Doug’s Resume

Douglas A. Morris EnCE

Check out my profile on LinkedIn.com.

If you’re looking for forensic computers and forensic forensic write blockers, check out the forensic hardware at ForensicPC.com.

Profile

I am an EnCase certified computer forensic examiner (EnCE) with experience in electronic discovery, data recovery, and forensic imaging. I have experience with large scale civil and criminal investigations involving intellectual property, trade secret theft, fraud, employee misconduct, and software piracy matters. I am a highly motivated, diligent, and reliable professional. I work well under pressure and love to face new challenges. I am an excellent team player, as well as an efficient self starter.

Relevant Skills

  • I have coordinated and managed large forensic imaging and collection projects, involving over 60 computers, using both software-based solutions (such as EnCase, FTK, F-Response, and Helix3 Pro) as well as hardware-based solutions (such as Logicube’s Talon, Cellebrite, and Tableau’s TD1).
  • I have performed imaging and analysis on numerous types of mobile devices (e.g. cell phones, iPhones, Windows Mobile devices, and BlackBerry smart-phones) using Paraben’s Device Seizure v3.x and Cellebrite’s UFED Mobile Extraction Device.
  • I have produced load files for various eDiscovery and litigation support review tools such as Concordance, Summation, and Relativity using LAW 5.x and Transend Migrator 8.
  • I worked with numerous Chicago area law firms and corporations on over 100 forensic cases involving civil and criminal matters related to anti-trust and trade secret investigations.
  • Performed forensic analysis, litigation support, and eDiscovery services involving large volumes of email and other electronic documents for law firms and corporate clients.
  • I performed analysis on forensic images and other electronic media using EnCase, X-Ways Forensic, various hex editors, and other open source software tools.
  • Conducted network intrusion investigations involving unauthorized network access by a terminated employee.
  • I have authored numerous expert reports, affidavits, and declarations for clients relating to user attempts to securely delete evidence, movement of trade secrets to portable devices, and recovery of deleted files/documents.
  • I have an understanding of the Federal Rules of Civil Procedures (FRCP) and Federal Rules of Evidence regarding digital media, security and privacy laws, and other regulations (HIPAA, SOX, GLB), chain of custody and evidence handling.

    Professional Experience

    DIGITAL FORENSIC ANALYST/TECHNICIAN, RGL FORENSICS 2008-2010
    Employed at RGL Forensics as a team member of the Forensics Technology department. I managed the forensic lab, including the transition and integration of forensic processes and services during the RGL acquisition of Impact Forensics. Performed digital forensic imaging and large scale digital forensic investigations. Deployed an asset management system for tracking digital media. Assisted RGL in deploying and managing a data center for securely hosting and managing client data.
    FORENSIC CONSULTANT, IMPACT FORENSICS 2007-2008
    Employed by Impact Forensics until the company was purchased by RGL Forensics in Aug 2008. I worked on large scale digital forensic investigations and provided electronic discovery services involving civil, corporate and criminal matters. Provided high quality results for attorneys with strict client requirements. Assisted in designing and building an enterprise-class forensic lab with over 15 forensic workstations and over 20TB of redundant storage.
    LOCAL 21 ILL, Local 7 WIS, CONSTRUCTION INDUSTRY 1989-2007
    Journeyman Stone/Brick Mason – Construction professional Involved in government, commercial and residential projects of all sizes.

    Education

    GUIDANCE SOFTWARE PROFESSIONAL TRAINING
    •    32 hours of Guidance Software Professional Training; EnCase Computer Forensics II, 2008
    •    Attended CEIC (Computer and Enterprise Investigations Conference), 2009 – 2010 (earned credits required for EnCE re-certification).
    WRIGHT COLLEGE, CHICAGO, IL
    Computer Security Certification Program, 2006-2008
    •    Program General Network Technology Essentials
    •    Introduction to Information Security
    •    Information Security Systems Analysis
    •    Information Security Technology
    •    Internet Vulnerabilities and Investigative Procedures
    •    CISSP Prep (Information Security Domain, Information Security Program Management)
    Computer Forensics Certification Program, 2006-2008
    •    Introduction to Cyber Crime
    •    Computer Forensic Technology
    •    Financial Cyber Crime
    •    EnCE Certification Prep Volunteer Lab Technician for Security and Forensics Programs at Wright College.
    HAROLD WASHINGTON COLLEGE, 2008
    •    C++ 101

    • Leave a comment

    You must be logged in to post a comment.