The Warren bureau of Computer Security

Transcription

1 Digital Forensics Name: Title: Address Phone: Warren G. Kruse II, CISSP, CFCE, DFCP, EnCE Vice President for Digital Forensics, Altep, Inc. 331 Newman Springs Road Building 1, 4th Floor, Suite 143 Red Bank, NJ Warren G. Kruse II is a Vice President with Altep, Inc., which provides Electronic Discovery, Digital Forensics, and consulting services to assist with litigation, compliance, and investigations. He is author of the book Computer Forensics: Incident Response Essentials, published in September 2001 by Addison Wesley. Additionally, Warren was the technical editor of the book Computer Forensic Jumpstart. The diverse range of matters Warren has assisted with includes theft of trade secrets, Wikileaks investigations, misappropriation of intellectual property, breach of contract, internal employment disputes, fraud investigations, and wage and hour class actions, among others. Warren was the expert for AMD on the AMD versus Intel antitrust litigation, and for Continental and Cirrus aircraft. He testifi ed as a computer forensic expert for the US Securities and Exchange Commission (SEC) on January 21st, 2008 in the SEC vs. vfinance Investment Inc. matter, and was named independent Court expert in the NetJapan, Inc., et al. v. StorageCraft Technology Corporation matter. Warren also testifi ed in New York Superior Court, Nassau County as an Expert in Computer Forensics on February 9th, Additionally, in March of 2005, he was named the Court Appointed expert for Union Pumps Company v. Centrifugal Technologies by US Magistrate Judge Hornsby, District of Louisiana. Warren has also testifi ed as an expert for the American Arbitration Association and served as an independent expert for an International Arbitrator. Professional Experience Vice President for Data Forensics, Altep, Inc. March 2012 to present Functional leadership in digital forensics capabilities Digial Forensics and Electronic Discovery consulting within the legal, federal and commercial market sectors Remcon Circle El Paso, Texas

2 Education Champlain College - Master of Science, Digital Investigation Management Champlain College - Bachelor of Science, Digital Forensics Certifications Certifi ed Information Systems Security Professional (CISSP) Certifi ed Forensic Computer Examiner (CFCE) Digital Forensics Certifi ed Practitioner (DFCP) Encase Certifi ed Examiner (EnCE) Prodiscover Certifi cation Paraben PDA Certifi cation Police Offi cer (retired) Computer Seizure Publications Computer Forensics: Incident Response Essentials, published September 26, 2001 by Addison Wesley Law Enforcement Technology Magazine, PTN Publishing, Melville, New York Various Technology and Computer Crime articles Awards Recipient of the High Tech Crime Investigation Association s 2001 Case of the Year Award. Recipient of three Exceptional Service Awards, the Honorable Service Award, two Departmental Commendations and two Unit Principal, Booz Allen Hamilton May 2010 to March 2012 Principal with Booz Allen Hamilton s Cyber Technology Team providing functional leadership in Cyber Security Operations, ediscovery and digital forensics Computer Forensics and Electronic Discovery consulting within the military, federal and commercial markets. Lead creation of Booz Allen Cyber Solution Center Lead creation of Advanced Cyber Training Center Lead creation of ediscovery and forensics data center with PII/PHI focused security Created partnerships with over ten ediscovery software providers. Evaluated solutions and brought in training and SME s to staff. Lead marketing efforts for government and commercial ediscovery. Lead Cyber Security Operations (CSO) team focused on commercial and DoD Cyber Crime Center Vice President, Data Forensics and Analytics, Encore Legal June 2007 to May 2010 Led global Computer Forensics consulting practice within the corporate, federal and legal market sector. Responsible for driving generation of business for Data Forensics and Analytics. This business unit has grown from green fi elds to $2.4M in revenues since Built and trained sales and technical forensics team, developed multiple forensics locations. Ran forensics globally for Encore. Responsibility includes clients in North America, Japan, Korea, Dubai, Italy and Switzerland. Managing Director, US Practice Lead, Aon Consulting Inc. January 2006 to June 2007 Provided computer forensics consulting to corporations and law fi rms. Designed forensic labs in New Jersey and California Assisted in design and implementation of data center Ran the US forensics and ediscovery team Lead the Litigation Preparation Consulting Practice page 2

3 Commendations (for Scuba and Emergency Response Teams) from the Township of Ocean Police Professional Organizations International Association of Computer Investigative Specialists International Association of Financial Crimes Investigators High Technology Crimes Investigative Association Infragard 1999 HTCIA Northeast Secretary Miscellaneous Member, ediscovery Reference Model (EDRM) working group Member of the Olympic Security Team: Georgia and Utah Senior Director, Northeast Region, Kroll Inc. July 2005 to January 2006 Provided computer forensics consulting to corporations and law fi rms. Ran the forensics team for the Northeast Partner, Computer Forensic Services, LLC September 2003 to July 2005 Provided computer forensics consulting to corporations and law fi rms. Provided training to Corporate Customers Corporate Computer and Network Security (CCANS) Investigations Manager, Lucent Technologies April 1998 to September 2003 Conducted Computer Forensics and Incident Response globally. Designed, specifi ed and project managed two computer forensic labs. Investigated computer and network issues corporatewide on a global TCP/IP based network. Worked with routers, fi rewalls, proxy servers, PBXs and the latest Windows, UNIX based operating systems in extracting and analyzing data. Provided computer forensic analysis in support of Corporate Security Investigations. Assisted outside agencies, including the Secret Service and the FBI, in the investigation of high-tech crimes and Computer Forensics, including: electronic intercept; a high profi le intrusion / theft of intellectual property case and another high profi le theft of trade secrets case. Police Officer, Township of Ocean Police, Oakhurst, New Jersey August 1987 to April 1998 Assigned to the Uniform Division as a Patrol Offi cer. Member of the County Emergency Response Team. Member of the Underwater Search and Rescue Team. Administered computer networks (internal, County, State Court and Federal) comprised of Novell 4.11, Windows NT 4.0 and AIX servers with gateways securely connected to external network and WANs. Programmed several user-friendly databases for use by this police department. The data contained on page 3

