Computer Security Expert Witnesses: 9

Dr. Stephen Castell, Chartered Information Systems Practitioner and Member of the Expert Witness Institute, is Chairman of CASTELL Consulting. He is an internationally acknowledged Independent Computer Expert who has been involved in a wide range of computer litigation over many years. CASTELL Consulting, currently in its twenty-fifth year, provides independent professional consultancy and expert services in Computer Systems, Software, Project Management, Strategy, and Contract Disputes, to a wide variety of international clients and companies. 

As an Expert Witness in computer litigation, Dr. Castell has acted in over 100 major cases including the largest and longest computer software actions to have come to trial in the English High Court. He is the author of the best-selling Computer Bluff (1983), and of The APPEAL Report (1990) on the admissibility of computer evidence in court and the 'legal reliability' of information systems and technologies (with the CCTA).

Dr Castell, award-winning international Professional ICT Consultant and Expert has acted as expert witness in an unusual medical equipment procurement litigation of relevance to the current Covid-19 pandemic and its profound clinical and hospitalisation implications.  The court case, specific details of which cannot be given since the matter is subject to Confidentiality Hearing strictures, was over a dispute concerning due and diligent process undertaken by a major Hospital Management Group, the Defendant in the action, in issuing a Tender for complex diagnostic units, and the Group’s selection of the bid put in by a US corporation, a leader in its field.  That winning bid was challenged by a Claimant, another US corporation, a market competitor to the winning company.  The dispute hinged on whether or not the operational computer software of the winning bidder’s units was compliant with the Hospital Management Group’s strict Tender stipulation that the software had to be identical across all versions of the equipment to be supplied in meeting the Tender requirements.  

Dr Castell’s investigation and analysis of the operational software involved, and his opinion as to the extent that the software was compliant with the strict Tender condition, provided insight and assistance to the parties in reaching a satisfactory settlement.

CyberTruth, LLC is a full-service Digital Forensics expert witness consultancy that provides services primarily to law firms in both civil and criminal defense cases. They provide analysis, reporting and testimony in cases involving a wide range of Digital Devices and Cloud Services, as well as Audio and Video Evidence Analysis. 

John H. Morris, Esq., Owner and Principal Analyst at CyberTruth, has over 40 years of experience in technology, including 17 years at Microsoft in a variety of technical services roles. Mr. Morris left Microsoft to open Nashville Vanguard Law and, later, CyberTruth, allowing him to focus on working with those who needed his expertise most. 

Mr. Morris is licensed to practice in the Tennessee state courts, admitted to practice in the Middle District Tennessee Federal Court, pending admission to Eastern District Tennessee Federal Court, as well as admitted Pro Hac Vice to the Southern District of New York Federal Court. He is a current member of the Tennessee Bar Association (TBA), Tennessee Association of Criminal Defense Lawyers (TACDL), Tennessee Trial Lawyers Association (TTLA), and American Society of Digital Forensics and eDiscovery.

Litigation Support - Mr. Morris works with criminal defense attorneys, civil litigators, divorce attorneys, and select Individuals. He has provided analysis, expert reports, and testimony in hundreds of cases and can provide numerous references as to the results. 

Depending on the case, Mr. Morris serves as a forensic expert with years of experience in finding digital evidence others have tried to hide, an expert witness able to reinforce or disprove forensic practices and results, an assisting attorney for lead attorneys in need of a technology-oriented second chair, or as a provider of eDiscovery for small and midsized firms otherwise unable budget for such services.

