![]() |
Augusta, Maine Washington, DC Los Angeles, California (877) 272-1417 |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||
High Speed, Cutting Edge, Scenario Driven Cyber Training BitSec Forensics, Inc. is a computer forensics and information security consultancy with offices in Maine and California and affiliated consultants in Washington, D.C. Our unique real world experience, credentials, professionalism and the principles which we focus on within our core commences makes us uniquely positioned to assist you with: Computer Forensics Our senior consultants are known world-wide for their knowledge, experience, and for providing results. Prior to being affiliated with BitSec Forensics, Inc. they served as computer forensic experts for the National Security Agency, the U.S. State Department, the U.S. Department of Defense, the Maine State Police, the Maine Office of the Attorney General, the Maine Computer Crimes Task Force, and industry leaders in the field of computer forensics. They were police detectives and cyber crime unit commanders, Special Deputy U.S. Marshals and intelligence officers. They led national cyber incident response teams for the Department of Defense. They protected and recovered data and identified malicious network intruders and/or company insiders responsible for security breaches and data theft. They investigated acts of cyber terrorism and violations of state and federal law. They helped foreign governments develop the capacity to respond to acts of cyber terrorism and crimes involving computers. They even helped to ensure the electronic security of the 2004 Olympic Games in Athens! Our instructors have developed training and lectured for some of the worlds leaders in computer forensics and Information security. Prior to or since joining BitSec Forensics, Inc. our extremely talented team of instructors and curriculum design specialists developed or provided training to members of local, state and federal law enforcement; the military; the intelligence community; the defense industry; individuals and corporations. Their courses are still being offered by the National Cytological School, the Defense Computer Investigator Training Academy, the U.S. State Department, and by leaders in the field of computer forensics and information security. Our instructors have led courses in Europe, Africa, South America, South East Asia, the Middle East, and the United States. We'll leverage this one of a kind experience to provide you a one of a kind, high speed low drag training program.
You demand an instructor able to teach you to properly interpret evidence using cutting edge technologies. By positioning ourselves as a boutique consulting firm, BitSec Forensics, Inc. has maintained a size and focus that allows us to maintain a reputation of constant professionalism and competencies within our core practice areas. We believe we owe it to our clients to provide them the best team of professionals to serve them; one who will work with them to provide a value added service to each and every consultation or training course. This allows us to do our best and to provide our clients exceptional service each and very time.
Lance Mueller is recognized internationally as a leader in the field of computer forensics and information security. Prior to forming BitSec Forensics, Inc. he served as a Senior Information Security Director and Corporate Information Security Systems Specialist for Guidance Software. While at Guidance Software, Lance led their Global Incident Response Team, coordinating all incident response activities performed by Guidance Software personnel worldwide for corporate, government, military and law enforcement clients. This included complex forensic examinations of a wide variety of computer systems including Windows based systems, Unix and Linux based systems, Macintosh systems and other proprietary systems for the purpose of identifying any criminal conduct and/or determining how a specific intrusion occurred. He also wrote many of the Guidance Software training programs that are still being offered today. Prior to that Lance served for over fifteen years in various California law enforcement agencies specializing in detection, investigation, and prosecution of computer related crimes. This included the Riverside County District Attorneys Office where he was assigned to coordinate computer forensic examinations for a multi-agency computer crimes task force known as CATCH, part of a U.S. Secret Service effort to combat cyber crimes. Lance served as a Senior Consultant to the U.S. Department of State, Bureau of Diplomatic Security Office of Anti Terrorism Assistance and has traveled extensively throughout the Middle East, Africa, South America and South East Asia consulting with international law enforcement agencies and government institutions so that they can acquire the skills needed to detect, prevent, and investigate incidents related to cyber terrorism and cyber crime. Lance is a Certified Information Systems Security Professional (CISSP); Certified Incident Handler (GCIH - GIAC); GIAC Reverse Engineering Malware (GREM-GIAC); EnCase Certified Examiner (EnCE); Certified Forensic Computer Examiner(CFCE); and a Microsoft Certified Professional (MCP). Lance holds a current United States National Security Clearance and has been recognized in California courts as an expert in criminal investigations, computer forensics and information security.
