David Cowen Email & Phone Number

My team and I provide expert witness services in the areas of digital forensics and incident response globally in large and complicated matters. In a career spanning almost 30 years in cybersecurity, digital forensics, and testifying in major state and federal cases, I have performed investigations covering thousands of systems in the public and private sector. Those investigations involved everything from revealing insider threats, solving the worlds boldest software supply chain attack, to providing testimony as an expert witness that put cyber criminals behind bars.In Exel v TTS, I found evidence of industrial espionage by former executives that led to $140 million of lost revenue. I helped my client understand the evidence, wrote new tools to decipher it, and delivered testimony that led to a $10 million settlement, a public letter of apology, and criminal sentences for those responsible.In Varian v Kenoyer, I found evidence showing the theft of cancer surgery equipment blueprints needed to take a competitor out of the market. I helped my client prove what was taken, used groundbreaking new research to prove how the data was used, then presented into evidence new forensic methods that are now in standard use globally. Varian was able to protect their business and exclude their competitor from competing unfairly.I led the KPMG team that assisted Solarwinds with their software supply chain breach. Working with multiple teams, we were able to lead the way and find evidence of how the threat actor hid in Solarwinds software and break new ground in what is possible in such attacks.In my development of Cloud Forensics, we created a fully automated forensic triage solution for Toyota. This allowed them to massively scale their abilities to examine 1,000s of systems at a time.My passion for DFIR stems from being able to establish the truth of what happened. I know my work will ultimately provide a real benefit to my clients. Executives can sleep sounder, and companies can be saved based on what we find. The job satisfaction I get from DFIR, along with the endless new tools and artifacts to be found, means I’ve never grown bored or jaded with the work.I’ve authored 5 books on digital forensics, won 7 awards in digital forensics, host a popular DFIR podcast, and am the author of an award-winning blog. I’ve given keynote addresses at conferences such as RSA, Magnet User Summit, and HTCIA International.If you need an expert or a leader for your digital forensics, incident response or cybersecurity work always reach out to me at dcowen@crai.com

• 

  The University Of Texas At Dallas

  Computer Science