Lee Whitfield
Principal InstructorPrincipal For The Forensics Practice at Charles River Associates
Specialities
Digital Forensics and Incident Response
Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsDigital Forensics and Incident Response
Lee is a Principal for the Forensics Practice at Charles River Associates. He has covered a wide array of situations during his time as a forensic investigator, everything from child abuse, intellectual property theft, attempted murder, and much more. One of his greatest successes was his work on reverse engineering Volume Shadow Copies, which had been a stumbling block for forensic investigators. Due to Lee's work and innovation, access and time to locate files were greatly reduced, essentially allowing a forensic investigator to view the computer's contents from days, weeks, or even months before, including old or deleted files. Lee hosts the Forensic 4:cast podcast and awards event.
What I learned in Lee's class helped me relate to my every day job and continue to build my skills.
I appreciate Lee sharing his real-world stories of cases he's been involved in, and how he has been able to use many of the tools discussed to aid in investigations.
I've gained a lot from Lee! The best instructor I ever seen in my life. I highly recommend my colleagues take training with him.
Authored Courses