Michael is a Certified Forensic Computer Examiner with over 600 hours of computer forensics training. Michael has successfully obtained computer forensic and cyber crime certifications from the International Association of Computer Investigative Specialists, the National White Collar Crime Center, the FBI, the Federal Law Enforcement Training Center and other leaders in the field. Recently, he has coached new examiners attempting the International Association of Computer investigation Specialists' Certified Forensic Computer Examiner examination. Prior to forming BitSec Forensics, Inc., Michael served for over a dozen years as a local and state law enforcement officer. He was a Special Investigator with the Investigations Division of the Maine Office of the Attorney General and was one of the chief architects of the Maine Computer Crimes Task Force where he ultimately served for six years. Michael has written cyber crime articles published by Law and Order Magazine, the National Association of Attorneys General, the National White Collar Crime Center, and the Maine Law Enforcement Officer's Bulletin. He participated nationally on cyber crime working groups, was interviewed for a book on cyber stalking, and was recently featured in a cyber crime training video distributed world-wide by the National White Collar Crime Center. Michael serves as a senior consultant to the U.S. State Department, Bureau of Diplomatic Security, Office of Anti Terrorism Assistance Program and has traveled extensively throughout the Middle East, East Africa, South America, the Caribbean and South East Asia consulting with international law enforcement agencies and government institutions so that they can acquire the skills needed to detect, prevent, and investigate incidents related to cyber terrorism and cyber crime. He is the co-author of the their Cyber Incident Response and Proactive Internet Investigations courses. Michael currently holds a United States National Security clearance.
BitSec Forensics, Inc. has provided consultations and instructors to the U.S. Government since 2005. In addition to providing training to members of the federal law enforcement community and the military, since 2005 BitSec Global Forensics, Inc. a subsidiary of BitSec Forensics, Inc. has provided computer forensic and network security expertise and training to foreign governments through Network Designs, Inc. of Virginia and the U.S. State Department Office of Anti Terrorism Assistance Program. These services include computer forensic and network security related training and consultations and are intended to prepare foreign government agencies to better detect and respond to acts of terrorism and criminal acts involving computers. The following are some of our most recent engagements on behalf of the U.S. State Department. June 2008: BitSec Global Forensics, Inc. sends an instructor to Trinidad to join a team of U.S. State Department instructors facilitating the Identification and Seizure of Digital Evidence Course. April 2008: BitSec Global Forensics, Inc. sends an instructor to Nairobi, Kenya to join a team of U.S. State Department instructors facilitating the Protecting Digital Infrastructure course. April 2008: BitSec Global Forensics, Inc. sends an instructor to Amman, Jordan to assist with the delivery and installation of a computer forensic lab. November 2007: BitSec Global Forensics, Inc. sends an instructor to Amman, Jordan to lead a team of U.S. State Department Instructors and to facilitate the Seizure of Digital Evidence course. November 2007: Proactive Internet Investigations, a U.S. State Department course co-written by BitSec Global Forensics, Inc., debuts in Kuala Lumpur, Malaysia. October 2007: BitSec Global Forensics, Inc. sends an instructor Islamabad, Pakistan to join a team of U.S. State Department Instructors facilitating the Investigating Cyber Terrorism course. September 2007: BitSec Global Forensics, Inc. sends an instructor returns to Nairobi, Kenya to join a team of of U.S. State Department Instructors facilitating the Investigating Cyber Terrorism course. April 2007: BitSec Global Forensics, Inc. send's an instructor to lead a group of U.S. State Department team of instructors in facilitating the Cyber Incident Response "train the trainer" course in Islamabad, Pakistan. March 2007: BitSec Global Forensics, Inc. sends an instructor Islamabad, Pakistan to assist U.S. State Department officials in assessing government cyber incident response and computer forensic capabilities. February 2007: BitSec Forensics, Inc. provides E-Discovery training to the United States Attorney's Office for the District of Maine. February 2007: BitSec Global Forensics, Inc. sends an instructor to Turkey to join a team of of U.S. State Department Instructors facilitating the Cyber Incident Response course. January 2007: BitSec Global Forensics, Inc. sends an instructor to Malaysia to join a team of of U.S. State Department Instructors facilitating the Cyber Incident Response course. In addition to providing training to members of the federal law enforcement community and the military, since 