Computer Forensics, Expert Witness, eDiscovery and Cybersecurity
New York Computer Forensics Experts That Win Cases
Cases turn on a deleted file, a forwarded email or a phone record nobody can explain. Our team preserves computers, phones, email and cloud accounts, establishes what changed and when, and explains it in reports and testimony written for cross examination. We have done this work since 1992, testified in federal and state courts, and in COMLAB v. Kal Tire the Southern District of New York credited our expert's analysis of disputed email.
Tell Us What You Need
Pick the device, account or event at the center of your matter. Each path opens the service built for it, and every one starts with a free consultation.
Computer Forensics and Expert Testimony for New York Matters
When copying, deletion, authorship or access is disputed, screenshots and printouts rarely tell the whole story. Our examiners image the computers, phones, mailboxes and cloud accounts involved, correlate independent artifacts into a timeline, and show counsel exactly which records support each finding. When the matter needs an expert, the examiner who did the work writes the report and takes the stand.
Devices and Storage
Laptops, servers, external drives and phones imaged with hash verified copies and a custody record from the first step.
Email and Messaging
Native mailboxes, Microsoft 365 and Google Workspace audit logs, headers, Teams, Slack and text messages tied to the people who sent them.
Reports and Testimony
Affirmative and rebuttal reports, declarations, deposition and trial testimony in state and federal courts.
eDiscovery Collections That Hold Up at Meet and Confer
Relevant data sits with custodians, in shared drives, in cloud tenants and on devices people still use every day. We turn the preservation scope counsel approves into a collection plan for each source, collect remotely or on site, and reconcile what was expected against what was received, so production questions have answers before opposing counsel asks them.
See eDiscovery preservation and collection services
Incident Response and Penetration Testing for Security Teams
Scope Your Assessment or, during an active incident, call the 24/7 hotline at (800) 868-8189.
Under Attack Right Now: Call the 24/7 Hotline
If an attacker is inside your systems, call (800) 868-8189 now. A responder will help your team contain the attack and preserve the logs, images and records you will need later.
Illustrations of the Technical Methods
Diagram description
A technical question is connected to a documented method, tests of alternative explanations and the final explanation. Source references support the route to the opinion.
- Question: Issue to address; Material sources.
- Method: Repeatable steps; Validation record.
- Test alternatives: Competing causes; Contrary evidence.
- Explain: Findings; Source references.
Diagram focus: An explainable route from record to opinion
Examiners With a Courtroom Record Since 1992
Global Digital Forensics has served AmLaw 100 firms and Fortune 1000 companies, and our work has been accepted by courts. Founder, CEO and CTO Joseph Caruso, a CISSP whose technology career began in 1980, testified at the evidentiary hearing in COMLAB v. Kal Tire, where the court found the disputed emails fabricated and credited his technical account. Senior Computer Forensic Specialist Veronica Perez, an EnCase Certified Examiner, has been designated as a digital forensics expert witness in California, Oklahoma and South Carolina superior courts and in federal court in Chicago. Computer Forensics and Cybersecurity Specialist Robert Knudsen, a Certified Computer Examiner, brings twenty years with the New York City Police Department and hundreds of computer and mobile examinations for federal and state matters.
Read the public record case studies, including our role as database and data analysis experts for plaintiffs in Rogers v. BNSF, or meet the GDF practitioners and ask for a current CV.
A senior examiner takes the first call.
OT, ICS and SCADA Security Under Operator Control
When the evidence or the exposure reaches a plant, a utility or a building system, our OT, ICS and SCADA security services start with passive discovery and the operator's safety limits. We map assets, validate segmentation and remote access, and preserve incident evidence without touching the process unless the operator approves it.
GDF Software for Collection and Analysis
Our engineers build the tools we use in casework. GDF software, including eCloud Discovery, CompleteDiscovery and SourceScan, supports remote collection, review and source code security. Ask during your consultation whether a product fits the engagement.
Serving New York, New Jersey and Connecticut
We work matters for custodians and systems spread across the tri state area and for counsel handling New York litigation from other states. The New York office is at 1500 Broadway, New York, NY 10036, and visits are by appointment. Remote collection, secure transfers and on site work are planned around your deadline, backed by sixteen GDF offices across the United States.
To arrange a visit to the New York office, call (212) 561-5860.
Free Preservation Guides for Litigation Counsel
An employee departure can wipe out the evidence before anyone writes a hold notice. The guide What to Do Before and After a Key Employee Leaves walks through the devices, accounts and decisions to lock down before offboarding. For a broader matter, the ESI Preservation and Spoliation Defense Protocol gives counsel a working record of custodians, sources, transfers and collection exceptions. Both are free to read online and download as PDFs.
Read the key employee departure guide Download the departure guide (PDF) Read the ESI preservation protocol Browse the full guide library
Start With a Free, Confidential Consultation
Tell us what is disputed, which devices or accounts may hold the answer and when you need it. A senior examiner will walk through the sources, the preservation steps to take now and a recommended scope, and you will know the next step before the call ends.
Get a Free Consultation (212) 561-5860 24/7 hotline: (800) 868-8189