SANS Digital Forensics and Incident Response Blog

Digital Forensics Case Leads: SSD Forensics; WebCams, Privacy and The Law; Anit-Forensics Goes Mainstream; Forensics Comes To The US Elections

Welcome to Digital Forensics Case Leads. It's a busy week in digital forensics, incident response and the law. In this edition: How the standards for obtaining a warrant for digital information might change. Do users really care about tracking and privacy online? Are anti-forensics and spoliation becoming more popular with the general public? Why Solid State Drive (SSD) data destruction and forensics is a whole new world, from the floor of RSA Security in San Francisco. Digital forensics hit the headlines with the "Rutgers Web Cam" verdict. It appears that digital forensics played a role in the conviction. Plus, changes to smartphone forensics tools, and The Last Private Place? Anti-DUI Campaign Invades The Men's Room.

If you have an item you'd like to contribute to Digital Forensics CaseLeads, please send it to

Good Reads/Listens:


  • Password audit tool-maker ElcomSoft updates SmartPhone Password Breaker and ElcomSoft Wireless Security Auditor. Read the release.
  • AccessData Releases Forensic Toolkit(R) 4; With New Investigations and Incident Response Capabilities, Including Malware Analysis Technology. Read the BusinessWire release.


  • From "...jurors heard a video admission from the defendant in the Rutgers University trial that he violated his roommate's privacy when he secretly set up a Webcam, which caught his roommate engaged in intimate contact with another man..." Although this story was written the verdict was in, it details some of the digital forensics used in the case.
  • Encase Still Bullish on DFIR (well, DUH; but worth the read): Forensic incident response to the fore
  • Digital Forensics playing a role in this grisly investigation: Ohio investigates adoption agency amid rape case
  • Digital Forensics playing a role in US election campaigns: Web links spur ethics complaint in Killeen elections


Coming Events:

Call For Papers:

Digital Forensics Case Leads is a (mostly) weekly publication of the week's news and events relating to digital forensics. If you have an item you'd like to share, please send it to

by Ira Victor, G2700, GCFA, GPCI, GSEC, ISACA CGEIT CRISC. Ira Victor is a forensic analyst with Data Clone Labs, He is also Co-Host of CyberJungle Radio, the news and talk on security, privacy and the law. Ira is President of Sierra-Nevada InfraGard, and a member of The High Tech Crime Investigator's Association (HTCIA). Follow Ira's security and forensics tweets: @ira_victor.


Posted March 21, 2012 at 1:45 PM | Permalink | Reply


Anit-Forensics Goes Mainstream -> Anti-Forensics Goes Mainstream