Areas of Expertise:

• Audio / Video Forensics - CCTV, traffic cameras, teller machines, police cameras, and cell phones; Digital media authentication, Exif (Exchangeable Image File Format) analysis for audio and video files, Forensic data analysis and interpretation, Media conversion, Recovery of deleted or corrupted data, Audio / video editing, Demonstrative exhibit creation
• Cell Phone Forensics - Contacts, Photos, Calendars, Notes, SMS and MMS messages, Video, Email, Web browsing information, Location information, Social networking messages, Social networking contacts
• Cellular Technology / Tracking - Navigation data analyzed for position and location to forensically reconstruct traveled path
• Cloud Forensics - Locating, identifying, and separating suspected or compromised data for OneDrive, Dropbox, Google Drive, Box, iCoud, Sharepoint, iDrive
• Computer Forensics / eDiscovery - Identify, collect, examine, and preserve evidence stored on digital media including E-mail, Activity logs, Correspondence, User documents, Internet activity, Browser history, Computer backups, Email archives, Wifi history, Hard drives, Recovery of deleted data, Intrusion detection, Spyware detection, Malware detection
• IoT Forensics - Electronic devices including gaming consoles Home automation (Alexa, Simplisafe, Ring, etc), Fitness trackers, Automotive, Infotainment, Office equipment, Database analysis
• Social Media Forensics - Analysis of platforms including Facebook, Instagram, Twitter, Discord, Reddit, Match, Tinder, LinkedIn Signal, What's App, Periscope, MeWe, Tumblr, YouTube, Snapchat, and more.

Matthew Albee, CFCE, EnCE, SCERS is a Computer Forensics expert with over 20 years of experience in his field. He currently serves as project manager and lead examiner on computer forensic and e-discovery cases for DataChasers, Inc.

Background Experience - Since 1996, Mr. Albee has been a Special Agent for the State of California Franchise Tax Board and the Board of Equalization where his responsibilities include equipping and maintaining the computer forensic laboratory, and conducting investigations that involved financial and computer crimes. Since 2012, he has served as a Course Evaluator /Subject Matter Expert for the Office of Anti-Terrorism Assistance (ATA), Diplomatic Security Service, United States Department of State.

Mr. Albee's experience with computer forensics runs the gamut from individual PCs to major corporations(references available), and includes every level and scope of examination. He has consulted to both public and private organizations and maintain a complete computer forensics laboratory.

Litigation Support - Matthew Albee has the distinction of having served as Special Master to Federal Court, as well as being the expert of record in numerous Superior and Municipal courts. He has extensive litigation experience as an expert witness and have testified for both civil and criminal cases. Mr. Albee has experience with employment law, family law, and criminal law cases.

Areas of Expertise:

Computer Forensics Cell Phone Forensics E-discovery Intellectual Property Disputes Unauthorized Computer Use

Restore Hidden, Deleted, Lost Files Restore Hidden, Deleted, Lost Files Images File Dates: Created, Modified, Deleted Internet History Tracking Email Recovery

View Matthew Albee's Consulting Profile.

Envista Forensics is a global leader in Forensic Engineering & Recovery Solutions. They provide Cause & Origin, Failure Analysis, Fire and Explosion Investigations, Accident Reconstruction, Damage Evaluations and Equipment Restoration Services following disasters of all kinds. Envista has offered Consulting Services to the insurance, legal and risk management industries, as well as businesses, public entities, and universities for over 25 years.

Their Experts travel globally from 30 offices located across the U.S., Canada, Mexico, the U.K., Australia and Singapore. Envista's experience counts when equipment, systems, structures, or data have been threatened by catastrophe or litigation. Their experts and advisors determine cause and responsibility, and identify the nature and extent of damage or loss and provide a full range of solutions to protect their assets.

Envista's technical professionals are trusted advisors and industry leaders. Their expertise is broad and deep, capable of withstanding all forms of scrutiny. Envista's services are available globally so that certainty is assured no matter where in the world it is needed. As the recovery from disasters has grown more complex, Envista has developed a comprehensive array of services to help their clients and has associates located around the globe to provide assurance no matter the type of loss or location of the disaster. Envista helps attorneys quickly get to meaningful answers on the many technical issues at the center of a dispute. Their engineers have decades of experience working with both defendants and plaintiffs.

They offer effective Expert Witness Testimony, with the ability to communicate effectively, build rapport with juries and judges, and maintain adherence to structured, methodical approaches in drawing conclusions are all extremely critical. Envista Forensics understands how critical the selection of an expert can be, and we understand what makes experts effective. Their court qualified experts have extensive experience providing expert testimony on a wide variety of engineering and technical matters.

