[DFSci] Digital Forensics Wish List

[Grant G]

Rob,

Ah, no worries. I didn't mean to cause you any discomfort.

It is mentioned in ComputerWorld that Mandiant was called in and I
wasn't sure if you were confirming it officially.

http://www.buzzbox.com/preview/chinese_authorities_behind_google_attack-researcher_claims/?id=296454

It is all good though.

Cheers,

Grant

On Thu, Jan 28, 2010 at 5:57 PM, Rob Lee <rob_t_lee at yahoo.com> wrote:
> Great question.  Wish we could be more specific honestly.  However, we
> cannot answer any specific questions regarding any of our clients.  We can
> say this...  we work side by side with the infosec staff of our clients in
> almost all situations.
>
> Best,
> Rob
>
> ______________________________________________________________________________________________
>
>
> ________________________________
> From: Grant G <thegrant at gmail.com>
> To: Rob Lee <rob_t_lee at yahoo.com>
> Cc: dfsci at dfrws.org
> Sent: Thu, January 28, 2010 4:43:04 PM
> Subject: Re: [DFSci] Digital Forensics Wish List
>
> Are you stating, just so I'm clear, that MANDIANT did all of the
> forensic work for Google?
>
> On Thu, Jan 28, 2010 at 4:31 PM, Rob Lee <rob_t_lee at yahoo.com> wrote:
>> Thanks everyone for the request for Mandiant's team.  It is a possibility,
>> however it would be easier to discuss general trends regarding these type of
>> attacks.  Look at our M-Trends report for an idea of what we can talk about.
>> As one of the authors, our focus was to talk about specific trends across
>> industries, not specific clients.
>>
>>  We are very flattered, but we probably couldn't talk specifically about
>> specific clients though...
>>
>> If you haven't receivedM-Trends yet, click here.
>>  http://www.mandiant.com/products/services/m-trends
>>
>> There is a registration page mainly to help us control who is receiving
>> it.  We really would prefer a slow release instead of a massive download.
>>  Some feel the information in the report will cause our adversaries to
>> change their tactics.
>>
>> Best,
>> Rob Lee
>> Director, MANDIANT(www.mandiant.com) rob.lee at mandiant.com
>> FalcultyFellow/Digital Forensic Curriculum Lead SANS Institute
>> (http://computer-forensics.sans.org) rlee at sans.org
>>
>>
>>
>> ______________________________________________________________________________________________
>>
>>
>>
>>
>>
>> ________________________________
>> From: RYAN MOORE (CID) <Ryan.Moore at usss.dhs.gov>
>> To: dfsci at dfrws.org
>> Sent: Thu, January 28, 2010 4:18:01 PM
>> Subject: Re: [DFSci] Digital Forensics Wish List
>>
>> All:
>>
>> I agree, it would be interesting to hear Google's forensic team discuss
>> the recent incident.
>> Ryan E. Moore
>> Special Agent
>> U.S. Secret Service
>> 412-687-6961 (Desk)
>> 412-304-7020 (Mobile)
>> 412-268-5226 (Fax)
>>
>> ----- Original Message -----
>> From: dfsci-bounces at lists.dfrws.org <dfsci-bounces at lists.dfrws.org>
>> To: dfsci at dfrws.org <dfsci at dfrws.org>
>> Sent: Wed Jan 27 20:58:45 2010
>> Subject: [DFSci] Digital Forensics Wish List
>>
>>
>> If you could hear one person speak about the future of digital
>> forensics at the 10th Annual DFRWS conference, who would it be and why?
>>
>> Eoghan Casey
>> Conference Chair
>> _______________________________________________
>> DFSci mailing list
>> DFSci at lists.dfrws.org
>> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org
>>
>> All e-mail to/from this account is subject to official review and is for
>> official use only.  Action may be taken in response to any inappropriate use
>> of the Secret Service's e-mail system. This e-mail may contain information
>> that is privileged, law enforcement sensitive, or subject to other
>> disclosure limitations.  Such information is loaned to you and should not be
>> further disseminated without the permission of the Secret Service.  If you
>> have received this e-mail in error, do not keep, use, disclose, or copy it;
>> notify the sender immediately and delete it.
>> _______________________________________________
>> DFSci mailing list
>> DFSci at lists.dfrws.org
>> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org
>> _______________________________________________
>> DFSci mailing list
>> DFSci at lists.dfrws.org
>> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org
>>
> _______________________________________________
> DFSci mailing list
> DFSci at lists.dfrws.org
> http://lists.dfrws.org/listinfo.cgi/dfsci-dfrws.org
>