4 these systems involved criminal history information, confi dential investigation material, etc. and had to be kept secure, therefore, I developed and initiated policies to ensure the network was kept secure. Personally trained every user of the computer systems, including the Dispatchers, Police Offi cers and the Chief of Police. Successfully completed a rotation in the Criminal Investigation Division. Assisted the Criminal Investigation Division with computer crimes and investigations. Police Department Webmaster ( Agency representative to the National White Collar Crime Center. Store Detective, Macy s Department Store, Eatontown, New Jersey 1986 to August 1987 Class II Special Officer, Manasquan Police Department, Manasquan, New Jersey May 1987 to August 1987 Class I Special Officer, Spring Lake Police Department, Spring Lake, New Jersey May 1984 to May 1987 Investigative Portfolio The diverse range of matters Warren has assisted with includes theft of trade secrets, Wikileaks investigations, misappropriation of intellectual property, breach of contract, internal employment disputes, fraud investigations, and wage and hour class actions. Conducted forensics on the reported intrusion into Microsoft. Assisted the FBI on the subsequent investigation. Served as the expert for AMD in AMD vs. Intel antitrust litigation. Expert for Continental Airlines Flight 3407 Testifi ed as a Computer Forensic Expert for the US Securities and Exchange Commission (SEC) on January 21st, 2008 in the SEC vs. vfinance Investment Inc. matter. Named an independent Court expert in the NetJapan, Inc., et al. v. StorageCraft Technology Corporation matter. Testifi ed in New York Superior Court, Nassau County. Led a team of computer forensic experts in a three year engagement in support of an investigation task force at the world s largest international cooperative organization. Led the forensics engagement in the billion dollar Comtraid theft of Intellectual Property and Trade Secrets, for which he received the High Tech Crime Investigation Association s (HTCIA) 2001 Case of the Year Award. Led the investigation into the reported intrusion at the Atlantis Hotel and theft of over 55,000 customer records Court-appointed Expert for IP investigation case in Japan; lead two ITC investigations in Japan. page 4

5 Conducted forensics in support of Foreign Corrupt Practice Act (FCPA) investigations in Saudi Arabia, Cairo and Hong Kong Expert witness in the case In re Tyson Foods, Inc. Fair Labor Standards Act Litigation, No. 4:07-CV CDL (M.D. Ga.). 750 hours collecting six terabytes of potentially relevant ESI 229 computer hard drives 9 Tyson facilities in six states 52 different servers at 37 locations Provided an affi davit in Opposition to Plaintiff s Motion to Compel Production of Electronically Stored Information, which was subsequently cited in the Manual For State Trial Courts Regarding Electronic Discovery Cost-Allocation, prepared by the Joint e-discovery Subcommittee of The Association of The Bar of the City of New York Certifi cations Certifi ed Information Systems Security Professional (CISSP) Certifi ed Forensic Computer Examiner (CFCE) Digital Forensics Certifi ed Practitioner (DFCP) Encase Certifi ed Examiner (EnCE) Prodiscover Certifi cation Paraben PDA Certifi cation Police Offi cer (retired) Computer Seizure Speaking Engagements 10/1/2014: MIS Institute ITAC, San Diego, California 8/26/2014: International Association of Financial Crimes Investigators 2014 Phoenix Training Conference, Phoenix, Arizona 6/9/2014: SANS DFIR, Austin, Texas 5/21/2014: Guidancesoftware CEIC, Las Vegas, Nevada 7/19/2013: SANS Digital Forensics and Incident Response Summit 5/19/2013: CEIC /15/2013: InfoSec World Conference & Expo /5/2012: MIS Institute 7/11/2012: Cloud ediscovery, IADC, Ashville, NC 10/18/2011: Keynote, Advisen Cyber Liabilities Insights Conference 10/5/2011: MIS Institute, Computer Forensics, Atlanta Georgia 5/18/2011: Guidance Software CEIC, Orlando Florida 4/20/2011: Computer Forensic Show, New York 10/25/2010: Trusted Insider Theft of Intellectual Property lecture, Techno Forensic Conference, Gaithersburg, Md. 12/3/2009: Keynote HTCIA Asia Conference in Hong Kong page 5

6 Board Experience Warren is president of the Digital Evidence Certifi cation Board (DFCB) High Technology Crime Investigation Association (HTCIA) International President 2004 HTCIA International 1st Vice President 2002 HTCIA Northeast President 2002 HTCIA International Conference Chair Co-chair National Cybercrime Training Partnership 2001 HTCIA International Treasurer 2001 HTCIA Northeast First Vice President 2000 HTCIA Northeast President page 6