Updated as of 8/22/2022

BIOGRAPHY

Lee Neubecker is the President and CEO of Enigma Forensics, Inc., a Chicago based Computer Forensics and Cyber Investigation consultancy. Neubecker assists fortune 500 clients, government agencies and private organizations with cyber related investigations involving theft of electronic data, fraud, counterfeiting, and online identity unmasking.

Neubecker also is the founder of IT Security Blog leeneubecker.com. Before starting Great Lakes Forensics, Neubecker had served as CISO for HaystackID and following the acquisition of Envision Discovery and Inspired Review by HaystackID, Neubecker was promoted to serve as CIO over the combined entities. Neubecker was named one of the top Global Computer Forensics and Cyber security experts by Who’s who Legal in 2018, 2019, 2020, 2021, 2022  and many years prior to that.

During 2016 and 2017, Neubecker assisted the U.S. Federal Government in discovering important security compromises including, the compromise of NIST.gov wildcard certificate (boudicca.nist.gov) using deprecated encryption (December 2016), compromise of time.gov NIST time servers (December 2016), compromise of NIST NSRL Hash Set download page (December 2016) and leaked email usernames and passwords from U.S. Intelligence Agency email account credentials onto public sandbox websites such as pastebin.com. (December 2016 and January 2017). Neubecker has a track record of uncovering Cyber Data Breaches and has performed investigations on the State and Federal Government Agency levels.

Neubecker’s has performed extensive research pertaining to hardware based vulnerabilities and exploits including, Serial Peripheral Interface – chip stored malware that has been impacting individuals, companies and government agencies in the wild following the leak of U.S. Cyber weapons cache. Neubecker identified and reported the hack of chicagoelections.com website, that resulted in millions of Chicago resident (and former resident) voting records being disseminated online. Neubecker also provided important intelligence collection and analysis services that helped bring the perpetrators of the Boston Marathon Bombing to justice. Prior to founding Enigma Forensics, Neubecker founded Forensicon, Inc. and sold the company to QDiscovery, a national eDiscovery services provider. While managing Forensicon, Mr. Neubecker provided consulting services in the areas of computer forensics, electronic discovery, data recovery and litigation support to a diverse range of clients. Mr. Neubecker has worked on both Plaintiff and Defense sides, and has served as a regular speaker on topics in the computer forensics and electronic discovery fields for Midwestern legal bar associations, Professional Associations and National Legal Conferences. Mr. Neubecker has been appointed a special master in civil litigation matters by the courts. Mr. Neubecker has been cited in the appellate court as an expert witness in the case, Liebert Corp. v. Mazur. The published opinion of Justice Wolfson, Circuit Court of Cook County, regarding Mr. Neubecker’s testimony can be found at the following link:  https://caselaw.findlaw.com/il-court-of-appeals/1063543.html

Prior to founding Forensicon, Inc., Mr. Neubecker founded BuzzBolt Media, a web development and Search Engine Optimization consultancy which later became Forensicon, Inc.  Before moving to Chicago in 2000, Mr. Neubecker led the online communities’ product development and programming initiatives for the Lycos Network, a pioneering Web media model that included three Top 10 Web sites and was one of the most visited hubs on the Internet during Neubecker’s tenure. Neubecker was responsible for creating, launching and managing chat, instant messaging, message boards, and online games across the Lycos network. In this role, Mr. Neubecker led the company’s response to legal inquiries from law enforcement personnel and personally oversaw complicated international investigations involving transcontinental Cyber attacks against company servers and users.

Before joining Lycos and graduating with an MBA focused in technology, Mr. Neubecker launched and successfully managed Innovative Consulting, Inc., an information technology consulting company. Mr. Neubecker’s company deployed network management, contact management, sales automation and ERP solutions to small and mid-tier organizations. Prior to Innovative Consulting, Neubecker held operations and finance analyst positions with Ford Motor Company and Comerica Bank. Mr. Neubecker has experience in securities valuation and accounting from his position at Comerica Bank, where he served as a Trust Fund finance analyst. While serving at Ford Motor Company as an intern, Neubecker was integral in automating important processes and bringing financial forecasting methodologies online, resulting in more timely and accurate quarterly financial forecasts.

