release of Scalpel 2.0.

Good Reads:



  • If you received this keyboard with your new computer how would you use it.
  • Another episode from the Bofh.

Coming Events:

Digital Forensics Case Leads is a (mostly) weekly publication of the week's news and events relating to digital forensics. If you have an item you'd like to share, please send it to

Digital Forensics Case Leads for 20110506 was compiled by Mark McKinnon GCFA, CCE is Principal of RedWolf Computer Forensics where he has written many tools that are used through out the Computer Forensic Community. You can follow Mark on twitter @markmckinnon.