Mark Kirshner

MAJOR ACHIEVEMENTS
* Founding member of the first Computer Investigations Unit in a large metropoli
tan police department
* Instrumental in the design, construction and maintenance of the New York City
Police Department's Computer Forensics Lab
* Preformed over two hundred and fifty forensic examinations on computers and ot
her electronic storage media
* Prepared Forensic Analysis reports in connection with these exams and testifie
d numerous times on the results of my findings
* Admitted as an expert witness in Computer Forensics in New York State
* Developed technical strategies and methodologies for the first 18 U.S.C. Title
III lawful intercept of data involving computer messages over a cable modem
WORK HISTORY
September - 2009
Present Cyber Diligence, Inc.
Director of Computer Forensics
* Responsible for the computer forensic lab as well as overseeing and managing a
ll electronic discovery engagements from identification to production
January 2009 - September 2009 Bitstream Forensic Solutions LLC
Self Employed Computer Forensic Consultant
* Performed forensically sound data collections and forensic analysis
April 2007-
January 2009 BDO Consulting, A division of BDO Seidman, LLP
Senior Manager
* Lead a team of managers and associates in collection efforts, and forensic pro
cessing of custodian data for e-discovery engagements
* Maintain constant contact with clients and counsel to ensure expectations are
properly managed and work product is accurate and complete
* Responsible for overall operation, quality control, and performance of the com
puter forensic lab
* Performed high level forensic analysis on media for special client needs and i
nternal corporate matters
* Research, test and validate new computer forensic software and tools to mainta
in best and accepted practice adherence
* Assist in reformulation and implementation of computer forensic lab policy and
procedure guidelines
November 2005 - February 2007
Guidance Software Inc., Professional Services Division
Senior Forensics Consultant
* Responsible for on site collection and processing of custodian data in a fore
nsically sound manner utilizing EnCase Enterprise Edition eDiscovery Suite in li
ve, large to medium size corporate network environments
* Created inclusive and exclusive file collection filters consistent with requir
ements set forth by client's attorneys for eDiscovery engagements
* Directly interfaced with clients and their counsel on the progress of eDiscove
ry engagements and produced detailed reports on the collection, preservation, an
d disposition of the collected data
* Extracted custodian emails from large data stores and exported results to pst,
eml, or plain text format utilizing EnCase and other third party software to fu
rther process, cull, sort, and filter results for review in civil litigation
* Performed forensic analysis in civil and criminal matters, recovering e-mail,
chat, and graphic file artifacts
* Prepared detailed reports documenting chain of custody, forensic procedures, s
ystems processed, identifying custodian information, location of the data retrie
ved, and my conclusions and recommendations for clients as work product
* Implemented EnCase Enterprise Edition and trained new clients in its use
November 1995 - November 2005 New York Police Department, Computer Crimes Squad
Detective Investigator/Computer Forensics Examiner
* Chosen by Commanding Officers to help develop strategies and new investigative
techniques regarding computer crimes
* Instrumental in the design, construction and maintenance of the New York City
Police Department's Computer Forensics Lab and Online Investigation lab.
* Assist in continuing research, development, and administration of both labs
* Assisted in development of Department guidelines for the seizure, preservation
and transport of computer related evidence
* Establish Department policy, regarding chain of custody issues
* Developed technical strategies and methodologies for the first 18 U.S.C. Title
III lawful intercept of data involving computer messages over a cable modem, an
d provide ongoing support
* Set standard for the proper procedure to analyze submitted computer related ev
idence so as to ensure the integrity of the original evidence
* Select, test, and validate current software tools used in conducting forensic
exams
* Developed archival strategy to ensure original computer evidence be returned t
o the Property Clerk's Office, without delay
* Designed layout and content of the Investigative Analysis Report issued by Com
puter Crimes Squad
* Conduct forensic analysis on seized computer related evidence and all other ty
pes of storage media
* Draft computer related search warrants for Precinct Detective Squads, and Dist
rict Attorney's Offices
* Conduct and direct execution of search warrants where computer related evidenc
e is to be seized
* Preformed undercover work at hacker conventions and 2600 meetings to gather in
telligence for the Department
* Investigate and enforce various local, state and federal statutes pertaining t
o crimes committed through the use of computer technology such as: identity the
ft, terrorist leads, pedophilia, theft of intellectual property, credit card fra
ud, software piracy, internet auction crimes, money laundering, cyber stalking,
homicide, sex crimes, drug sales, and trademark infringement
* Investigate network intrusions and respond to incidents involving UNIX/Linux s
ystems
* Enhance arrests and debrief prisoners where computers are a factor in the crim
e
May 1992 -October 1995 New York Police Department, 7th Precinct
Patrol Officer
* Received Integrity Review Boards recommendation for transfer to an investigati
ve unit as a result of a bribery arrest
September 1990 - May 1992 New York Police Department, Housing Bureau Telecommuni
cations Unit
Telecommunications Officer
* Designed and installed voice and data backbone for the Housing Police Headquar
ters Annex
* Managed a network of UNIX servers and an X.25 wide area network
* Programmed and deployed all Motorola Saber I & II radios including encryption
keys for the Department
* Deployed secure voice and data solutions for the Internal Affairs Bureau and C
hief of Department
* Managed department wide IBM 3274 SNA controllers and terminals via V.T.A.M. an
d N.C.C.F.