Mr. Neubecker graduated magna cum laude from Babson College with a Masters of Business Administration, focusing on Technology. Mr. Neubecker also holds an undergraduate degree in Finance, magna cum laude, from Eastern Michigan University.

NOTABLE CASES OF RECORD AS A COMPUTER FORENSICS EXPERT WITNESS

DEBORAH CARR v. HOSPITAL SISTERS HEALTH SYSTEM

CIRCUIT COURT OF THE SEVENTH JUDICIAL CIRCUIT SANGAMON COUNTY, ILLINOIS CASE NO. 2020-L-105

Provided affidavit detailing deficiencies with defendant’s production of Electronic Medical Records (“EMR”) produced from defendant via Epic.

CONNIE ANDERSON v. PATIENT FIRST OF MARYLAND

CIRCUIT COURT FOR BALTIMORE COUNTY, MARYLAND CASE NO. C-03-CV-21-001814

Provided affidavit detailing deficiencies with defendant’s production of EMR produced from defendant via there in house Electronic Health Records (“EHR”) system created by and for Patient First.

JEFFREY WALKER v. THE NORWALK HOSPITAL ASSOCIATION D/B/A NEW CANAAN IMMEDIATE CARE

SUPERIOR COURT J.D. OF STAMFORD, CONNECTICUT CASE NO. FST-CV16-6030157-S

Provided affidavit detailing deficiencies with defendant’s production of EMR produced from Cerner.

CDL 1000, INC. v. SCOTT ROBERTSON

CIRCUIT COURT OF COOK COUNTY, ILLINOIS CASE NO. 2022-CV-00415

Provided affidavit detailing the lack of compliance with the courts’ order requiring handover of Robertson’s personal smartphone and computer for forensic preservation and analysis relating to a departed employee investigation and alleged electronic trade secret misappropriation.

PEOPLE OF THE STATE OF ILLINOIS v. CHRISTIAN DAIGRE

CIRCUIT COURT OF COOK COUNTY, ILLINOIS CASE NO. 2018-CR-1626801

Provided affidavit regarding the lack of the original sources of data being preserved that would allow for authentication of SMS and MMS messages allegedly sent and received.

RILEY ANN BERGTHOLDT V. ADVOCATE HEALTH AND HOSPITAL CORP, ET. AL.

CIRCUIT COURT OF COOK COUNTY, ILLINOIS CASE NO. 2018-L-8647

Provided affidavit detailing deficiencies with defendant’s production of Electronic Medical Records (hereafter “EMR”) produced from Allscripts and from EPIC.

PHOTOFAX, INC. V. JOSEPH BRADY

CIRCUIT COURT OF KANE COUNTY, IL, Case No. 21-CH-000167

Provided affidavit detailing the forensic examination of the PhotoFax issued laptop by the departed employee.  Reported on the destruction of evidence and provided support for a motion to compel examination of the devices still used by Joseph Brady to look for sensitive company data and trade secrets.

JOSEPH NICOLOSI ET. AL. V. STANDARD PARKING ET. AL.

CIRCUIT COURT OF COOK COUNTY, IL, Case No. 20 L 007912.

Provided affidavit detailing EXIF photo metadata extracted from the Plaintiff’s production of alleged photos taken of damaged artwork and other effects.  Identified photos that were edited after they were taken using Photoshop.

CHRISTOPHER JOHANSEN V. NOW MARKETING SERVICES INC. AND INTERCOVE, INC.

CIRCUIT COURT OF WILL COUNTY, IL, Case No. 19 L 989.

Provided affidavit relating to departed employee apparent deletion activities including access of emails post employee departure in support of a motion to compel forensic preservation and analysis of the departed employee’s personal electronic devices.

ANDREA BROCK, MICHAEL BROCK, S.B. V. THE UNIVERSITY OF CHICAGO MEDICAL CENTER D/B/A COMER CHILDREN’S HOSPITAL

CIRCUIT COURT OF COOK COUNTY, IL, Case No. 18 L 1175.

Provided affidavit in support of a motion to compel production of the Patient’s complete EMR, including Defendant’s secure file storage system, “Sticky Notes”, “In Basket” messages, audit trail records and complete revision history of the EMR as stored in the EPIC Hospital Information System.

