Incident Response Expert Witnesses

Los Angeles, California

Computers, Information Technology - Digital Forensics, Computer Forensics, Electronic Evidence, Electronic Discovery, eDiscovery, Email Analysis, Mobile, Computers, Cybersecurity, Cyber Breach Investigations, Cyber Investigations, Incident Response, DFIR

Dr. Joseph Greenfield is the Vice President and Chief Forensic Examiner at Maryman & Associates and an award-winning educator. He is a renowned computer forensics expert with over 15 years of investigative experience, including cyber breach investigations, employee misconduct, and email recovery and analysis. He has worked over 1000 cases and analyzed over 2000 pieces of digital evidence. His is known for deep forensic analysis while being able to explain technical details to non-technical decision-makers. He has provided expert witness testimony in state, federal, and international legal matters. Dr. Greenfield is also an Associate Professor of Information Technology Practice at the Viterbi School of Engineering at the University of Southern California, where he authored the undergraduate programs in both cybersecurity and digital forensics. In 2014, the Ponemon Institute ranked USC as 6th in the nation for “Best Schools for Cybersecurity” and the highest ranked on the West Coas...

Elizabeth, Colorado

Premises Liability, Security - Inadequate/Negligent Security, Premises Liability, Crime Foreseeability, Risk Management, Risk Assessment, Night Club, Vulnerability Assessment, Security Program, Incident Response, Health Care, Security Training, Security Assessments, Security Management, Video Surveillance, Security Audit, Retail, Hospitality, Cannabis

Shawn F Wurtsmith, MBA, PSP (Available Nationwide) Primary Areas of Expertise: Premises Liability & Security Negligence Credentials: Physical Security Professional (PSP), ASIS International (2011) | C-TPAT Certification, US Dept. of Transportation (2009) | CFATS Certified, US Dept. of Homeland Security (2008) | Private Pilot's License (1990) Professional Affiliations: ASIS | IAPSC | SIA | IAHSS | SEAK Expert Witness Directory | Expert Institute (IQ) Education: MBA – Business Administration, University of Phoenix | BA – Biology, University of Northern Colorado About Shawn Wurtsmith is an independent security consultant who helps legal teams win premises liability and security negligence cases. With deep expertise spanning healthcare, hospitality, retail, cannabis, and commercial settings, he provides the analysis, documentation, and testimony attorneys need at every stage of litigation. What I Deliver for Your Case: Case Assessment & Strategy — Rapid identification of security...

Lewes, Delaware

Digital Forensics, Cybersecurity - Computer Forensics, Ransomware, Hacking, Metadata Analysis, Mobile Forensics, Cloud Forensics, Phishing, Everlaw, Incident Response, eDiscovery, Spoofing, Cellebrite, Business Email Compromise, Data Recovery, Data Preservation, EnCase, cyber, breach, Malware, Threat Actor Negotiations

Founder of DFDR Consulting LLC, now doing business as, CYBIR. Over the course of eighteen years, Nelson has consulted on, examined and testified to digital evidence related to personal, corporate, criminal, civil and domestic cases, along with data breaches. Acknowledged in “EnCE The Official EnCase Certified Examiner Study Guide” (Second and Third Editions) and “Mastering Windows Network Forensics and Investigation” (Second Edition), Nelson has also been published in eForensics Magazine for SQL investigation techniques. As a speaker, in addition to industry conferences and events, Nelson serves on the faculty of National Business Institute for CLEs and was a past Adjunct Professor of Digital Forensics. Industry credentials include: AccessData Certified Examiner (ACE), AccessData Mobile Examiner (AME), Certified Computer Examiner (CCE), Cellebrite Certified Mobile Examiner (CCME), Certified Data Recovery Professional (CDRP), Certified Ethical Hacker (CEH), Certified Forensic Compute...

Fort Lauderdale, Florida

Digital Forensics, Cybersecurity - Incident Response, Mobile device forensics, Cloud forensics, Ransomware investigations, Insider threat & data exfiltration, Email compromise investigations

Digital Forensics Examiner & Expert Witness (Computer & Mobile) with 20+ years’ experience and prior law-enforcement service, including work with the U.S. Secret Service Cyber Task Force. I help counsel in civil and criminal matters preserve, collect, analyze, and explain digital evidence from computers, mobile devices, and cloud sources, using defensible, repeatable methods aligned to chain-of-custody and Daubert/Frye standards. Litigation specialties: iPhone/Android extractions (texts, iMessage, WhatsApp, photos, location, app usage), Windows/macOS analysis (deleted files, timelines, browser/USB artifacts), email and cloud (M365, Google Workspace, iCloud/Drive/OneDrive/Dropbox), metadata/authentication (hashing, EXIF, document properties), timeline reconstruction, spoliation and deletion analysis, rebuttal reports, and testimony. How I support attorneys: tailored ESI collection plans and protocols, neutral/party examinations, clear court-ready reports, deposition and trial testi...

