SANS Digital Forensics and Incident Response Blog

CaseLeads: China Cyber Espionage Exposed, Account Issues with Twitter and Plenty of Great How-To's

This week on Case Leads, we learn the truth of China's cyber espionage unit, Twitter verified accounts were hacked and there have been some updates to some of your favorite tools.

If you have an item you'd like to contribute to Digital Forensics Case Leads, please send it to?


  • HMFT was given a small update.
  • Autopsy was recently updated as well.
  • Passware can now extract passwords for certain popular websites from memory.

Good Reads:


  • In case you've missed it, MANDIANT posted a report on China's cyber espionage role. Here you can find a quick overview and a link to the full report.
  • Haft of the Spear posted some interesting takes on China.
  • Twitter has suffered from a rash of verified company accounts getting hacked.
  • You won't have to read this, but there is a new CyberSpeak episode up.

Coming Events:

Call For Papers:


Digital Forensics Case Leads is a (mostly) weekly publication of the week's news and events relating to digital forensics. If you have an item you'd like to share, please send it to

Digital Forensics Case Leads was compiled this week by Mike Ahrendt. Mike is the Information Security Officer for Grand Rapids Community College where he works in a wide array of security tasks from policy creation to forensic investigations.