Regular contributor to the IACIS, CDFS, HTCC, DFCB, ISFCE and peer journals such as the JDFSL and Computers & Security.

Transcription

1 Digital Forensics Name: Title: Address Phone: Timothy LaTulippe, EnCE, CCE, MiCFE, CCPA, DFCP Director of Digital Forensics - West Coast, Altep, Inc. 255 California Street, Suite 500 San Francisco, CA tlatulippe@altep.com Tim LaTulippe is a Director of Altep s Digital Forensics division, and focuses assisting clients with complex investigations, data privacy, and information security. With a BS in Computer and Digital Forensics, Timothy holds a variety of certifi cations including EnCE, CCE and ACE. He has assisted in complex investigations in both the public and private sectors, working with government agencies, Fortune 100 corporations and AM Law 100 fi rms to provide complete, correct analysis of incidents and issues. Formerly a Senior Forensic Examiner with Digital Forensics, Inc., Timothy has served as an expert witness in a variety of State, Federal and military proceedings. His broad experience includes matters involving trade secret theft, medical malpractice, intellectual property theft, unfair business practice, fraud and internal investigations. Additionally, Timothy is the author of Working Inside the Box: Real Life Example of GDS in a Forensic Examination, which was published in The Journal of Digital Forensics Security & Law, and The Need for Targeted Collections in a Diminished Economy. Highlights Led international engagements involving theft of company data (trade secret), misappropriation of intellectual properties and internal misconduct investigations at executive levels. Regular contributor to the IACIS, CDFS, HTCC, DFCB, ISFCE and peer journals such as the JDFSL and Computers & Security. Experienced in acquiring data from complex systems such as Lasik eye surgery machines, proprietary instruments, copiers and other nonstandard devices. Successfully acquired computer, server and mobile device data from over fi fty users in less than three days time Remcon Circle El Paso, Texas

2 Education Champlain College of Burlington, VT; BS in Computer & Digital Forensics, 2008 (Magna Cum Laude) MS in Digital Forensics Management (2015 expected) Key Skills Special Research Standardization Development Dominion & Control Evaluations Consultation with Counsel Ethics Compliance Technical Writing Review of Discovery Materials Certifications CCE (ISFCE #887) EnCE (Guidance) ACE (AccessData) IACIS Member(13846) NCEDS Digital Forensic Certifi ed Practitioner by DFCB Cellebrite Certifi ed Logical Operator Cellebrite Certifi ed Physical Analyst Professional Organizations International Association of Financial Crimes Investigators High Tech Crime Consortium International Association of Computer Investigative Specialists International Society of Forensic Computer Examiners Consortium of Digital Forensic Specialists Digital Forensics Certifi cation Board Professional Experience March April 2013 Shortly after arriving in San Diego, joined Digital Forensics, Inc. (DFI), as Senior Computer Forensic Examiner. Duties included handling high-profile computer forensic exams, consultation and workfl ow development with clients & attorneys, live expert testimony in Federal, State and Military courts, examination results discussions with counsel and their client(s), drafting of now-published technical papers and journal articles, and improvement of lab procedures and hardware. March March 2011 Handled upwards of 100 individual data preservation efforts involving some of the largest-scale litigation on the West Coast. During this time, participated in numerous client-facing engagements, assisted Encore s sales force and Project Managers in consultation calls, and trained others internally - most notably, new hires on the processes and daily duties of the Forensics team. Strong technical background and writing abilities allowed for review assistance to Encroe s testifying experts for affi davits, preliminary and expert reports. Supplied clients with Preliminary Exper Repots of Findings on many matters Interned at Champlain College s Center for Digial Investigation (C3Di); this program was DOD/DOJ funded and received additional funding from various state agencies as well. The goal of the C3Di was to aid local and federal agencies int he pursuit of better, more effi cient practices in digital forensics. Some projects included the location of missing children during exigent circumstances by utilizing cell towers in the area, and the exploration of up-and-coming forensics tools. Software and techniques explored in the fi eld of digital forensics were summarized in papers and subsequent lectures provided to lower level forensics classes by myself and a peer Was partner in a small business venture dealing with customized computer solutions and their fabrication, for local clients in Vermont. Possesses programming and database experience as well as intimate knowledge of the Windows operating system family and Linux-based operating systems. page 2