2005 BitSec Global Forensics, Inc. a subsidiary of BitSec Forensics, Inc. has provided computer forensic and network security expertise and training to foreign governments through Network Designs, Inc. of Virginia and the U.S. State Department Office of Anti Terrorism Assistance Program. These services include computer forensic and network security related training and consultations and are intended to prepare foreign government agencies to better detect and respond to acts of terrorism and criminal acts involving computers. The following are some of our most recent engagements on behalf of the U.S. State Department. April 2008: BitSec Global Forensics, Inc. sends an instructor to Nairobi, Kenya to join a team of U.S. State Department Instructors facilitating the Protecting Digital Infrastructure course. April 2008: BitSec Global Forensics, Inc. sends an instructor to Amman, Jordan to assist with the delivery and installation of a computer forensic lab. November 2007: BitSec Global Forensics, Inc. sends an instructor to Amman, Jordan to lead a team of U.S. State Department Instructors and to facilitate the Seizure of Digital Evidence course. November 2007: Proactive Internet Investigations, a U.S. State Department course co-written by BitSec Global Forensics, Inc., debuts in Kuala Lumpur, Malaysia. October 2007: BitSec Global Forensics, Inc. sends an instructor Islamabad, Pakistan to join a team of U.S. State Department Instructors facilitating the Investigating Cyber Terrorism course. September 2007: BitSec Global Forensics, Inc. sends an instructor returns to Nairobi, Kenya to join a team of of U.S. State Department Instructors facilitating the Investigating Cyber Terrorism course. April 2007: BitSec Global Forensics, Inc. send's an instructor to lead a group of U.S. State Department team of instructors in facilitating the Cyber Incident Response "train the trainer" course in Islamabad, Pakistan. March 2007: BitSec Global Forensics, Inc. sends an instructor Islamabad, Pakistan to assist U.S. State Department officials in assessing government cyber incident response and computer forensic capabilities. February 2007: BitSec Forensics, Inc. provides E-Discovery training to the United States Attorney's Office for the District of Maine. February 2007: BitSec Global Forensics, Inc. sends an instructor to Turkey to join a team of of U.S. State Department Instructors facilitating the Cyber Incident Response course. January 2007: BitSec Global Forensics, Inc. sends an instructor to Malaysia to join a team of of U.S. State Department Instructors facilitating the Cyber Incident Response course. All of our consultants hail from local and state government - our roots lay there. As such, we are committed to providing our expertise to local and state government at a reasonable cost. January 2008: The Maine State Police Computer Crimes Unit hires BitSec Forensics, Inc. to provide two weeks of computer forensic training in March to its newest computer forensic examiners. January 2008: The Maine Office of Information Technology extends it's contract with BitSec Forensics, Inc. another year. December 2007: BitSec Forensics, Inc. provides two days of training on live computer forensics to the Maine State Police Computer Crimes Unit. June 2007: BitSec Forensics, Inc.. was awarded a contract with the Maine Office of Information Technology to provide end to end electronic discovery, computer forensics, training, and expert testimony. March 2007: BitSec Forensics, Inc.. provides members of the Maine Office of Information Technology a one day seminar on preserving electronic evidence and forensic disk imaging. March 2007: BitSec Forensics, Inc.. provides a seminar on Online Social Networking to a standing room only group at the Maine Office of the Attorney General. February 2007: BitSec Forensics, Inc. provides a seminar on electronic discovery to the Maine Office of Attorney General. Law firms, financial institutions, the insurance industry, private investigators, corporations and individuals repeatedly choose BitSec Forensics, inc. because of ability to provide exceptional expertise at a moments notice and at a reasonable rate. Because we value the confidential nature of our work with these clients we will not identify them publicly. If you require a reference, please email us at info(at)bitsecforensics.com
These alliances allow our consultants a broad range of best-of-breed vendors from BitSec Forensics, Inc. is a licensed training partner of Guidance Software, Inc. BitSec provides authorized training in EnCase Computer Forensics I and EnCase Computer Forensics II throughout the United States using a mobile training classroom. Guidance Software's suite of EnCase® solutions provide an enterprise investigative infrastructure that enables corporations, government and law enforcement agencies to conduct effective digital investigations, respond promptly to eDiscovery requests and other large-scale data collection needs, and take decisive action in response to external attacks. BitSec Forensics, Inc. is a sales representative of Voom Technologies, Inc. Voom designs and