INTEGRITY FORENSICS. Where the Evidence Tells the Truth. Terrance Maguire Chief Scientist. Digital Forensics Academy, LLC

Transcription

1 Digital Forensics Academy, LLC Chief Scientist, April 2012 Present Williamsburg, VA Terrance Maguire Chief Scientist Digital Forensics Academy, LLC PO Box 5033 Williamsburg, VA PROFESSIONAL EXPERIENCE Terrance Maguire is the chief scientist and managing member of Digital Forensics Academy LLC, conducting digital forensic investigations, research and development in computer forensics and provides training to the government and commercial sectors. He has over 22 years of experience in physical and digital forensics investigations. Mr. Maguire is a professorial lecturer at the George Washington University where he teaches graduate-level courses in digital forensics investigations. He is a consultant for the Department of State Cyber Terrorism Training Program where he instructs allied countries Law Enforcement Agencies in cyber investigation techniques. THE GEORGE WASHINGTON UNIVERSITY Professorial Lecturer, January 2008 to present Department of Forensic Sciences Security Management and High Technology Crime Investigations Programs Washington, DC Developed and taught graduate-level courses focusing on incident response and computer intrusion investigations involving network-based attacks and mobile device forensics. cmdlabs> Managing Partner, April 2009 to April 2012 Baltimore, MD Strengthened client organizations information security posture through a combination of forensic preparedness, managed incident handling, incident response, and related training. Provided professional incident response services to assist organizations with ongoing security breaches, including incident management, evidence preservation and analysis, malware forensics and mobile device forensics. Performed forensic examinations in criminal and civil cases. Developed state of the art training and

2 simulation environments for incident responders and digital forensics examiners. Provided customized training to meet the specific needs of client organizations. STROZ FRIEDBERG, LLC Assistant Director, Digital Forensics, January 2007 to March 2009 Washington, DC As Assistant Director of Digital Forensics, responsible for assisting the Directors with management of the firm s technical operations in the areas of computer forensics, cybercrime response, incident handling, electronic discovery and coordinate the firm s forensic in-house training program in addition to maintaining an active docket of cases. Conduct cyber-crime investigations, including those involving network intrusions, Internet extortions, denial of service attacks, anonymous and harassing s, data destruction, and trade secret theft. Perform hundreds of forensic acquisitions on desktop and laptop computers, servers, and mobile devices, as well as restorations of servers and corporate file servers from backup tapes. Supervise and perform electronic discovery assignments for major law firms involving terabytes of data, including projects in European Union countries. Submit expert reports and testify in civil and criminal cases. Athena Innovative Solutions Cyber Operations Specialist, 2006 Washington, DC Implemented network surveillance, wireless surveys, media analysis and network packet analysis for the Mission Response Group, Counterintelligence Field Activities (CIFA), U.S. Department of Defense. Provided consulting, assistance and support to CIFA operations in the form of forensic investigations and analysis, network security, vulnerability, and intrusion detection in support of counter-intelligence missions. Trinity IMS Forensic Computer Analyst, 2004 to 2006 Arlington, Virginia As a senior-level Forensic Computer Analyst for the United States Department of State, supervised the State Department Computer Forensic Lab s Network Analysis Section; Responsible for product development, overseeing work of junior analysts, and conducting peer review of analysis and reports performed by other analysts. Conducted examinations of computer systems and media to develop evidence as an expert in the area of computer forensic science. Conducted scene response to identify and preserve volatile and non-volatile data from State Department computer systems.

3 Computer Sciences Corporation Computer Scientist, 2003 to 2004 Linthicum, Maryland Developed and presented technical training as part of United States Department of Defense Computer Investigations Training Program (DCITA) for Federal Law Enforcement and Intelligence agents in the area of computer crime investigations. Course topics included: computer search and seizure; incident response; digital evidence; computer forensic examinations; and intrusion investigations. VIRGINIA DIVISION OF FORENSIC SCIENCE Forensic Scientist, 1999 to 2003 Richmond, Virginia Planned, coordinated, and presented a broad range of instruction at the Virginia Forensic Science Academy to law enforcement personnel in the areas of crime scene investigation, crime scene technology, bloodstain pattern analysis, and general physical forensic topics. Conducted bloodstain pattern analysis and digital evidence recovery in connection with scores of criminal investigations. Trained and qualified as an ASCLD/LAB inspector in digital evidence. Admitted as an expert witness in Virginia Circuit Courts regarding the results of forensic examinations. Chesterfield County Police Department Officer and Detective, 1991 to 1999 Chesterfield, Virginia Investigated collected, evaluated and processed evidence crime scenes, prepared comprehensive written case reports and testified in hundreds of cases in Virginia Courts. Trained department personnel in forensic techniques and worked as a liaison between the Chesterfield County Police Department and the Virginia Division of Forensic Science. EXPERT TESTIMONY April 2003: Testimony as an expert in bloodstain pattern analysis in Norfolk County Circuit Court, Virginia in Commonwealth v. Martin. April 2002: Testimony as an expert in bloodstain pattern analysis in Essex County Circuit Court, Virginia in Commonwealth v. Floyd. (Note: Testified multiple times as a forensic detective, including capital murder cases, in the Virginia Circuit Courts.)