3 Career Highlights Special Master cases: worked with CJA, OAC and Public Defender attorneys, assisting A.G s Offi ce and Department of Justice in reviewing evidence and drafting affi davits for Search & Seizure. Testifi ed in State, Federal and U.S. Military Proceedings Expert Summary Court: Designated as Expert in State of California Criminal Proceedings, Federal Proceedings and UCMJ (military) Proceedings. Answered directly to Judges in Special Master circumstances and was involved in Naval ADSEP hearing. Depositions: Assisted clients in preparing deposition questioning and subsequent materials. Helped build chronology of events based on electronic evidence. Expert Witness Testimony - Federal and State April USN v. Brown Testifi ed at Naval ADSEP Board hearing regarding the dismissal of a Chief Technology Offi cer; pornographic content case. May California v. Cusio (Case number: SCD225511) Testified at San Diego Superior Court in a case regarding child molestation and possession of child pornography; performed milestone examination to unearth justifi ably sound and transparent exonerating evidence for the Defendant; case is now awaiting sentencing and appeal as Defendant was initially found guilty. May US v. David Jacquot (Case number: 10CR3256-WQH) Testifi ed for Federal Grand Jury on Man Act case (18USC 2423(a)) - Transportation of a Minor to Engage in Criminal Sexual Activity. Case ultimately resulted in a deadlocked jury on all three counts. Speaking Engagements October 15, 2014: Internal Investigations: Stories From the Field, presented to the San Francisco chapter of the Women in e-discovery Encore Discovery Solutions: Routinely delivered new-hire training to Encore employees about the importance of Data Forensics. Topics generally covered were Data preservation Orders and what they mean; Chain of Custody; Imaging Processes; Tracking of Evidence and Client Media; Examples of Forensic Analysis. Champlain College: Was involved in a number of speaking engagements as part of an internship. These included instructing lower-level forensic courses on fi rst response techniquest and tools. The same material was also delivered to members of law enforcement who regularly acted as Incident Response (IR) Team Members, seizing, previewing and sometimes imaging electronic media. Public Defender s Offi ce (SD): Provided Digital Forensics 101 training to San Diego s Public Defender s offi ce for page 3

4 more than 100 participants, local and remote. Topics covered involved evidence preservation (what not to do), as well as real world case examples involving defense work. Public Defender s Offi ce (SD): Provided training regarding Defense of Child Pornography / Child abuse cases to San Diego s Public Defender s Offi ce (and remote simulcast). Topics included Tanner Stages, Origin of crimes, *P2P shakedowns and technology used by LE/gov t, discussion of 18 USC 2257 Provided MCLE Training, Digital Forensics 101 Symphony Tower, Downtown San Diego (November, 2012). Education & Training December 2008 Graduated Magna Cum Laude from Champlain College in Burlington, VT with a Bachelor of Science in Computer & Digital Forensics. This four year program was headed by industry known colleague Gary C. Kessler and in 2008 the program was recognized as a National Center of Academic Excellence in Information Assurance Education (CAEIAE). Ongoing - Masters of Science (M.S.) In Digital Forensics Management, Masters of Science in Digital Forensic Science (Champlain College, Burlington VT). November day CCE Boot Camp taught by Gary C. Kessler, Jonathan Rajewski and Phil Harold of Key Computer Services, LLC, in conjunction with the International Society of Forensic Computer Examiners (ISFCE). Feb 2008 Certifi ed Computer Examiner (CCE) from the International Society of Forensic Computer Examiners (ISFCE) # July - 19 July, successfully completed SANS FOR 585: Advanced Smart Phone Forensics (Winner of DFIR challenge and recipient of lethal forensicator SANS coin). October 2009 Encase Certifi ed Examiner (EnCE), Certifying Body: Guidance Software (GUID). September day Access Data Boot Camp: Intermediate Course for Forensic Tool Kit (FTK). July 2010 Re-certifi ed as CCE #887. October 2010 ACE Certifi ed (AccessData). June 2012 SANS DFIR Techniques: Using the SIFT Workstation (On Line Training). August 2012 X-Ways Forensic Training (Corona, CA). page 4

5 November Nuix Certifi ed e-discovery Specialist Training (San Francisco, CA). April Cellebrite 5 day physical and logical training (40 CPE s) (Huntington Beach, CA) 13 July - 19 July, Successfully completed SANS FOR 585: Advanced Smart Phone Forensics. Winner of DFIR challenge and recipient of lethal forensicator SANS coin. Publications & Featured Writings Working Inside the Box: Real Life Example of GDS in a Forensic Examination (published in Journal of Digital Forensics Security & Law V6, N4): This paper explores an examination whereby the Defendant s case was all but decided by the government s evidence, months before trial. The paper goes on to detail the milestone examination performed by Mr. LaTulippe and its judicial status. *Mr. LaTulippe is also a preferred peer reviewer for this journal. The Need for Targeted Collections in a Diminished Economy (in review): This paper explores the growing need for targeted collections as large capacity data storage solutions become easily available. Aspects considered include but are not limited to: clients available cash fl ow for projects, storage media and time needed for techs to perform work and other such items directly impacting the bottom line. Advanced Forensic Format: A Viable Substitute for Industry Leading Forensic Disk Imaging Solutions: This thesis was drafted in the fall of It explores the need for alternate imaging solutions in a cornered market of forensic tools. The AFF environment is now being used in forensic acquisition tool, Macquisition, as a backbone. page 5