Experience
Rune Forensics is led by Alexander Harbitz, a digital forensic examiner with experience in forensic casework, report writing, testimony, law enforcement investigations, and digital forensics education.
Background
Alexander Harbitz is a digital forensic examiner and the founder of Rune Forensics. His work has involved forensic review of mobile devices, computers, cloud records, email evidence, application data, and disputed digital evidence in legal and investigative matters.
His background includes forensic casework, law enforcement investigations, report writing, testimony, and digital forensics education. That experience shapes how Rune Forensics approaches each matter: define the question, preserve the relevant evidence, analyze the source records, document limitations, and explain the findings clearly.
Legal and investigative work
Digital evidence is reviewed with attention to source data, timing, context, and the limits of the available records. The goal is to answer the relevant question, not to overwhelm the matter with unnecessary technical output.
Findings are organized so attorneys, courts, and other reviewers can understand what was reviewed, what was found, what remains uncertain, and what the evidence can reasonably support.
Teaching digital forensics requires translating technical concepts without losing accuracy. That same approach carries into reports, consultations, and testimony preparation.
Certifications
Certifications matter, but judgment matters more. These credentials reflect training across forensic methodology, mobile evidence, computer evidence, cybersecurity, and investigative review.
CISSP
CFCE
CCME
MCFE
CMDE
CAWFE
CHFI
CEH
Working method
The work starts with the question that needs to be answered. Tools help process evidence, but they do not define the scope of the analysis.
Important findings are checked against source artifacts, timestamps, metadata, logs, application records, and surrounding context.
Missing data, tool limitations, uncertainty, and alternate explanations are identified when they affect the strength of a conclusion.
The final work product should be clear enough to use, detailed enough to review, and restrained enough to defend.
Independent review
Rune Forensics can review devices, account records, reports, extractions, timelines, and disputed digital evidence.
Request consultation