Qualifications
Credentials and professional experience.
I provide independent digital forensic examination, consultation, reporting, and testimony support for matters involving devices, accounts, communications, files, and disputed forensic conclusions.
Certifications
Forensic and technical certifications
Certifications reflect training, testing, and continuing education.
CISSP
Certified Information Systems Security Professional
ISC2
CFCE
Certified Forensic Computer Examiner
IACIS
CCME
Cellebrite Certified Mobile Examiner
Cellebrite
MCFE
Magnet Certified Forensics Examiner
Magnet Forensics
CMDE
Certified Mobile Device Examiner
IACIS
CAWFE
Certified Advanced Windows Forensic Examiner
IACIS
CHFI
Computer Hacking Forensic Investigator
EC Council
CEH
Certified Ethical Hacker
EC Council
Professional background
Qualifications relevant to forensic opinion
I am a digital forensic examiner and the founder of Rune Forensics. I provide independent forensic analysis for attorneys, businesses, insurers, agencies, and individuals.
I have performed forensic work in government and private consulting contexts involving law enforcement investigations, digital evidence examinations, forensic report writing, testimony, litigation consultation, and digital forensics instruction.
That experience is relevant because forensic opinions are evaluated through records, methods, documentation, and limits. My work is organized so the evidence reviewed, the process followed, and the basis for any opinion can be understood and challenged.
- Practice
Independent digital forensic examination and review.
- Investigation
Government forensic work and law enforcement investigations.
- Work product
Forensic reports, consultation, testimony, and attorney support.
- Instruction
Digital forensics education and technical explanation.
Areas of professional experience
Forensic work commonly involved in legal and investigative matters
These areas describe the types of records and technical questions I am regularly asked to evaluate.
Mobile devices
Review of phone extractions, messages, application data, media, location related records, notifications, account artifacts, and device activity.
Computers
Review of file activity, user activity, internet history, deleted data questions, external storage records, operating system artifacts, and logs.
Cloud and account evidence
Review of provider exports, cloud storage activity, login events, audit logs, synced data, account records, and activity that may need to be compared with device artifacts.
Email and BEC analysis
Review of mailbox access, message handling, forwarding rules, suspicious sign ins, authentication records, payment diversion timelines, and related account activity.
Business investigations
Review of account access, email activity, file movement, cloud sync, employee device activity, external storage use, and business system records.
Independent forensic review
Evaluation of prior reports, law enforcement extractions, timelines, methods, assumptions, omitted artifacts, and conclusions when a second forensic opinion is needed, including for criminal defense counsel.
Report writing
Preparation of reports that identify what was reviewed, how the work was performed, what was found, what remains unknown, and the basis for any opinion.
Consultation and testimony
Support for attorneys through consultation, report review, deposition preparation, testimony support, and explanation of technical findings.
Independent review
Need an independent forensic examiner?
If a matter involves devices, account records, reports, extractions, timelines, metadata, deleted data questions, or disputed digital evidence, Rune Forensics can review the record and explain what the evidence supports. A current CV is available on request.
Request Consultation