Logo

Provides Testimony In

Computer Investigator Certified, HP Compaq Computers, Microsoft OEM VAR System Builder Programs, Microsoft Partner, Novell, Microsoft Products Operating Systems, DOS, Windows 2x, Windows 3x, WFW 311, Windows 95 a, Windows 95 b, Windows Office 95 Products, Windows Office 97 Products, Windows Office Products 2000, Windows Office 2002 Products, Windows Office 2003 Products, Windows 98 1st Edition, Windows 98 2nd Edition, Windows ME, Windows NT 351, Windows NT 4, Windows 2000 PRO, Windows 2000 Server, Windows XP Home PRO, Windows 2003 Server, Forensic Investigations, Data Retrieval, Federal State Military Courts, EnCase Version 3, EnCase Version 4, AccessData Forensic Tool Kit, AccessData Password Recovery Tool Kit, Quick viewPlus, ACDSee Systems Software, Logicube CloneNow, FastBloc FE IDE, S Tools, Data Retrieval Media Types, SanDisk, CD, CDRW, DVD, Hard Drives, Floppy Disks, Zip, Firewire, USB Hard Drives, Jazz Disks, Imaged Lotus Notes, Mail Servers, Exchange Mail Servers, CLE Training Session, Child Porn, Wrongful Termination, Breach of Employment Agreement,

Education and Certifications

University of Kentucky / Lexington Community College – Associates Degree in Applied Science

Kurzweil Voice for Windows Training and Voice Med. Training – Waltham, MASS.

2-week extensive MCSE Boot Camp (1999)
MCP (Microsoft Certified Professional)
MCP+I (Microsoft Certified Professional + Internet)
MCSE (Microsoft Certified Systems Engineer)

Microsoft Windows 95 Boot Camp

Microsoft Technical Seminars

Intel Seminars and On-Line Training

Hewlett Packard online training and tests

Self-taught Network + – Network + Certified

Self-taught A+ – A+ Certified

High Tech Crime Investigator Level II Training (2003) – Investigator Level II Certification

Association of Certified Fraud Examiners Training “Investigating By Computer” (2003)

5-day Forensic Boot Camp (CCE Prep) (2004) – CCE/Certified Computer Examiner

(Other Certifications Available upon Request)

Awards

The Army Commendation Medal
The Army Achievement Medal
2 – Honorable Discharges from the United States Army 1981 / 1986
Kentucky Colonel
(Other Awards Available upon Request)

Experience

Teaching Experience

Lectured for the University of Louisville Speed JS100 Course

Lectured for the Kentucky Technical Schools MCSE Course

Lectured for the Kentucky Legal Nurses Association

Lectured for KY Attorney Generals Office investigators and attorneys (Medicaid Fraud Division / Public Corruption)

Performed CLE Training Session for the Trial Defense Counsel for the US Army (TDS Region VII & VIII Spring Conference 20-23 May 2002)

Performed CLE Training Session for the Kentucky Civil Defense Counsel annual seminar –  2003 in Louisville KY

Conducted the CLE Training in Forensic Computer Investigations for Federal Public Defenders Office Cheyenne, WY – Nov. 2003 (Tom Fleener)

Lectured for KY Attorney Generals Office investigators, attorneys, technicians (Consumer Protection Division)

Performed Training Session for the Trial Defense Counsel for the US Army (TDS Region III Spring Conference April 2005, Kansas City, Missouri, LTC. Bradley), my presentation is called “Basic Training in Computer Forensics”

Related Experience and Expert Witness Cases

(Full Case list available upon request)

1988 – Present, General Manager / Technician, MCA, Inc., Lexington, KY
Design computer systems and servers, Passed multiple tests from HP/Compaq to be authorized to work on their specific computer equipment, Microsoft OEM/VAR/System Builder Programs / Microsoft Partner, Installed Novell server operating systems.

Work(ed) with Microsoft products and operating systems:  DOS, Windows 2.x, Windows 3.x, WFW 3.11, Windows 95 a & b, Windows Office Products 95-97-2000-2002-2003, Windows 98 1st and 2nd Editions, Windows ME, Windows NT 3.51 and 4, Windows 2000 PRO, Windows 2000 Server, Windows XP Home / XP PRO, and now Windows 2003 Server.

1999 – Present, CA, Inc., Computer Forensic Examiner / Expert Witness / Consultant Lexington, KY
Maintain a lab that allows a 24hour round the clock work force for large data harvesting projects/cases.

Sworn in as an Expert Witness in Forensic Computer Investigations and Data Retrieval in Federal and State Courts

I have used and currently used EnCase versions 1, 2, 2Pro, 3, 4, 5, AccessData Ultimate Forensic Toolkit, FastBloc FE, AccessData Password Recovery, Active UnEraser, R-Studio, X-Ways
Forensics, ISOBuster as well as other tools and utilities.

