Digital Forensics Name: Title: Address David Benton, EnCE, CISSP Director of Digital Forensics, Southern US, Altep, Inc. 1170 Peachtree Street, Suite 2275 Atlanta, GA 30309 Phone: email: 404.541.0909 dbenton@altep.com David Benton is a Director of Altep’s Digital Forensics division, assisting clients throughout the Southern US with forensic data acquisition and analysis, evidence recovery, data breach investigations and information security. For the last 20 years, he has been employed in an investigative or forensics capacity for US Army Counterintelligence, the Georgia Bureau of Investigation and the Home Depot. Highlights • Created over 2,000 computer forensic images of digital evidence using such products as Encase Forensic Edition, Encase Enterprise, Encase Command Center, FTK Imager and a variety of other tools. • Extensive experience supporting legal professionals from federal, state and local prosecutors, corporate counsels and litigators by translating complex investigative and computer concepts into layman’s terms. • Testified as an expert witness numerous times in Superior Courts throughout Georgia on computer forensics and computer investigations. • Awarded the productivity award for demonstrated business process improvement/efficiency at a well-known industry conference. Employment • 2014 - current: Director of Digital Forensics, Altep, Inc. • 2004 - 2014: Digital Forensics & eDiscovery Team, The Home Depot • 1999 - 2004: Computer Evidence Recovery Team, Georgia Bureau of Investigation • 1994-1999 - Counterintelligence Special Agent, Military Intelligence, United States Army www.altep.com 7450 Remcon Circle El Paso, Texas 79912 800.263.0940 Education • Bachelor of Science, Lee University, 1994 • Graduate of Counterintelligence Special Agent Program, US Army Intelligence Center, 1995 Certifications • Certified EnCase Forensic Examiner (EnCE) • Certified Information Security Professional (CISSP) • Cellebrite Certified Logical Operator (CCLO) Awards • Productivity Award for Demonstrated Business Process Improvement/Efficiency, 2010 Computer and Enterprise Investigations Conference • Meterious Unit Citation by Director of Central Intelligence John Deutch Publications • Stop the Intruder, 2013 • Contributing author: E-Discovery: Creating and Managing an Enterprise-Wide Program. Sygress, ISBN 1597492965 • Associate Editor of The Journal of Applied Digital Forensics & eDiscovery, ISSN 1935-4381 • Coauthor of A Practical Guide to Computer Forensics, ISBN-10: 1419623877 • Authored The Georgia Bureau of Investigation’s Investigative Experience During his 20 year career, Mr. Benton has conducted investigations across three continents. These ranged from simple evidence collection to various highly complex and technical endeavours. Throughout his career, Mr. Benton has worked extensively to developed policies, procedures and process maps for the processing of digital evidence and conducting investigations. • Created over 2,000 computer forensic images of a wide variety of media and computer systems • Conducted computer forensics examinations of digital based evidence on hundreds of criminal and internal investigations. • Executed over 15 search warrants to secure digital based evidence. • Qualified and testified in 18 separate cases as an expert witness in superior courts throughout Georgia. • Provided direct advice and assistance to various Georgia District Attorney’s Offices, Georgia Assistant Attorney’s Generals and two Assistant US Attorneys for the Southern and Northern District of Georgia on cases and issues related to high-profile computer forensic investigations. • Preserved, collected, searched and produced data in response to a multitude of electronic information requests ranging from federal, state and local prosecutors, United States Government Regulatory Agencies, human resource managers, internal counsel and various internal security groups • Prepared clear, logical, impartial and properly documented investigative and/or forensics reports for delivery to federal, state and local prosecutors, military commanders, litigators, Corporate Counsels, Corporate Security Investigators, Asset Protection Investigators, Human Resource professionals and other business entities resulting in timely distribution of critical and accurate information. • Produced highly detailed investigative reports through examining digital based evidence, interviewing suspects and witnesses, drawing crime scene sketches, performing searches and then briefing senior leadership on the results. page 2 Mentoring Program • Authored The Home Depot’s Digital Forensics & eDiscovery Departmental Practice Guide Leadership • 2002 – 2003, 2nd Vice President, Atlanta Chapter of the High Technology Crimes Investigation Association (HTCIA) • 2004 – 2008, Director, Cybercrime Summit • 2005 – 2007, Treasurer, Atlanta Chapter of the HTCIA • 2007 – 2009, Vice President, Atlanta Chapter of Infragard • 2008 – Present, National Board, American Society of Digital Forensics & eDiscovery • 2001 – 2003, Contract Instructor, Access Data Corporation • 2003, Instructor Program, National White Collar Crime Center • Member, National Board of Directors for the American Society of Digital Forensics & eDiscovery • Supervised two US Army Special Agents, three criminal investigators for the US Army Criminal Investigation Command and multiple computer forensics examiners at the Georgia Bureau of Investigation • Chaired a Computer Forensics Working Group for the development and enhancement of policies and procedures regarding electronic evidence; and • Trained over 200 criminal investigators /detectives in digital evidence seizure. Associations • American Society of Digital Forensics & eDiscovery • Electronic Crimes Task Force • Infragard • Association of Former Intelligence Officers Technologies & Software Mr. Benton has extensive experience using a wide range of standard computer forensics and investigative tools,to include: • • • • • • • • • • Encase Forensic Edition Encase Enterprise Encase Command Center Clearwell Enterprise Vault Proofpoint Forensic Tool Kit (FTK) FTK Imager Password Recovery Tool Kit Cellebrite’s Mobile Forensics - UFED Products page 3 Training Mr. Benton has received extensive training in the conduct of investigations and computer forensics. This has focused on serious security events, espionage, sabotage, sedition, treason, security violations and security breaches. Additional he had been trained in the proper procedures and handling of electronic evidence. A brief outline of this training includes the following: • Counterintelligence Special Agent Course, US Army Intelligence Center (16 weeks), • Advanced Interviewing Techniques, Defense Intelligence Agency (4 weeks), • Encase Courses (v2 - v6), Guidance Software (multiple courses), • Access Data Forensic Boot Camp & other classes, Access Data (multiple courses), • Basic Data Recovery & Analysis, National White Collar Crime Center (32 hours), • Intermediate Data Recovery & Analysis, National White Collar Crime Center(multiple courses), • Advanced Data Recovery & Analysis, National White Collar Crime Center(multiple courses), • Computer Investigative Training, Federal Bureau of Investigation Academy, Quantico (multiple courses) and • Computer Investigations, United States Counterintelligence (80 hours). • Cellebrite, UFED, (40 hours) Lectures Due to Mr. Benton’s extensive experience and expertise, he is frequently asked to be a special guest lecturer. He has been interviewed on CNN and given lectures at the following institutions: • • • • • • • Georgia Public Safety Training Center Emory University George Mason University Georgia Association of Chief’s of Police Conference Kennesaw State University Clayton State University Cybercrime Summit page 4