4 EDUCATION M.S.STRAYER UNIVERSITY, Communication Technology, 2005 B.S. JAMES MADISON UNIVERSITY, Chemistry, 1988 PROFESSIONAL AFFILIATIONS Virginia Forensic Science Academy Alumni Association American Academy of Forensic Sciences PROFESSIONAL CERTIFICATIONS Encase Certified Forensic Examiner (EnCE) August 2005 Cellebrite UFED Physical Certified December 2011 Cellebrite UFED Certified December 2011 Cellebrite Certified Instructor (CCI) August 2013 Training Provided Cellebrite Certification Training, November 2011 Present cmdlabs and Digital Shield Commercial and Government Training US State Department, May Present ATA Cyber Training Program Worldwide Course Developer and Certified Instructor, June 2009 March 2013 SANS Institute Forensic 563: Mobile Device Forensics STROZ FRIEDBERG, LLC, January 2007 to March 2009 Give in-house training presentations on computer crime investigation and digital forensics tools and techniques. Network Forensics and Investigations, November 9-13, 2007 General Dynamics, Baltimore, MD Advanced Digital Forensic Analysis, November 6 8, 2007 General Dynamics, Baltimore, MD Digital Forensics in the Enterprise, April 25-27, 2007 Stroz Friedberg External Training, New York, NY Computer Forensics, August 2006 Virginia Forensic Science Academy Alumni Retraining Seminar, Incident Responders Course, May 2004 Incident Responders Course, May 2004

5 Incident Responders Course, April 2004 Introduction to Computer Search and Seizure, April 2004 Introduction to Computer Search and Seizure, April 2004 Forensics and Intrusions in a NT/2000 Environment, March 2004 Department of Defense Computer Investigations Training Program, Linthicum, MD Incident Responders Course, March 2004 Incident Response/Digital Evidence, March 2004 Joint Counterintelligence Training Academy Cyber Counterintelligence Course, Linthicum, MD Incident Responders Course, February 2004 Incident Responders Course, January 2004 Incident Response/Digital Evidence, January 2004 Cyber Counterintelligence Course Joint Counterintelligence Training Academy, Linthicum, MD Principal Instructor, Forensic Science Academy (61st Session), March - May, 2003, Crime Scene Investigation, November 2002 Virginia Institute of Forensic Science and Medicine, Richmond VA. Crime Scene Photography, November 2002 Overview of Digital Photography, Documenting the Death Scene, October 2002 Virginia Institute of Forensic Science and Medicine, Principal Instructor, Forensic Science Academy (60th Session), September November 2002, Digital Photography, August 2002 Virginia Forensic Science Academy Alumni Retraining Seminar, Bloodstain Pattern Analysis / Applied Forensic Science for High School Teachers July 2002, Virginia Institute of Forensic Science and Medicine, Richmond VA Basic Crime Scene Photography, June 2002 Central Virginia Regional Academy, Lynchburg, VA Evidence Technician School: Crime Scene Search and Documentation, June 2002 Cardinal Criminal Justice Academy, Salem, VA