I conduct interviews with individuals to see what they say they experienced

I prepare PowerPoint presentations for trials, training and speaking engagements

I perform deposition consulting

I have retrieved data from various types of media:  SanDisk, CD/CDRW/DVD, Hard Drives, Floppy Disks, Zip, Firewire – USB Hard Drives and Jazz Disks etc .

Data Retrieval/Analysis (private family – showing credit card spending by son)

Imaged Lotus Notes Mail Servers, Exchange Mail Servers in different regions of the US

Data Retrieval/Analysis (Divorces, Civil, Private School A.U.P., KY D.O.T. A.U.P.)

Harassing Communications Case

Child Porn Case (Evidence Review)

Data Analysis

Child Porn Case

Data Retrieval/Analysis

Data Retrieval of deleted information or missing data due to viruses, system crashes, etc

Child Porn Case

Data Retrieval/Analysis

Child Porn Case Federal Public Defenders Office

Secure Data  / Email Resurrection-Recovery and Analysis (Mail Servers, PC’s, Notebook)

Embezzlement (private) – Turned evidence over to the local police.

Child Porn Case – (State Public Defenders Office)

Wrongful Termination / Breach of Employment Agreement (private/civil)

Secure Data / Analysis of media

Child Porn Case – (Evidence Review)

Child Porn Case – (Evidence Review)

Child Porn Case – Data Retrieval / Analysis / Evidence Review) (local police)

Child Porn Case – Evidence Review

Data Retrieval/Analysis on a client’s employee computer system to see if AUP was broken.

Data Retrieval/Analysis of hard drives that have been formatted (Divorce Case)

Data Retrieval/Analysis of hard drive to search through correspondence (Divorce Case)

Tracked and recovered emails sent via ship PC via satellite to receiving systems and servers

Child Porn Case – Evidence Review

Child Porn Case – Evidence Review

Forged Email – Family Court, was able to show email was fabricated and could never have been sent by defendant.

Assist in internal HIPAA audit for a University

Consult attorney in case

Consult attorneys in case on usage

Consult attorney – acquire media – perform analysis of acquired media

Consult attorney in case / evidence review

Consult attorney in case / evidence review

Consult attorney in case

Consult attorney in case / evidence review

Data Recovery of deleted financial records and hard drive appeared to have been restored from manufacturers’ settings – retrieved Intuit Quickbooks Pro company record – .QBW file.

Data Recovery – recovered all E-mail files that were deleted after the manufacturers’ restore CD had been used

Data Recovery – 1gb MicroDrive – recovered images deleted from drive

Secure Data in Search and Seizure / Analysis

Consult attorney in case

Recovered data from failed “stripe set” on system

Consult attorney in case

Consult attorney in case

Consult attorney in case / evidence review

Consult attorneys – secure data – image and clone media – analyze data from keyword searches

Consult attorney / secure data (civil) (Manager 600+ man-hour data harvesting project)

Consult attorney in case

Secure Data in Search and Seizure / Analysis

Consult attorneys – secure data – analyzed data flow – report findings

Consult attorneys / Acquired Server / Acquired Workstation / perform data analysis and reporting in case (civil)

Consult attorneys in case / acquire electronic media / analyze data from search hits supplied

Consult attorney in case / perform evidence review (Trial Consulting)

Consult attorney in case / review-recover data from electronic media-acquire media

Consult attorney in case – review videos and print expanded images

Data Recovery from USB JumpDrive for attorney

Consult attorney in case

Consult attorney in case / perform data acquisitions – analysis / evidence review

Data Recovery on SATA drive using Tableau write block through EnCase

Consult attorney / perform data acquisitions – analysis / evidence review

Data Acquisition/ Secure Data / Establish and Document Chain Of Custody of electronic media and systems

Consult attorney / evidence review

Consult attorney / evidence review

Consult attorney / perform data acquisition

Consult attorney / secure data / evidence review / analysis

Consult attorney / Secure Data / Document Chain-of-Custody

Consult attorney / evidence review (Trial Consulting)

Consult attorney / evidence review / report findings

Consult attorney / evidence review (Trial Consulting)

Consult attorney / evidence review

Memberships

Certified Computer Examiner (CCE)

Member ISFCE (International Society of Forensic Computer Examiners)

Associate Member of Association of Certified Fraud Examiners

Member High Tech Crime Network

Elected to the Executive Board of Directors for Central and Eastern KY Better Business Bureau – Corporate Secretary 2003-2004

Elected to the Executive Board of Directors for Central and Eastern KY Better Business Bureau – First Vice Chair/Chair Elect 2004-2005

Elected to the Executive Board of Directors for Central and Eastern KY Better Business Bureau – Chairman of the Board Elect 2005-2006

Appointed to the State of Kentucky’s Technology Task Force (1999)

Judge for the Kentucky Technical High School Computer Repair Contest

CIS (Computer Information Systems) Advisory Committee for Lexington Community College

Lifetime Membership Disabled American Veterans (DAV)

Member of the American Legion

Speak With This Expert For Free

Request This Expert

Can’t Find The Right Expert?

Click Here & We Will Help You