manufactures state of the art Computer Forensic and Data Backup and Recovery products. VOOM's patented forensic products are reducing the time required by Law Enforcement to collect and analyze the evidence. VOOM's patented data storage products backup and restore your system faster and more assuredly than any other product available. VOOM brings SAN backup and recovery power to the workstation! VOOM's products are superior because we focus on what is important: technology that is powerful, fast, dependable and easy to use. BitSec Forensics, Inc. is a strategic partner of Creative Services, Inc. CSI’s mission is to deliver superior background investigations and exceptional client service to help employers reduce risk and improve workplace safety and security. BitSec Forensics, Inc. is the primary provider of computer forensic consultants to McCloskey Resource Group, LLC. The McCloskey Resource Group is comprised of former federal prosecutors and agents, as well as other experts in relevant forensic fields. They offer a unique combination of expertise and experience in a confidential format to the business, professional, government, and legal communities. For each matter, MRG assembles highly skilled professionals who, by virtue of their experience, qualifications, diligence and high ethical standards, provide MRG’s clients with the information and resources they need in a competitive environment. MRG’s professionals are prepared to undertake regional, national and international projects. BitSec Forensics, Inc. is currently accepting resumes for consulting and instructor positions. Please send your resume to employment(at)bitsecforensics.com.
BitSec Forensics, Inc. recognizes that your job is complex and that your training budget is limited. BitSec Forensics, Inc. is a Guidance Software licensed training partner and the only training partner in the world that can offer all of their courses. Choose from one of our authorized Guidance Software courses, one of our professionally designed BitSec exclusive courses, or design your own course. We guarantee a high speed low drag, scenario driven training course and we'll do so at your location saving you thousands in travel related expenses.
Principles of Computer Forensics (BitSec Exclusive Course:) Whether you are a member of law enforcement, the military, or a corporate investigations unit, you have a need for trained investigators who are capable of identifying, preserving, analyzing and interpreting electronic evidence. There are an increasing collection of open source and commercial tools available to assist investigators; however, without the proper foundation of knowledge and principles, investigators are ill prepared to take the output of these tools into the courtroom. Principles of Computer Forensics was designed to provide investigators this basis of knowledge first learning to recognize and properly seize electronic evidence, then analyzing it using EnCase V6. EnCE® Boot Camp (BitSec Exclusive Course:) “EnCE® certification tells the world that you’ve not only mastered the use of EnCase® Forensic Software, but also that you have acquired the in-depth forensics knowledge and techniques you need to conduct complex computer investigations.” (Bunting 2008). This three day accelerated review course is designed specifically to prepare participants to enter the EnCE® certification process. Each student will receive a copy of the Official EnCE® Study Guide (Bunting 2008). Live Data Acquisition and Analysis (BitSec Exclusive Course:) In this customizable two day to three day course participants will learn to recognize and properly seize the contents of physical memory and also volatile system data, then analyze it using both open source and commercially available tools. Several free open source tools will be discussed and used during the hands-on exercises to familiarize the investigator with how the tools work. Several practical exercises will be conducted in order to present several different real-life scenarios and give the investigator a chance to practice with the tools in a controlled environment. In addition, some commercial tools will be demonstrated and discussed to contrast what features each of the tools offer in comparison to open source tools. EnCase® Version 6 Computer Forensics I (Licensed Guidance Software Course:) This hands-on course involves practical exercises and real-life simulations. The class provides participants with an understanding of the proper handling of digital evidence from the initial seizure of the computer/media to acquisition, and then progresses to the analysis of the data. It concludes with archiving and validating the data. EnCase® Version 6 Computer Forensics II (Licensed Guidance Software Course:) This hands-on course is designed for investigators with strong computer skills, prior computer forensics training, and experience using the EnCase forensic software. This course builds upon the skills covered in the EnCase Computer Forensics I course and enhances the examiner's ability to work efficiently through the use of the unique features of EnCase. EnCase® Version 6 Advanced