6 Technological Advances in Digital Imaging, The Use of Computer Programs in Bloodstain Pattern Analysis, May 2002 Bloodstain Examiners Seminar, Virginia Bloodstain Pattern Analysis, April 2002 Virginia Institute of Forensic Science and Medicine, Richmond VA Principal Instructor, Forensic Science Academy (59th Session), February May 2002 Crime Scene Photography, November 2001 Principal Instructor, Forensic Science Academy (58th Session), September November 2001 Bloodstain Pattern Analysis / Applied Forensic Science for High School Teachers August 2001, Virginia Institute of Forensic Science and Medicine, Richmond VA Bloodstain Pattern Analysis Workshop, May 2001 Northern Virginia Criminal Justice Academy, Loudon County, VA Bloodstain Pattern Analysis Overview, May 2001 Crime Scene Investigation School, Alternate Light Source Workshop, May 2001 Principal Instructor, Forensic Science Academy (57th Session), February May 2001 Bloodstain Pattern Analysis Workshop, December 2000 Central Shenandoah Criminal Justice Training Academy, Waynesboro, VA Death Investigation: Police Involved Shooting Case Study, Homicide Scene Investigators Seminar, November 2000, Documenting the Death Scene, October 2000 Virginia Institute of Forensic Science and Medicine, Richmond VA Photographing the Death Scene, October 2000 Virginia Institute of Forensic Science and Medicine, Richmond VA Forensic Science Academy (56th Session) September November 2000, Death Investigation: Police Involved Shooting Case Study, August 2000 Virginia Forensic Science Academy Alumni Retraining Seminar, Principal Instructor, Forensic Science Academy (55th Session), June 19 August 2000 Virginia Institute of Forensic Science and Medicine, Forensic Topics/Homicide Investigation, June 2000 Central Virginia Regional Academy, Lynchburg, VA

7 Photographing the Death Scene, April 2000 Virginia Institute of Forensic Science and Medicine, Principal Instructor, Forensic Science Academy (54th Session), February April 2000 Bloodstain Pattern Analysis Workshop, February 2000 Cardinal Criminal Justice Academy, Salem, VA Basic Crime Scene Photography, December 1999 Rappahannock Regional Criminal Justice Academy, Fredericksburg, VA Homicide Scene Investigators Seminar, November 1999 Overview of Digital Photography, Documenting the Death Scene, October 1999 Virginia Institute of Forensic Science and Medicine, Richmond VA Principal Instructor, Forensic Science Academy (53rd Session), September November 1999, Bloodstain Pattern Analysis Overview, August 1999 Hanover County Sheriff s Office Investigator In-Service, Hanover County, Virginia Crime Scene Search, Evidence Handling and Packaging, Fingerprint Evidence, August 1999 Virginia Commonwealth Police Academy, Alternate Light Source Workshop, August 1999 Evidence Technician School: Crime Scene Search, Documentation, Fingerprint Evidence, June July 1999 Central Shenandoah Criminal Justice Training Academy, Waynesboro, VA Basic Crime Scene Photography, June 1999 Evidence Technician School: Bloodstain Pattern Analysis and Mock Crime Scenes, June 1999 Cardinal Criminal Justice Academy, Salem, VA Crime Scene Photography, May June 1999 Principal Instructor, Forensic Science Academy (52nd Session), February - April 1999 Advanced Forensic Evidence/Homicide, May 1999 Southwest Law Enforcement Academy, Bristol, VA The Use of Pentel Glue on Rough Surfaces, May 1999 Fingerprint Examiner s Seminar, Basic Crime Scene Photography, May 1999 Northern Virginia Criminal Justice Academy, Loudon County, VA Fingerprint Evidence, May 1999 Rappahannock Regional Criminal Justice Academy, Fredericksburg, VA

8 Professional Training Autopsy 3 Training, March 19-20, 2014 Basis Technology, Herndon, VA Registry Forensics Master Class, January 18 20, 2014 The Hacker Academy Internet Evidence Finder (IEF) Essentials, September 19-20, 2013 Magnet Forensics and H11, Salt Lake City, UT Cellebrite Instructor Development Course, August 5-9, 2013 Cellebrite, Nashville, TN Advanced Computer Forensic Analysis and incident Response, August 20-25, 2012 SANS Institute, Cell Phone Forensics 101, September 16-18, 2008 BK Forensics, Yardley, PA Digital Forensic Research Workshop 2008, August 11 13, 2008 Baltimore, MD Oracle Anti Hacker Training Course, December 3-7, 2007 Red Database Security, Fremont, CA Securing Networks with PIX and ASA (SNPA), October 2006 Global Knowledge, Washington, DC Steganography Investigator Training, October 2006 WetStone, Crystal City VA CCNA Boot Camp, June 2006 Global Knowledge, Washington, DC Securing Cisco Network Devices (SND), June 2006 Global Knowledge, Washington, DC Advanced Log Analysis, February - March 2006 DCITP, Linthicum, MD Malicious Code Analysis, January 2006 Department of Defense Cyber Crime Conference, Palm Harbor, FL Department of Defense Cyber Crime Conference, January 2006 Westin Innisbook, Palm Harbor, FL Network Monitoring Course, October 2005 DCITP, Linthicum, MD IDA Pro Reverse Engineering Course, September 2005 Columbia, MD Hacking by Numbers: Boot Camp Edition Sensepost, July 2005 Black Hat USA 2005, Las Vegas, NV Hands on Honeypot Technology, July 2005 Black Hat USA 2005, Las Vegas, NV Black Hat Briefings, July 2005 Black Hat USA 2005, Las Vegas, NV

