A task focused forensic examiner able to pragmatically solve functions that lead to significant time and costs savings from the client and produce reports that are clear and simple to understand for the end client.

Able to document and forensically collect for a plethora of different devices dependent on the devices. Typically using tools like FTK Imager, a hardware USB 3.0 blocker, a forensic Linux distribution, Macquisition or Robocopy on a live system.

As well as being proficient using lab standard forensic tools such as Cellebrite, Accessdata’s FTK 6.3, Paladin, Caine, Encase and X-ways I can also perform advanced analysis. Advanced analysis techniques include VSC file recovery, log2timeline Linux production and analysis, Mac forensic collection and investigation, password cracking, manual registry analysis, making evidence bootable in a forensic fashion and ddrescue data recovery for faulty drives.

Qualified as an expert witness for some years and vetted by Sweet and Maxwell I have presented evidence in tribunals, civil and criminal courts in the UK. I perform at least ten instructions a year supplementary to my corporate investigations, litigation support and collections.

Experienced in all aspects of case management, exhibit handling and enterprise encryption challenges including
BitLocker, Veracrypt, TrueCrypt and PGP.

I enjoy working with a team and have experience in managing projects related to global litigation, incident response, employee investigation and business as usual regulatory capture.

The designer of digital forensic courses aimed at the novice and expert. I can instruct the less knowledgeable and make the topic exciting.

Experienced as a consultant, knowledgeable as an expert witness and skilled in a corporate environment in all aspects of collection, investigation and reporting.

Computer Forensic consulting at its core is delivering challenging to ascertain facts in plain English to the client.