SANS Digital Forensics and Incident Response Blog

Digital Forensics Case Leads: Passwords in Wills, Google Chrome a Virus, Cybercrime Unit Saving Money and Updates for Sleuthkit and SSDeep.

In this version we have Microsoft classifying Google Chrome as a virus, passwords being added to wills and the Metropolitan Police Cybercrime unit saving money for the citizens of the UK. Several tools have been updated and some good reads along with a little levity and training/conferences as well as call for papers.

If you have an item you'd like to contribute to Digital Forensics Case Leads, please send it to


  • Sleuthkit 3.2.3 has been released. This will probably be the last release in the 3.2 branch. Lots of new stuff on the 'trunk' that will be released as 3.3.0 in the near future. This release has some minor bug fixes and a few new features.
  • SSDeep 2.7 Realeased. You can download a Windows binary or the source code.
  • Highlighter v1.1.3 released. You can find it here.

Good Reads:



Coming Events:

Call For Papers:

Digital Forensics Case Leads is a (mostly) weekly publication of the week's news and events relating to digital forensics. If you have an item you'd like to share, please send it to

Digital Forensics Case Leads for 20111013 was compiled by Mark McKinnon GCFA, CCE is Principal of RedWolf Computer Forensics where he has written many tools that are used throughout the Computer Forensic Community. You can follow Mark on twitter @markmckinnon.