PATRICK T. MCKINNEY, BY AND THROUGH HIS LEGAL GUARDIAN, RONI S. MCKINNEY, AND RONI S. AND TIMOTHY C. MCKINNEY, INDIVIDUALLY AND AS THE PARENTS AND NATURAL GUARDIANS OF PATRICK T. MCKINNEY V. THE CLEVELAND CLINIC FOUNDATION AND THE CLEVELAND CLINIC HEALTH SYSTEM

COURT OF COMMON PLEAS OF CUYAHOGA COUNTY, OHIO, Case No. CV-20-931-660.

Provided affidavit in support of a motion to compel for supervised on-site obtainment of the plaintiff’s full medical records. Involved Epic EMR software.

ROBERT WATSON AND MARK SAULKA V. RYAN TODD WEIHOFEN AND POOL TECHNOLOGIES, LTD.

CIRCUIT COURT OF COOK COUNTY, IL, Case No. 19 CH 12252.

Provided affidavit discussing the expected costs of a third party producing electronically stored information.

TERRI BROWN, an individual, and ALAN ROCK, her husband, v. MOUNT SINAI MEDICAL CENTER OF FLORIDA, INC. d/b/a MOUNT SINAI MEDICAL CENTER, a Florida Corporation; and WILLIAM F. BURKE III, M.D., an individual; and BRETT C. FUKUMA, M.D., an individual

CIRCUIT COURT OF MIAMI-DADE COUNTY, FLORIDA, Case No. 2018-016560-CA-09.

Filed two affidavits in support of a motion to compel for an on-site collection of plaintiff’s electronic medical records. Involved Epic EMR software and Synapse PACS.

LOUIS ARGIRIS v. PAUL V. FAHRENBACH, M.D., GI SOLUTIONS OF ILLINOIS LLC, ATHANASIOS D. DINIOTIS, M.D., TIESENGA SURGICAL ASSOCIATES, S.C. d/b/a SUBURBAN SURGERY CENTER INCORPORATED, JOSEPH Z. PUDLO, M.D., and JOSEPH Z. PUDLO, M.D., S.C.

COOK COUNTY CIRCUIT COURT, ILLINOIS, Case No. 2019 L 012187.

Provided affidavit in support of a motion to compel for the revision history of the plaintiff’s medical records. Consulted with counsel in serving subpoena to EMR system provider. Involved Greenway Health’s EHR platform.

NIMISH SHAH, AS THE NATURAL SON OF PUSHPABEN C. SHAH, v. ST. LUKE’S EPISCOPAL PRESBYTERIAN HOSPITALS, D/B/A ST LUKE’S HOSPITAL, ET. AL.

CIRCUIT COURT OF ST. LOUIS COUNTY, MISSOURI. Case No. 20SL-CC04023. Div. 8.

Signed an affidavit exhibiting deficiencies in Defense’s production and supporting a motion to compel for an on-site collection of the plaintiff’s medical records. Involved Cerner software.

MARC STRAUSS v. KATHLEEN VAN VALKENBURG, M.D. and SIGHT MEDICAL DOCTORS, P.L.L.C.

SUPREME COURT OF THE STATE OF NEW YORK, COUNTY OF NASSAU, Index No. 608054/2020.

Submitted an affidavit in support of a motion to compel for full medical records involving MyCare iMedicWare EMR software.

BYRON FOXIE, as legal guardian and parent of TIGE W. FOXIE, v. ANN & ROBERT H. LURIE CHILDREN’S HOSPITAL OF CHICAGO, and ALMOST HOME KIDS, and OTHER UNKNOWN PARTIES, JOHN DOES 1-10 and ROE CORPORATIONS 1-10

CIRCUIT COURT OF COOK COUNTY, ILLINOIS, Case No. 19 L 7430

Provided testimony in the form of three affidavits supporting a motion to compel during discovery due to deficiencies in EMR production. Involved Epic EMR software.

PHOTOFAX, INC. v. MICHAEL CALDARAZZO

CIRCUIT COURT OF KANE COUNTY, ILLINOIS, Case No. 19-CH-000217.

