Incident Response Expert Witnesses

Los Angeles, California

Computers, Information Technology - Digital Forensics, Computer Forensics, Electronic Evidence, Electronic Discovery, eDiscovery, Email Analysis, Mobile, Computers, Cybersecurity, Cyber Breach Investigations, Cyber Investigations, Incident Response, DFIR

Dr. Joseph Greenfield is the Vice President and Chief Forensic Examiner at Maryman & Associates and an award-winning educator. He is a renowned computer forensics expert with over 15 years of investigative experience, including cyber breach investigations, employee misconduct, and email recovery and analysis. He has worked over 1000 cases and analyzed over 2000 pieces of digital evidence. His is known for deep forensic analysis while being able to explain technical details to non-technical decision-makers. He has provided expert witness testimony in state, federal, and international legal matters. Dr. Greenfield is also an Associate Professor of Information Technology Practice at the Viterbi School of Engineering at the University of Southern California, where he authored the undergraduate programs in both cybersecurity and digital forensics. In 2014, the Ponemon Institute ranked USC as 6th in the nation for “Best Schools for Cybersecurity” and the highest ranked on the West Coas...

Elizabeth, Colorado

Premises Liability, Security - Inadequate/Negligent Security, Premises Liability, Crime Foreseeability, Risk Management, Risk Assessment, Night Club, Vulnerability Assessment, Security Program, Incident Response, Health Care, Security Training, Security Assessments, Security Management, Video Surveillance, Security Audit, Retail, Hospitality, Cannabis

Shawn F Wurtsmith, MBA, PSP (Available Nationwide) Primary Areas of Expertise: Premises Liability & Security Negligence Credentials: Physical Security Professional (PSP), ASIS International (2011) | C-TPAT Certification, US Dept. of Transportation (2009) | CFATS Certified, US Dept. of Homeland Security (2008) | Private Pilot's License (1990) Professional Affiliations: ASIS | IAPSC | SIA | IAHSS | SEAK Expert Witness Directory | Expert Institute (IQ) Education: MBA – Business Administration, University of Phoenix | BA – Biology, University of Northern Colorado About Shawn Wurtsmith is an independent security consultant who helps legal teams win premises liability and security negligence cases. With deep expertise spanning healthcare, hospitality, retail, cannabis, and commercial settings, he provides the analysis, documentation, and testimony attorneys need at every stage of litigation. What I Deliver for Your Case: Case Assessment & Strategy — Rapid identification of security...

Lewes, Delaware

Digital Forensics, Cybersecurity - Computer Forensics, Ransomware, Hacking, Metadata Analysis, Mobile Forensics, Cloud Forensics, Phishing, Everlaw, Incident Response, eDiscovery, Spoofing, Cellebrite, Business Email Compromise, Data Recovery, Data Preservation, EnCase, cyber, breach, Malware, Threat Actor Negotiations

Founder of DFDR Consulting LLC, now doing business as, CYBIR. Over the course of eighteen years, Nelson has consulted on, examined and testified to digital evidence related to personal, corporate, criminal, civil and domestic cases, along with data breaches. Acknowledged in “EnCE The Official EnCase Certified Examiner Study Guide” (Second and Third Editions) and “Mastering Windows Network Forensics and Investigation” (Second Edition), Nelson has also been published in eForensics Magazine for SQL investigation techniques. As a speaker, in addition to industry conferences and events, Nelson serves on the faculty of National Business Institute for CLEs and was a past Adjunct Professor of Digital Forensics. Industry credentials include: AccessData Certified Examiner (ACE), AccessData Mobile Examiner (AME), Certified Computer Examiner (CCE), Cellebrite Certified Mobile Examiner (CCME), Certified Data Recovery Professional (CDRP), Certified Ethical Hacker (CEH), Certified Forensic Compute...

Fort Lauderdale, Florida

Digital Forensics, Cybersecurity - Incident Response, Mobile device forensics, Cloud forensics, Ransomware investigations, Insider threat & data exfiltration, Email compromise investigations

Digital Forensics Examiner & Expert Witness (Computer & Mobile) with 20+ years’ experience and prior law-enforcement service, including work with the U.S. Secret Service Cyber Task Force. I help counsel in civil and criminal matters preserve, collect, analyze, and explain digital evidence from computers, mobile devices, and cloud sources, using defensible, repeatable methods aligned to chain-of-custody and Daubert/Frye standards. Litigation specialties: iPhone/Android extractions (texts, iMessage, WhatsApp, photos, location, app usage), Windows/macOS analysis (deleted files, timelines, browser/USB artifacts), email and cloud (M365, Google Workspace, iCloud/Drive/OneDrive/Dropbox), metadata/authentication (hashing, EXIF, document properties), timeline reconstruction, spoliation and deletion analysis, rebuttal reports, and testimony. How I support attorneys: tailored ESI collection plans and protocols, neutral/party examinations, clear court-ready reports, deposition and trial testi...