Areas of Expertise:

Aviation & Aerospace Biomechanics Construction Defects Digital Forensics Electrical Injury & Electrocutions Causation Chemical Computer / Network Equipment Failure Construction Defect Disputes over Reparability of Damage Electrical Failure Equipment Restoration Fire & Explosion Analysis Equipment Restoration

Industrial / Manufacturing Equipment Materials Failure Mechanical Accidents Mechanical Failure Medical / Laboratory Equipment Product Failure / Liability Project Management Structural Failure Subrogation Utility & Energy Valuation of Structures or Equipment Vehicle Accident Investigation Workplace / Premises Accidents

View Envista's Consulting Profile.

We have offices throughout the US and have worked on more than 3,000 cases in 41 states and multiple countries. There is a reason Garrett Discovery is hired by the top trial attorneys in the nation. 

Garrett Discovery has a team of expert witnesses providing Litigation Services in Digital Forensics, Auto and Truck Accidents, Intellectual Property Theft, Mobile Forensics, EDR Forensics, Cell Tower, Call Detail Records, Electronic Medical Record Analysis, and Medical Malpractice Forensics. No matter how complex the case, they can help you discover what happened and present it in a way that everyone can understand. 

Our clients range from the largest law firms to private firms, large corporations, the Department of Defense, government agencies, advocacy groups, the DOJ to the innocence projects. 

Garrett Discovery is a large firm that has experts in the following concentrations: 

Computer Forensics Child Pornography / Sex Crime Cases Call Detail Records (NELOS, CDR, RTT) Video Forensics Audio Forensics Image Authentication eDiscovery Server Forensics Tablet Forensic Services

Cell Phone Forensics Cellular GPS and Call Analysis Cloud Stored Data Collection Social Media Collections DVR Examinations and Recovery IOT Devices Medical Record and Audit Trails Digital Image Authentications Jury Selection Services

C. Matthew Curtin, CISSP  Founder and CEO of Interhack is a Certified Information Systems Security Professional. An Expert in Computers and Information Technology, Mr. Curtin and his team at Interhack help attorneys and executives use data and computer technology in high-stakes situations. 

Mr. Curtin's work has been at the cutting edge of the intersection of law and technology. The U.S. Court of Appeals for the First Circuit relied on Interhack's forensic computing practice and Mr. Curtin's expert opinion when it established standards for application of Federal wiretap statutes to Web technology, In re Pharmatrak Privacy Litigation (see link above). 

Academic references to their work include the Stanford Law Review and university courses throughout the world. Mr. Curtin maintains a regular academic appointment as a Senior Lecturer at The Ohio State University's Department of Computer Science and Engineering. He currently chairs the Recruitment subcommittee of the Business Advisory Network that advises the Ohio Department of Education's standards for technology education in secondary and postsecondary schools throughout the state. 

C. Matthew Curtin's services are available for plaintiffs, defendants, and for the courts directly on technical matters. 

Areas of Forensic Expertise:

• Electronic Discovery
• Preservation and Forensic Analysis of Data
• Complex Analysis of Non-Standard Data Sets
• Investigations
• Data Breaches

View Mr. Curtin's Consulting Profile.

Scott Cooper, Principal at Pegasus Squire, is retained by corporate and legal clients to deliver successful experience-based proactive and reactive solutions involving Electronic Discovery and Computer Forensics, Tactics and Strategy, and Expert Witness testimony and related services. He has over 30 years of experience in this space and has been recognized as an Industry Leader by the Southern California Business Journal, and have been featured in the New York Times.

Mr. Cooper's clients have included The White House, The US Department of Justice, General Electric, Exxon, Kirkland & Ellis, O’Melveny & Myers, Skadden Arps, and many other large national and international corporations and law firms dealing with litigation and internal (and external) investigations.