Performed forensic imaging of departed employee devices.  Assisted with the construction of an ESI protocol.  Analyzed, signed an affidavit, and testified regarding alleged misappropriation of trade secrets.

BLACK ROCK TRUCK GROUP, INC. FKA NEW ENGLAND TRUCK SALES AND SERVICE, INC. v. HARRY TARASIEWICZ and JOSEPH TARASIEWICZ

UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF NEW YORK, Case No. 7:19-cv-2367

Performed preservation of evidence, search and production of ESI. Analysis regarding allegations of trade secret misappropriation.  Provided testimony regarding fabrication of emails and destruction of evidence.

THE FOREST PRESERVE DISTRICT OF COOK COUNTY V. ROYALTY PROPERTIES, LLC; CANNON SQUIRES PROPERTIES, LLC;  MERIX PHARMACEUTICAL CORPORATION, RICHARD KIRK CANNON, MERYL SQUIRES-CANNON, MCGINLEY PARTNERS, LLC, AND ROYALTY FARMS, LLC

CIRCUIT COURT OF COOK COUNTY, ILLINOIS, Case No. 18 L 315.

Provided in court room testimony on the significance of electronic file meta data as it relates to when documents were received and modified.

MCMAHON V. DIGITAL FUEL SOLUTIONS

CIRCUIT COURT OF WILL COUNTY, ILLINOIS, Case No. 15 L 681.

Provided written affidavits regarding alleged software code misappropriation. Assisted counsel with seeking preservation of electronic data from third parties.

BROWARD ENERGY PARTNERS V. RAPPAPORT

CIRCUIT COURT OF COOK COUNTY LAW DIVISION, Case No. 18 L 1096.

Provided in court testimony and testimony via affidavit to assist with eDiscovery protocol process and address allegations of spoliation, withholding of information and authenticity of email.

JORIE LP, KOPLIN AND CONTENT CURATION & DATA ASSET MANAGEMENT V. ROBERTS MCGIVNEY ZAGOTTA ET AL.

CIRCUIT COURT OF DUPAGE COUNTY, ILLINOIS, Case No. 17 L 728.

Provided in court testimony and testimony via affidavit involving issues of email authenticity, cell phone fabrication of evidence, and eDiscovery.

BORCHERS V. FRANCISCAN TERTIARY PROVINCE OF THE SACRED HEART, INC., ET. AL..

Case No. 2011 IL App (2d) 101257.

Testified in support of violation of the Electronic Communications Privacy Act by Plaintiff’s former employer.

http://www.illinoiscourts.gov/opinions/AppellateCourt/2011/2ndDistrict/December/2101257.pdf

SABAN v. PHARMACARE MANAGEMENT, LLC ET. AL.

NORTHERN DISTRICT OF ILLINOIS (Chicago), Case No. 1:10-cv-02428.

Rebuttal witness regarding trade secret misappropriation.

TRANCO INDUSTRIAL SERVICES, INC. V. CAMPBELL

NORTHERN DISTRICT COURT OF INDIANA, HAMMOND DIVISION, Case No. 07-CV-206.

Won TRO – Violation of Computer Fraud & Abuse Act – Trade Secret Misappropriation

Supervised and prepared our testifying expert for this case.

VALUEPART V. ITR NORTH AMERICA ET. AL.

NORTHERN DISTRICT COURT OF ILLINOIS, EASTERN DIVISION, Case No. 06-CV-02709.

http://www.forensicon.com/resources/case-summary/valuepart-v-itr

CHARLES A. KRUMWIEDE V. BRIGHTON ASSOCIATES, LLC AND ISMAEL C. REYES

NORTHERN DISTRICT COURT OF ILLINOIS, EASTERN DIVISION, Case No. 05-C-3003.

Supervised and prepared our testifying expert for this case.

http://www.forensicon.com/resources/case-summary/krumwiede-v-brighton-associates/

S.C. JOHNSON & SON, INC. v. MILTON E. MORRIS ET. AL.

CIRCUIT COURT OF RACINE COUNTY, WISCONSIN, Case No. 04-CV-1873.