Buffalo Grove, Illinois

Cybersecurity, Digital Forensics - Cybersecurity, Standard of Care, Pen Testing, Remediation, Expert Witness, Risk Management, Governance, Regulatory Audit, AI Governance, Cloud Security, Litigation Support, Infrastructure, M&A Integration, Due Dilligence, Data Privacy, Due Dilligence, Data Breach, Incident Response, Risk Mitigation, Compliance

PROFESSIONAL BIOGRAPHY I am a senior Cybersecurity and Project Management Consultant with 5 years of intensive, high-stakes experience securing, auditing, and remediating environments for Fortune 500 enterprises. My practice bridges the gap between complex technical infrastructure and corporate boardroom strategy, delivering evidence-based insights for legal counsel in litigation, due diligence, and regulatory proceedings. EXPERTISE & CORE COMPETENCIES My practice focuses on the technical "Standard of Care" in three critical areas: Cybersecurity Governance & Remediation: Extensive experience in large-scale cyberdefense and remediation for global organizations like United Airlines. I evaluate the effectiveness of security controls and pen-testing programs against industry benchmarks to identify gaps and failures. AI Governance & Cloud Security: Specialized experience in the architecture of AI-driven ecosystems and cloud-based infrastructures. I provide authoritative analysis on AI...

Chicago, Illinois

Cybersecurity, Cryptocurrency - Cybersecurity, Incident Response, Cyber Investigations, Threat Intelligence, Digital Forensics, Data Privacy, Information Risk Management, Regulatory Compliance, Computers, Mergers and Acquisitions Cyber Due Diligence, Cryptocurrency Investigations, Ransomware, Insider Risk, Board Advisory, CISO, Data Breach, NIST, ISO, SEC Cyber

Luke Tenery is a Partner with StoneTurn who brings over 20 years of experience helping leading organizations mitigate complex cybersecurity, data privacy, and digital risks. He applies deep expertise in cyber investigations, threat intelligence, incident response, and information risk management to guide clients from prevention and detection through mitigation, remediation, and transformation. Luke specializes in situational cyber risk. He helps organizations across many industries align information security risk management with high-impact initiatives—incident remediation, M&A due diligence and integration, cyber cost analyses, digital transformation, and threat intelligence program development. He regularly advises public companies and their boards on digital risk and the remediation of complex cyber incidents, and has performed interim leadership (including interim CISO) functions for clients. Representative matters include: directing compliance-remediation validation for a glo...

Boston, Massachusetts

Cybersecurity, Digital Forensics - Cybersecurity, Incident Response, Digital Forensics, Threat Intelligence, Dark Web Investigation, OSINT, Computer Forensics, Cyber Risk Assessment, National Security, Data Breach, Nation-State Threats, Computer Security, Vulnerability Management, Insider Threat, Information Technology, Data Risk, Computer Programming, Investigations

Ian Barish is a Senior Consultant with StoneTurn with over five years of experience in cybersecurity and national security. He leads high-stakes cyber investigations, provides specialized litigation support, and conducts risk assessments for organizations across a range of industries. At StoneTurn, Ian provides comprehensive litigation support for complex information technology disputes—delivering technical expertise throughout the litigation process, drafting expert reports, and preparing experts for depositions and trial testimony. He leads cybersecurity assessments that surface cyber and national security risks, conducts incident response and threat monitoring during and after cyber incidents, and performs open source, deep, and dark web intelligence investigations into persons of interest. He has served both small and Fortune 500 clients across information technology, finance, and legal services. Representative matters include: leading analysis and expert reporting in a tradem...