9 Def Con 13, July 2005 Las Vegas, NV Techno-security Conference, June 2005 Myrtle Beach, SC EnCase Advanced Computer Forensics, May 2005 Sterling, VA I2 National User Conference, April 2005 Alexandria, VA Department of Defense Malicious Code Conference, September 2004 Quantico, Virginia EnCase Intermediate Analysis and Reporting, September 2004 Sterling, VA Forensics and Intrusions in a NT/2000 Environment, February 2004 Online Undercover Techniques, January 2004 CART350 Linux Media Forensics Course, January 2004, Federal Bureau of Investigations, Linthicum, MD Department of Defense Cyber Crime Conference 2003 December 2003, Las Vegas, NV Continuing Forensic Examinations EnCase, December 2003 Continuing Forensic Examinations ILook, November 2003 ASCLD/LAB Digital Evidence Inspector Training, May 2003 DEA Computer Forensic Lab, Lorton, VA Advanced Data Recovery and Analysis / Microsoft Windows NTx Systems, March 2003 National White Collar Crime Center: Computer Crime Section Fairfax County Criminal Justice Academy: Fairfax, VA Advanced Data Recovery and Analysis / Microsoft Windows 9x Systems, December 2002 National White Collar Crime Center: Computer Crime Section, Fairmont, WV GMU 2002 Computer Forensic Symposium, August 2002 George Mason University (HTCIA and RCFG), Fairfax, VA Forensic Science Academy Alumni Retraining Seminar, August 2002 Central Retraining Workshop, May 2002 Bloodstain Examiners Seminar, May 2002 Virginia Basic Data Recovery and Analysis, February 2002 National White Collar Crime Center: Computer Crime Section, Fairmont, WV

10 Computer and Network Forensics 101 for Law Enforcement Professionals and Investigators, Infowar Con 2001 (MIS Training Institute), September 2001 Washington, DC Forensic Science Academy Alumni Retraining Seminar, August 2001 Central Retraining Workshop, May 2001 Bloodstain Examiners Seminar, May 2001 Virginia International Association of Bloodstain Pattern Analysts Annual Conference, October 2000, Tucson, AZ Forensic Science Academy Alumni Retraining Seminar, August - September 2000 Bloodstain Examiners Seminar, May 2000 Virginia Advanced Bloodstain Pattern Analysis and Expert Witness Workshop, May 2000 Metropolitan Police Institute, Miami, FL Essentials of Child Death Investigation, April 2000 Virginia Institute of Forensic Science and Medicine, Forensic Science Academy Alumni Retraining Seminar, August - September 1999 Serial Number Restoration, June 1999 Sponsored by ATF in Fingerprint Examiners Seminar, May 1999 Basic Bloodstain Pattern Analysis, May 1999 Tom Bevel, Instructor, Seattle, Washington Computer Fraud Investigation, November 1998 Forensic Anthropology Seminar, October 1998 Maryland Homicide Investigation Association Forensic Science Academy Alumni Retraining Seminar, September 1998 Arson Investigation, April 1998 Spring Educational Seminar and Conference CBD/IAI, April 1998 Latent Print Identification, January 1998 Sponsored by FBI at Richmond Police Training Academy An Introduction to Forensic DNA Analysis, October - November 1997 Knowledge Solutions Virginia Forensic Science Academy 48th session, September - November 1997, Virginia

11 Criminal Profiling and Psychopathy, August 1997 Knowledge Solutions Alternate Light Source/ Photography Workshop, August 1997 Virginia Criminal Profiling and Sadism, July - August 1997 Knowledge Solutions Homicide Investigation, June 1997 Introduction to Criminal Profiling, May 1997 Knowledge Solutions Crime Scene Investigation School, March - April 1997 Fingerprint Classification School, March 1997 Sponsored by DCJS/FBI at Rape/Sex Crimes Investigation, February 1997 Evidence Technician In Service Training, November 1996 Evidence Technician In Service Training, July 1995 General Instructors School, May 1995 Evidence Technician School, November st Basic Police Academy, March - August 1991, Chesterfield, VA