Led the investigation and preservation effort that uncovered personal webmail, revealing a fraudulent kickback scheme, which resulted in a law enforcement sting and later a successful conviction of the accused. This ultimately resulted in an award of $203.8 million to compensate SC Johnson & Son, Inc. for its losses.
https://www.forensicon.com/resources/case-summary/wisconsin-appeal-sc-johnson-vs-morris-schelle/

LIEBERT CORPORATION ET. AL. v. JOHN MAZUR ET. AL.

CIRCUIT COURT OF COOK COUNTY, CHANCERY DIVISION, Case No. 04 CH 02139.

Appellate Court, Second Division, Case No. No. 1-04-2794.

http://www.forensicon.com/resources/case-summary/liebert-corporation-v-mazur/

KALISH v. LEAPFROG ONLINE ET. AL.

CIRCUIT COURT OF COOK COUNTY, ILLINOIS, Case No. 03-L-011695.

http://www.forensicon.com/resources/case-summary/kalish-v-leapfrog-online/

LORILLARD TOBACCO COMPANY v. CANSTAR (U.S.A.), INC. ET. AL.

NORTHERN DISTRICT COURT OF ILLINOIS, EASTERN DIVISION, Case No. 03-C-4769.

More than $5 million awarded from Neubecker’s discovery of a counterfeit scheme.

https://www.forensicon.com/resources/case-summary/lorillard-tobacco-company-v-canstar-u-s-a-inc-et-al/

EDUCATION & PROFESSIONAL DEVELOPMENT

TECHNICAL SKILLS

Managed Engineering Development and data analysis activities across many disparate technologies, from legacy through more recent technologies and platforms including;

Database Technology:

Filemaker, MySql, Oracle, Sql, Sql Server, Law eDiscovery, & Medical ERP Patient Record Systems

Forensic Software:

Aircrack, Airmon, Access Data, Mobile Edit Pro, Cellebrite, Encase, Paladine, Recon Lab,  Forensic Toolkit, Paraben, & Wifite

Online Reconnaissance:

Dark Web, IRC, GFI Languard, Maltego, & Usenet

Security Monitoring:

Nmap, Splunk, Snort, Wireshark, Sophos UTM, & Shodan

Operating Systems / Command Line Shells:

Mac OS X, Windows (Dos/3.1/NT/2000/XP/Vista/2008/2012/7/8/10), Windows Server NT, 2000, 2008, 2012 (Active Directory, Group Policy Management, Certificate Management), Bash, Busybox, Amiga, Commodore, CPM, TI 99/4a, Grub, Kali Linux, Linux, Raspbian OS, Solaris, VMware, & Unix

Programming:

C++, CVS, DOM, Pascal, Xcode, Xml, Kintone  & Visual Basic

Software Applications:

MS Office, SDR, Webx, WebTrends, Camtasia, Adobe Photoshop, MS Office, MS Project, MS Access, MS Excel, MS Powerpoint, MS Word, MS Visio, Peachtree, Quickbooks & Quicken

Web:

Expert in Search Engine Optimization, ASP, Coldfusion, HTML, Java, Javascript, Python, PHP, Scripting Languages, & WordPress

EDUCATION & PROFESSIONAL DEVELOPMENT

• M.B.A., Magna Cum Laude – Babson F.W. Olin Graduate School of Business – Wellesley, MA
• B.B.A. Finance, Magna Cum Laude – Eastern Michigan University Ypsilanti, MI
• Guidance Software – EnCase® Introduction to Computer Forensics 32 credits – Sterling, VA
• Guidance Software – EnCase® Intermediate Analysis and Reporting 32 credits – Sterling, VA
• Guidance Software – Information Risk and Policy Compliance 3 credits – Chicago, IL
• Continuing Education – Computer Programming – Harry S. Truman College – Chicago, IL
• Novell Computer Network Training – Walsh College – Troy, MI

PROFESSIONAL EXPERIENCE

EnigmaForensics.com — Chicago, IL  (8/2018 – Present)

President & CEO

• Provided direct consulting to clients involving complex issues relating to eDiscovery
• Retained by Government Agency to assist with deposing technical deponent in litigation relating to patient health care records
• Assisted with developing a court approved protocol for production of ESI
• Conducted complex investigations involving the authenticity of emails