* Serviced and supported Department wide telecommunications system and PABX's
* Housing Bureau representative for deployment of the Enhanced 911 system
* Trained and managed a team of telecommunication officers
January 1986-September 1990 New York Police Department
Patrol Officer
* Police Academy training
* Assigned Housing Bureau Police Service Areas 1, 4 and 5
June1984- December 1985 Reliable Interconnect
Telecommunications Technician
* Service and Install Voice and Data Networks
March 1983-
June 1984 Birns Telephone Systems
Telecommunications Technician
* Service and Install Voice and Data Networks
December 1981-
March 1983 Interconnect Planning Corporation
Electronics Technician
* Troubleshoot microprocessor control circuitry for large scale telecommunicatio
n switching systems and assist design engineers in testing new prototypes
EDUCATION AND TRAINING
* International Association of Computer Investigative Specialists: C.F.C.E., Bas
ic and Advanced Data Recovery and Network Forensics
* National Consortium for Justice & Statistics SEARCH Data Recovery & Investigat
ing Computer Crimes
* National White Collar Crime Association: CYBERCOP 101, BDRA, IDRA, ADRA, ADRA-
Inet, ADRA-NTx, and Financial Investigations Practical Skills
* Access Data Forensics Toolkit, Advanced Windows Forensics
* Guidance Software: EnCase Basic, Intermediate, and Advanced Forensics
* SANS Institute Intrusion Detection In-Depth, and Securing Windows
* Sytex Inc. Networks and Networking for Agents/System Security and Exploitation
* Business Intelligence Associates Advanced Data Forensics
* BK Forensics Cell Phone Forensics Course
* Sun Microsystems UNIX and Data Network Security for Law Enforcement
* United States Secret Service Electronic Crime Investigations in the 21st Centu
ry and Collection of Technical Evidence
* United States Secret Service Electronic Crimes Task Force Quarterly Meetings
* New York Metro Infragard Monthly Training Meetings/Seminars
* High Technology Crime Investigators Association Training Meetings/Seminars/Con
ferences
* Specialized Dignitary Protective Security Course, N.Y.P.D. Intelligence Divisi
on
* Criminal Investigators Course, N.Y.P.D.
* New York City Police Academy
* The City College of New York, Electrical Engineering Major - 2 years
* Kingsborough Community College, Physics Major - 2 years
PROFESSIONAL AFFILIATIONS
* High Technology Crime Investigation Association
* New York City Metro FBI Infragard Chapter
* International Association of Computer Investigative Specialists
* United Secret Service Electronics Crime Task Force
AWARDS & ACCOMPLISHMENTS
* United States Treasury for cooperation and assistance to US Customs to protect
children online
* Chief of Detectives Exemplary Conduct Award
TEACHING & PUBLICATIONS
* Instructor, Computer Forensics, Criminal Investigators Course, N.Y.P.D.
* Develop course and instruct, "Lawful Intercept of Voice and Data", N.Y.P.D. Jo
int Terrorist Task Force
* Develop course and instruct, "High Tech Crime and Forensics Investigations", N
.Y.P.D. Internal Affairs Bureau
* Authored and presented, "Forensics of Digital Imagery", Westchester County Dis
trict Attorneys Office
* Instructor, National District Attorneys Association Cybersleuth II Training Co
urse
* Develop course and instruct, "Digital Evidence and Computer Forensics - An Int
roduction For Prosecutors", New York County District Attorneys Office, Special
Victims Unit
* Authored and presented, "TCP/IP - Concepts, Tools & Techniques for Investigato
rs", High Technology Crime Investigation Association 2005 International Training
Conference, and Expo
REFERENCES AVAILABLE UPON REQUEST