Lee Whitfield

Lee is a Principal for the Forensics Practice at Charles River Associates. He has covered a wide array of situations during his time as a forensic investigator, everything from child abuse, intellectual property theft, attempted murder, and much more. One of his greatest successes was his work on reverse engineering Volume Shadow Copies, which had been a stumbling block for forensic investigators. Due to Lee's work and innovation, access and time to locate files were greatly reduced, essentially allowing a forensic investigator to view the computer's contents from days, weeks, or even months before, including old or deleted files. Lee hosts the Forensic 4:cast podcast and awards event.

More About Lee

Upcoming Courses

Profile

Lee Whitfield seldom accepts anything that he is told. His curious mind and love of challenging norms compels him to obtain the knowledge for himself. It is part of what makes him a great forensic investigator, and also what he hopes to share with his students.

He began his digital forensics career in 2006, when a neighbor told him about the field. Lee was hooked. Immediately, he started reviewing books, software and taking classes to build up his skills. He soon had the knowledge and skill to become a digital forensic investigator in both in the United States and United Kingdom. Today, Lee is a digital forensic consultant and analyst for his own company, 337 Forensics.

As Lee continued to build and expand his knowledge, he had the opportunity to present at the SANS Forensic Summit. The experience, as well as hearing from other knowledgeable experts, led him to understand that SANS was an organization committed to cutting-edge training and expanding the field of digital forensics.

Now as an instructor for FOR500: Windows Forensic Analysis, Lee pushes his students to understand how important it is to "get things right," given the power of digital forensics and the impact it has on people's lives. Lee shares his own stories and experiences with his students and strives to create open discussion and the opportunity for students to find the answers for themselves. He wants every student to share his passion for finding the truth, and the drive to continue to build their skills and knowledge moving forward.

Lee is a Principal for the Forensics Practice at Charles River Associates. He also hosts the Forensic 4:cast Awards event at the SANS DFIR Summit each year. In his sparse free time, Lee also produces his own popular digital forensics podcast, Forensic 4:cast. The podcast has afforded him the opportunity to discuss and investigate important issues relating to the field of digital forensics, and in each episode, he interviews a panel of guests on the latest news and issues in the field.

Outside of digital forensics and instructing, Lee focuses his time on his wife and four children at home in Dallas, TX. He also enjoys photography and flying his drone. To top it off, Lee is a huge Marvel fan and you'll likely find him at the movie theatre on Marvel movie release nights.

Hear Lee talk about Mac Times here:

Qualifications Summary

Lee is a Principal for the Forensics Practice at Charles River Associates
Instructor for FOR500: Windows Forensic Analysis
Faculty member at the SANS Technology Institute
Annual host of the Forensic 4:cast Awards event at the SANS Forensic Summit
Creator, host and producer of popular digital forensics podcast, Forensic 4:cast

Certifications