Grand Rapids, Michigan

Digital Forensics, Cybersecurity - Cell Phone Forensics, Call Detail Records, EMR/EHR Forensics, Cell Tower Triangulation, GPS Triangulation, Computer Forensics, Technology, Data Communications, Data Retrieval & Analysis, Digital Media, Email, GPS Systems, iCloud Data, Telecommunication, Internet, Software, Malware Analyst, Incident Response

Jeff Martin is a Digital Forensics Expert specializing in Cell Phone Forensics, Black Box/EDR Forensics, Cybersecurity, EMR/EHR Forensics, Audio/Video/Imagery Forensics and more. Jeff has conducted hundreds of digital forensics investigations on cases involving the acquisition, preservation, and analysis of data in legal disputes in both state and federal courts. Jeff is a certified digital forensics examiner with over 15 years of experience. He initially made a mark as a small business IT consultant, lauded for his knack for simplifying technical information to non-technical audiences. Following a successful decade as the Director of Information Technology & Security in the Financial Industry, he earned the Certified Credit Union Executive (CCUE) certification after attending the Credit Union National Association’s (CUNA) Management School. Jeff then applied his passion for technology to solving crimes as a Digital Forensics Analyst for the Michigan State Police. Today, Jeff is...

Ray, Ohio

Digital Forensics, Cybersecurity - Digital Forensics, Mobile & Computer Forensics, Cyber Investigation, Vehicle Forensics, Call Detail Records, Data Recovery, GPS, ELD/ECM Downloads, eDiscovery, Cloud Forensics, IoT Forensics, Chip-Off Forensics, UAS Pilot, Drone Forensics/Services, DFIR, Licenced PI, Cybersecurity, Incident Response, DVR Forensics, Cell Phone Forensics

I am an experienced digital forensics professional specializing in the analysis of mobile devices, vehicle forensics, computers, cyber investigations, and digital artifacts to support legal, investigative, and security matters. My work focuses on extracting, validating, and interpreting complex technical evidence in a clear, defensible manner, with experience in data preservation, forensic imaging, timeline reconstruction, and expert reporting. I am committed to accuracy, integrity, and translating technical findings into actionable insights for legal and investigative teams.

Montgomery, Texas

Maritime, Safety - Vessel Management, Oil Tankers, Chemical Tankers, Gas Carriers, Bulk Carriers, Ferries, Marine Terminals, Incident Response, Accident Investigations, Personal Injury, Fires, Collisions, Allisions, Groundings, Loss Control, Vessel Salvage, Offshore Operations, Marine Pilots, Navigation and Waterways

Master Mariner and Marine Manager with more than 40 years of proven global experience in managing shoreside, shipboard, offshore facility, and terminal operations within the petroleum industry. Successfully resolved complex issues by collaborating with international, federal, state, and local agencies. Recognized as an industry expert in terminal operations, incident management, safety, quality, and environmental affairs. Demonstrated proficiency in conducting port, terminal, and offshore assessments to optimize operations and improve safety. Known for utilizing a robust network of global marine experts to effectively manage risk and enhance the performance of marine assets. Responded to the Exxon Valdez oil spill and Deputy Incident Commander for the salvage of the OMI Charger in Galveston Bay. 30+ years as a member of a major oil company Tier One Incident Response Team responding to actual oil spills, salvage operations, fires, vessel collisions, groundings and allisions. Partic...

Stafford, Virginia

Cybersecurity, Information Technology - Cybersecurity, CMMC, Government Compliance, Algorithmic Discrimination, Expert Witness, Data Breach, System Security Plan (SSP), IT Risk Assessment, Machine Learning, Digital Civil Rights, FISMA, Incident Response, Artificial Intelligence, AI Ethics, Federal IT, NIST 800-53, Vulnerability Management, AI Bias, Automated Decision-Making

Dr. Celeste Chamberlain is an expert in cybersecurity processes and procedures, federal IT policy, and AI governance. She offers expert witness services in litigation involving data breaches, federal compliance failures, AI bias, digital civil rights, and emerging technology risk. With over 20 years of experience in both public and private sector cybersecurity, Dr. Chamberlain brings deep technical knowledge, strong communication skills, and policy-level insight to every case. Dr. Chamberlain holds a doctorate in Emergency Management with a focus on cyber incident response. She currently serves as a professor of AI, cybersecurity, and quantum computing at the University of Maryland Eastern Shore. She is also the President of Information Protection Solutions (IPS), a federal IT and cybersecurity firm with a track record of success supporting agencies such as the FBI and FEMA. Her work includes managing system security plans (SSPs), assessing FISMA/NIST 800-53 compliance, implementin...