Litigation Support - A nationally recognized Expert in both Federal and State courts, Mr. Cooper has been utilized as a special master and designated as a court-appointed referee. He has also been involved in successfully supporting no-notice ex-parte computer evidence seizure motions and orders. Mr. Cooper's cases involve major corporate, financial, and oil & gas entities. His forensic services help companies and their lawyers through the steps associated with internal inquiries, governmental investigations, and litigation matters.

 Mr. Cooper's most notable engagement includes working with the prevailing party on the nation’s largest corporate Intellectual Property Theft case, which created numerous Federal precedents in the area of Electronic Discovery.

Areas of Expertise: 

Electronic Discovery Electronic Recovery Computer Forensic Analysis Intellectual Property Theft Industrial Espionage / Corporate Theft

Computer Systems Electronic Infrastructure Services Government Investigations Business Fraud Family Law Matters

View Pegasus Squire Inc.'s Consulting Profile.

Setec Investigations offers unparalleled expertise in computer forensics and electronic discovery, providing highly personalized, case-specific forensic analysis and litigation support services to assist in the investigation, handling, and prosecution of computer-related crimes or misuse.

Setec Investigations combines today's most advanced computer forensics and litigation support expertise with a business- and legal-friendly approach, resulting in a sound analytical foundation that carefully balances critical investigative requirements with vital legal and evidentiary needs.

Setec Investigations incorporates a cross-disciplinary team comprised of computer forensic investigators, attorneys, law enforcement specialists, and seasoned business professionals who have established a proven track record of success since 1997.

Services Overview

Setec Investigations possesses the necessary combination of technical expertise, understanding of the legal system, and specialized tools and processes enabling the discovery, collection, investigation, and production of electronic information for investigating and handling computer-related crimes or misuse.

Explore our range of service offerings:

Computer Forensic Investigations

Computer forensics and enterprise investigation services identify, gather, analyze, and preserve electronic evidence to establish a sustainable posture for internal or legal action.

Electronic Discovery

Manage large volumes of electronic data and quickly identify and isolate electronic evidence that is critical to the success of a litigation.

Litigation Support

Legal consultants and attorneys translate litigation issues into strong case strategies that effectively utilize electronic evidence.

Expert Witness

Supports the resolution of security incidents and active litigations by offering impartial and independent expert testimony, opinions, and customized reports in legal proceedings.

Tony Mason has 34 years of experience helping attorneys solve complex Computer Operating System issues. His experience includes software development, teaching and writing about technology, and working with dozens of companies in a consulting role to solve their problems. 

Mr.  Mason has worked with multiple operating systems including Microsoft Windows, UNIX, and Linux. He is the author of two books, including, Windows NT Device Driver Development, several peer-reviewed papers, and numerous non-peer-reviewed publications. 

Mr. Mason is the primary inventor on 12 patents:

US/9830329 Methods and Systems for Data Storage US/9600486 File System Directory Attribute Correction US/9535759 Work Queue Thread Balancing US/8990228 Arbitrary Data Transformation US/8903874 File System Directory Attribute Correction US/8539228 Managing Access to a Resource

US/8521752 Arbitrary Data Transformations US/8024433 Managing Application Resources US/7809897 Managing Lock Rankings US/7512748 Managing Lock Rankings US/7949693 Log-Structured Host Data Storage US 15/791,486 Methods and Systems for Data Storage

Litigation Support - Mr. Mason has gained extensive experience clearly explaining technical subjects so they are easily understood by non-experts. His expert witness services primarily focus on assisting in the preparation of materials necessary for computer operating systems patent litigation. He provides research, prepares reports, and explains technical terms clearly and lucidly. He is available for depositions and trial testimony as needed.

Areas of Expertise:

Distributed Computing Networking Data Storage Forensics Recovery File Meta-data Encryption Compression Computer Security Encryption Anti-virus Authentication Authorization Computer Networks

Blockchain Distributed Systems Network Protocols RDMA Code Analysis Code Analysis Comparison Reverse Engineering Code Failure Analysis Debugging Artificial Intelligence (AI) Machine Learning, Adversarial Learning Reinforcement Learning

View Mr. Tony Mason's Consulting Profile.