HaystackID — Boston, MA  (4/2018 – 7/2018)

Chief Information Officer

• Oversaw data center migration
• Managed all IT resources for eDiscovery production environment and internal systems
• Created documentation and work ticketing system for tracking problems and improving service response

HaystackID — Boston, MA  (1/2018 – 3/2018)

Chief Information Security Officer

• Performed initial security assessment of organization
• Prepared for GDPR compliance initiatives of organization
• Outreach to potential clients

FORENSICON, a QDiscovery Company — Chicago, IL  (2016 – 2017)

Founder and part-time consultant

• Identified opportunities to provide existing client base with services available from combined companies
• Presented on the Telephone Consumer Protection Act regarding strategies towards mitigating lawsuits

FORENSICON, INC. — Chicago, IL  (2000 – 2016)

President & CEO

• Conducted fraud examinations involving misappropriation of funds, trade secrets, tax evasion, money laundering, and other white collar related investigations
• Supervised a team of forensics experts in providing complex litigation plaintiff and defense consulting
• Appointed by the U.S District Court of the Northern District of Illinois to assist defense counsel in the trial against accused terrorist trial of Tahawwur Rana – The single count where my firm presented testimony, the defendant was found not guilty
• Performed online investigative work to identify and assist law enforcement with the apprehension of the Boston Bombing perpetrators, Dzhokhar and Tamerlan Tsarnaev
• Uncovered and reported the third known data breach of the Chicago Board of Elections voter database and election worker personal information
• Supervised testifying experts on many cases of record to prepare technical experts for cross examination and rebuttal of their findings
• Preserved electronic evidence for a range of clients using legally sanctioned protocols
• Selected as preferred vendor by the Illinois Attorney Registration Disciplinary Commission – assisted with investigating various claims filed against licensed Illinois Attorneys
• Developed Custom ERP System for evidence management, project management, time tracking and billing
• Provided expert testimony to resolve disputes for various commercial, nonprofit, and governmental agency clients
• Appeared several times as a computer forensics expert on WCIU TV Chicago Channel 26, First Business, NPR Business News, NBC Chicago and more
• Led data breach first responder efforts for; State Government Social Services Department, Non-Profit HealthCare Organization, Financial Services Company, Accounting Firm, Private Membership Club Organization and various Corporations
• Oversaw the development and presentations made to attorneys and legal support staff at the Chicago Bar Association, Illinois Attorney & Discipline Regulatory Commission, DuPage County Bar Association, various associations and more
• Provided expert witness testimony regarding willful deletion of evidence by a departing employee where the testimony was upheld on appeal proving spoliation of evidence
• Compiled emails from numerous platforms into popular litigation support platforms
• Speaker at various events on the topic of computer forensics (see list below)
• Performed computer forensics examinations in FBI forensics labs
• Led the successful forensic analysis defense efforts against a law firm client of our firm that was accused of willful spoliation of evidence – discovered and reported our findings to Judge Mikva that no spoliation had occurred as alleged, the drive was merely encrypted and contained all information
• Led numerous anonymous online defamation investigations resulting in the identification of many anonymous persons responsible for the defaming activities
• Expert in Search Engine Optimization

LYCOS, INC. — Waltham, MA  (1998 – 1999)

Senior Product Development Manager, Community Products Group

• Managed and/or launched a large group of products including chat, message boards, and games
• Responded to SEC/FBI Inquiries pertaining to illicit behavior in Lycos network online properties
• Tracked hacker attacks on the Lycos network of sites to help identify and prosecute offenders
• Implemented safeguards against denial-of-service attacks across product group
• Instituted product development and service roadmap management system for teams
• Created & managed multiple cross-functional product teams
• Managed transition of products from external to internal hosting
• Led engineering team on development of scalable & secure online products

INNOVATIVE CONSULTING, INC. — Brownstown, MI  (1994 – 1997)

President & Lead Technical Consultant

• Led a company of five professionals providing IT support to various sized Companies
• Provided Network support in a multi server environment (NT, Novell, Mac, Linux)
• Implemented financial management software for tier 3 automotive suppliers
• Designed & executed disaster recovery procedures for multiple businesses
• Architected multi-office communication infrastructure for multiple companies

