—What types of cases do you handle?
I specialize in high-stakes digital forensic investigations, including:
- Criminal defense and prosecution (e.g., homicide, narcotics, white-collar)
- Civil litigation (e.g., intellectual property theft, spoliation, contract disputes)
- Expert witness services
- Mobile device forensics (iOS and Android)
- E-discovery and data collections
—How quickly should I contact you?
Immediately and this cannot be overstated!
Digital evidence is perishable. Some artifacts—like crash logs or usage histories—may expire in days or even hours. Contacting me early gives you the best chance of preserving what matters.
—Can you recover deleted data from phones?
Yes, but results depend on several factors:
- Device model and OS version
- Whether the phone is powered on or off
- Whether it’s been factory reset
- How it’s handled before it reaches me
The sooner it’s preserved properly, the more we can recover.
—Do you work for defense or prosecution?
Both. I don’t pick sides—I follow the data. I’ve testified for criminal defense, state prosecutors, and civil litigators. Truth is my only client.
—What tools do you use?
I work with industry leaders like Magnet, Cellebrite, XRY, EnCase, Passware, and others. But tools are just tools. Where push-button analysis ends, I go deeper—into raw logs, byte-level evidence, and behaviors the tools often miss. And I always, always use more than one tool to validate and cross-check data.
It is notable that XRY (MSAB) is normally only available to law enforcement, military, and government entities. I am one of a select handful of private labs licensed to use this tool.
Much of my work involves deep dive forensics, working with data not normally obtained with standard extraction methods. I can obtain full file system extractions using Magnet’s VeraKey or Cellebrite’s Mobile Ultra. In some cases, unlocking services can be done.
—Have you testified in court?
Yes. I’ve testified in federal, state, and civil courts—on everything from Medicaid fraud to homicide. I’ve also been deposed in intellectual property and evidence spoliation cases. I’ve even served as a friend of the court, interpreting another expert’s report for a judge, which was written so technically as to be meaningless to the lay reader.
—Where are you based?
I split time between the United States and Albania, serving an international clientele. Most cases can be worked remotely, but when the situation demands it, I appear in person.