I provide consulting and expert witness services in Computer Forensics, primarily for Intellectual Property Theft Investigations. I also provide services in Multimedia Forensics (audio/video/images), Malware Forensics and Network Intrusion Analysis.

I spend much of my time doing basic research in forensic sciences. The following is a recent paper, published in in the Journal of Digital Investigation, on automated forensic recovery of Windows event logs for the purspose of event reconstruction in Intellectual Property Theft Investigations.

• Automated Windows event log forensics.
• The paper describes a new tool, FixEvt, that repairs corrupted Windows event logs.

Here is some software I've written recently....

• I recently released Blackbox Lite, a widows desktop shell replacement
• For the Asterisk VOIP telephone system, I contributed to support for FreeBSD, OSX, and *BSD.
• Here is a Python 2.4 decompiler I put together during Defcon '06 Capture The Flag.
• Here's some work I did on Host-based Intrusion Prevention for FreeBSD.
• I also develop embedded firewalls, application servers and PBX appliances.

I am available for consulting services in:

• Computer Forensics
• Audio/Video/Image Forensics
• Malware Forensics
• Intrusion Analysis
• Event Reconstruction
• Intrusion Prevention
• Software Architecture
• Forensic Special Master

Back in the good old days...

• I was a core team developer and board member for XFree86, an open-source window system.
• I was a core team developer for FreeBSD, an open-source operating system.
• I was the original author of GNU Graphics, an open-source plotting utility.
• I have a few patents for measurement while drilling tools.

For relaxation, I am a professional musician. I am also a volunteer leader in our local Boy Scouts of America district, where I organize and operate a Cub Scout Day Camp for around 400 boys each summer.