COMERICA BANK — Detroit, MI  (1994)

Securities & Trust Fund Accountant

• Audited security transactions for bank trust funds
• Researched discrepancies in reporting
• Published & verified daily yield rates of several portfolios of marketable securities
• Initiated automation of trust fund daily reporting

FORD MOTOR COMPANY, INC. — Detroit, MI  (1992 – 1994)

Product Pricing Analyst

• Estimated cost impact on production forecast for various product design changes
• Benchmarked sourced products to ensure price competitiveness
• Designed & implemented automated profit forecasting system using Excel and EDI

PRESENTATIONS

• “Keys to Unlocking Electronic Medical Records EMR”, MCLE Tuesday May 25, 2021 delivered via Zoom co-sponsored by the Illinois Public Defender Association, the Illinois Innocence Project, the Center for Integrity in Forensic Sciences, and the Family Justice Resource Center.
• Illinois Public Pension Advisory Committee: Friday, December 2nd’s IPPAC Winter Conference “WWIII: The Attack on Your Cyber Security” presentation
• Illinois Public Pension Advisory Committee: Friday, December 2nd’s IPPAC Winter Conference “The Imminent Threat of Cyber Attacks to your Pension Boards” panel
• National Society of Insurance Investigators: “Cellphones, Pictures, Videos . . . What a Cyber Forensic Investigation Can Reveal”, December 4th, 2014
• The Disaster Conferences : “Cyber Threats and Data Breaches”, September 18th, 2014
• First Chair Awards : “Data Breach & Incident Response: How to Mitigate Your Risk Exposure”, August 2014
• Cigar Society of Chicago : “How to Catch a Terrorist”, September 2013
• ICPAS Fraud Conference 2012: “What a Responsible Professional (CPA or Attorney)
• Should Know about eDiscovery and Document Management”, September 2012
• Law Bulletin E-Discovery Seminar: “Managing Scope & Review”, June 28th, 2011
• NetSecure ‘11: IT Security and Forensics Conference and Expo: “Protecting Digital Assets from Hackers and Thieves”, March 24th, 2011
• Chicago Association of Litigation Support Managers, CALSMposium: “Seventh Circuit Electronic Discovery Pilot Program”, October 7th, 2009
• National Business Institute – “E-Discovery Searching the Virtual File Cabinets”: (co-presented with Christopher S. Griesmeyer, partner at Levenfeld Pearlstein, LLC and David W. Porteous, partner at Faegre Baker Daniels LLP) “Obtaining Electronic Data & Best Practices in using Computer Forensics”, September 19th, 2008
• Secret Service Electronic Crimes Task Force — Computer Forensics — May, 2007: http://www.forensicon.com/forensicon-news/forensicon-praised-by-u-s-secret-service-anddepartment-of-homeland-security/
• Law Bulletin E-Discovery Seminar — “Electronic Discovery in Practice”: (co-presented with Jennifer Wojciechowski of Kroll Ontrack) “Avoiding the Pitfalls of the Electronic Era”, October 2005
• Institute of Internal Auditors, Chicago West Chapter Meeting: (co-presented with Cameron Nelson, attorney at Greenberg Traurig) “Using Computer Forensics To Conduct Investigations”, May 9th, 2006
• Association of Certified Fraud Examiners Workshop: (co-presented with Kathryn Hoying, attorney at Johnson & Bell, Ltd.) “Using Computer Forensics to Conduct Investigations”, February 10, 2006
• Chicago Law & Technology Conference: “Computer Forensic Update”, co-presented with Greenberg Traurig LLP Attorney Cameron Nelson, February 23, 2006
• FagelHaber, LLC’s E-Discovery Conference: (co-presented with Richard Chapman, Gary Green, David Rownd and Robert Kamensky, attorneys at FagelHaber, LLC) “Avoiding the Pitfalls of the Electronic Era”, October, 2005
• Chicago Bar Association, CLE Seminar: (co-presented with Kathryn Hoying, attorney at Johnson & Bell, Ltd.) — “Deliverables to Request From Your Computer Forensics Examiner”, 2005
• Chicago Economic Development Council: “Internal Fraud Investigations”, 2005
• Law Bulletin Publishing Company E-Discovery Conference 2005: “Show me the Smoking Gun!”, 2005
• American Law Firm Association’s International Client Seminar 2005: (co-presented with Joe Marconi, attorney at Johnson & Bell, Ltd and Donald Kaufman, attorney at McNees, Wallace & Nurick LLC) — “Discovery, Document Retention & eDiscovery in a Post-Enron/Andersen World”, 2005
• Chicago Bar Association, CLE Seminar: (co-presented with William J. Cook of Wildman Harrold, Jeffrey L. Hartman of Competitive Advantage Solutions and Mark S. Simon of Eclipsecurity, LLC) “Computer Forensics For Lawyers”, May 6th, 2004
• Chicago/Milwaukee Joint Midwest Law & Technology Conference 2004: “Finding the Smoking Guns: Legal Computer Forensics Without the Geekspeak”, November 30th, 2004
• Chicago Bar Association, CLE Seminar: “Resolving Intellectual Property Theft with Computer Forensics”, October 20th, 2004
• Chicago Bar Association, CLE Seminar: “Computer Forensics for Lawyers”, May 6th, 2004
• Law Bulletin Publishing Company E-Discovery Conference: “Electronic Document Collection and Processing”, April 27th, 2004
• LegalTech 2003, Chicago : “True Electronic Discovery”, October 30th, 2003
• Chicago Bar Association (Law Office Technology Committee): “Electronic Discovery 101”, 2003
• Illinois Academy of Criminology: “Electronic Discovery 101”, Circa 2003
• Greater Chicago Chapter of the Association of Legal Administrators: “Electronic Discovery 101”, Circa 2003
• Chicagoland Chamber of Commerce: “Web Page Programming For Search Engine Effectiveness”, Circa 2001
• NORBIC: “Web Page Programming For Search Engine Effectiveness”, Circa 2001