Grand Rapids, Michigan

Digital Forensics, Cybersecurity - Cell Phone Forensics, Call Detail Records, EMR/EHR Forensics, Cell Tower Triangulation, GPS Triangulation, Computer Forensics, Technology, Data Communications, Data Retrieval & Analysis, Digital Media, Email, GPS Systems, iCloud Data, Telecommunication, Internet, Software, Malware Analyst, Incident Response

Jeff Martin is a Digital Forensics Expert specializing in Cell Phone Forensics, Black Box/EDR Forensics, Cybersecurity, EMR/EHR Forensics, Audio/Video/Imagery Forensics and more. Jeff has conducted hundreds of digital forensics investigations on cases involving the acquisition, preservation, and analysis of data in legal disputes in both state and federal courts. Jeff is a certified digital forensics examiner with over 15 years of experience. He initially made a mark as a small business IT consultant, lauded for his knack for simplifying technical information to non-technical audiences. Following a successful decade as the Director of Information Technology & Security in the Financial Industry, he earned the Certified Credit Union Executive (CCUE) certification after attending the Credit Union National Association’s (CUNA) Management School. Jeff then applied his passion for technology to solving crimes as a Digital Forensics Analyst for the Michigan State Police. Today, Jeff is...

Ray, Ohio

Technology, Cybersecurity - Digital Forensics, Mobile & Computer Forensics, Cyber Investigation, Vehicle Forensics, Call Detail Records, Data Recovery, GPS, ELD/ECM Downloads, eDiscovery, Cloud Forensics, IoT Forensics, Chip-Off Forensics, UAS Pilot, Drone Forensics/Services, DFIR, Licenced PI, Cybersecurity, Incident Response, DVR Forensics, Cell Phone Forensics

I am an experienced digital forensics professional specializing in the analysis of mobile devices, vehicle forensics, computers, cyber investigations, and digital artifacts to support legal, investigative, and security matters. My work focuses on extracting, validating, and interpreting complex technical evidence in a clear, defensible manner, with experience in data preservation, forensic imaging, timeline reconstruction, and expert reporting. I am committed to accuracy, integrity, and translating technical findings into actionable insights for legal and investigative teams.

Montgomery, Texas

Maritime, Safety - Vessel Management, Oil Tankers, Chemical Tankers, Gas Carriers, Bulk Carriers, Ferries, Marine Terminals, Incident Response, Accident Investigations, Personal Injury, Fires, Collisions, Allisions, Groundings, Loss Control, Vessel Salvage, Offshore Operations, Marine Pilots, Navigation and Waterways

Master Mariner and Marine Manager with more than 40 years of proven global experience in managing shoreside, shipboard, offshore facility, and terminal operations within the petroleum industry. Successfully resolved complex issues by collaborating with international, federal, state, and local agencies. Recognized as an industry expert in terminal operations, incident management, safety, quality, and environmental affairs. Demonstrated proficiency in conducting port, terminal, and offshore assessments to optimize operations and improve safety. Known for utilizing a robust network of global marine experts to effectively manage risk and enhance the performance of marine assets. Responded to the Exxon Valdez oil spill and Deputy Incident Commander for the salvage of the OMI Charger in Galveston Bay. 30+ years as a member of a major oil company Tier One Incident Response Team responding to actual oil spills, salvage operations, fires, vessel collisions, groundings and allisions. Partic...

Stafford, Virginia

Cybersecurity, Information Technology - Cybersecurity, CMMC, Government Compliance, Algorithmic Discrimination, Expert Witness, Data Breach, System Security Plan (SSP), IT Risk Assessment, Machine Learning, Digital Civil Rights, FISMA, Incident Response, Artificial Intelligence, AI Ethics, Federal IT, NIST 800-53, Vulnerability Management, AI Bias, Automated Decision-Making

Dr. Celeste Chamberlain is an expert in cybersecurity processes and procedures, federal IT policy, and AI governance. She offers expert witness services in litigation involving data breaches, federal compliance failures, AI bias, digital civil rights, and emerging technology risk. With over 20 years of experience in both public and private sector cybersecurity, Dr. Chamberlain brings deep technical knowledge, strong communication skills, and policy-level insight to every case. Dr. Chamberlain holds a doctorate in Emergency Management with a focus on cyber incident response. She currently serves as a professor of AI, cybersecurity, and quantum computing at the University of Maryland Eastern Shore. She is also the President of Information Protection Solutions (IPS), a federal IT and cybersecurity firm with a track record of success supporting agencies such as the FBI and FEMA. Her work includes managing system security plans (SSPs), assessing FISMA/NIST 800-53 compliance, implementin...