ARTICLES

• Law Practice Today — (July 2004) — Invited to be a contributing expert on a roundtable article by Dennis Kennedy on the online magazine: http://www.abanet.org/lpm/lpt/articles/ftr07041.html
• Time Is of the Essence — Provides an overview of why it is important to act fast when seeking to obtain electronic evidence: http://www.forensicon.com/resources/articles/time-is-of-the-essence/
• The Liability of Email as Evidence — Reflects on the recent impact of the Andersen case involving Enron (Also in the Nov. 22, 2004 issue of Chicago Daily Law Bulletin): http://www.forensicon.com/resources/articles/the-liability-of-email-as-evidence/,  http://www.wislawjournal.com/special/law-tech-2004/evidence.html
• Document Retention Policies — Develop, enforce and audit your document retention policy: http://www.forensicon.com/resources/articles/document-retention-policies/
• Monitoring Employees — Provides reader an understanding of some of the liability issues involved with employee monitoring: http://www.forensicon.com/resources/articles/monitoring-employees/
• Worker Beware — Why employees should be careful about what they do with their workplace computer: http://www.forensicon.com/resources/articles/worker-beware-employee-monitoring/
• Data Security — What to do when an employee leaves: http://www.forensicon.com/resources/articles/what-to-do-when-an-employee-leaves
• Virus-proof Your Computer — Simple lessons in computer security: http://www.forensicon.com/resources/articles/virus-proof-your-computer/
• Microsoft Learns to Prioritize — Implementing security measures at the OS level: https://www.forensicon.com/wp-content/uploads/2012/05/art_microsoft-security.pdf

CURRENT & PAST MEMBERSHIPS / CERTIFICATIONS

• Certified Information Systems Security Professional (CISSP) — Chicago Chapter
• HTCIA (High Tech Crime Investigation Association) — Past President — Midwest Chapter
• Illinois Academy of Criminology — Chicago Chapter
• U.S. Secret Service Electronic Crimes Task Force Member — Chicago Midwest Region
• Union League Club of Chicago — Technology Group Member
• Association of Certified Fraud Examiners — Associate Member
• State of Michigan — Private Investigator — License Number 3701205872