Computer Forensics (Licensed Guidance Software Course:) This hands-on course is designed for examiners with advanced computer skills and two or more years of experience working in the field of computer forensics. Participants learn advanced data recovery techniques of artifacts in many of the file systems supported by EnCase. EnCase® Version 6 NTFS (Licensed Guidance Software Course:) This hands-on course involves practical exercises and technical information about the NTFS file system. The class addresses the technical issues of the NTFS file system, including an in-depth analysis of the Master File Table (MFT) and its components. Students will locate and recover NTFS artifacts from the MFT and understand their evidentiary value. The course will delve into the NT Registry files for data identifying the computer user, installed applications and customized configurations. Students will recover encrypted passwords, identify alternate data streams, reparse points and mapped drives, identify security permissions for users, and determine if removable media was connected to a NTFS volume. In addition, students will examine partially wiped drives and recover files from partially wiped NTFS volumes. EnCase® Version 6 Advanced Internet Investigations (Licensed Guidance Software Course:) This hands-on course involves practical exercises and real-life simulations. The class focuses on the forensic evidence located on the computer belonging to the suspect and /or victim-- not online or cyber investigations. E-mails and the Internet are cornerstones of consumer and business computer use. Virtually all computer forensic examinations will involve analysis of e-mail and Internet artifacts, underscoring the need to understand the relevance of Internet and e-mail-based evidence recovered during examinations. EnCase® Version 6 Network Intrusions (Licensed Guidance Software Course:) This hands-on course is designed for investigators who want to learn more about network intrusions, the tools commonly used by attackers, and the forensic artifacts left behind. This course goes into not only the technical aspects of network intrusions, but also discusses the methodology commonly used by attackers. The course will begin with an overview of networking protocols and then quickly address topics such as session hijacking, capturing network traffic, and the importance of collecting volatile data (which can contain significant forensic artifacts). EnCase® Version 6 EnScript I (Licensed Guidance Software Course:) This hands-on course is designed for students who wish to learn new programming techniques and how to apply them in a new language using real-life, meaningful investigations. Reinforcing programming logic and common statements, this class focuses on simple EnScripts and programming techniques while edifying the different data types, operators, program control statements, and data access methods used within EnScript. Delivery method: Group-Live. NASBA defined level: advanced. Potential students should not be intimidated that EnScript mimics C++ and Java Script, as EnCase has a much easier programming interface. The syntax of EnScript will become clear and natural as the course progresses. EnCase® Version 6 EnScript II (Licensed Guidance Software Course:) This hands-on course is designed for investigators or programmers with intermediate to advanced computer programming skills. Students will learn advanced EnScript programming which will enhance the efficiency of examinations and extend the functionality of EnCase.
Are you looking for training in a specific topic or tool? BitSec Forensics, Inc. will partner with your organization to design a unique training event, at your location, using the tools and topics that most interest you. Contact a BitSec training professional to learn more. Upcoming Courses
Upcoming Speaking Engagements
Are you representing a client who needs to know how to take advantage of e-discovery? Most of your case isn’t on paper and never will be. People say things in e-mail they would never put in a written report and most often it’s closer to the truth. This means that e-discovery is where the truth lives and that well managed e-discovery gives plaintiffs’ counsel a considerable litigation advantage. Our certified forensic computer examiners will help you understand the defendants’ systems and networks so that all relevant data, particularly that of those whose conduct forms the basis of the contemplated claim or suit, is identified so that you can win your case by securing the right data not the most data. Is your client responding to an e-discovery request and needing help digging in? Avoiding sanctions means avoiding spoliation. By ensuring that all responsive data is identified and preserved in a defensible manner, BitSec will help your client steer clear of monetary or preclusive sanctions, adverse inferences, direct access to your client’s computer systems by the discovering party; or worse, default judgments. We’ll make sure that you understand the technology and are well positioned to reduce your clients risk and exposure. Organizations of all sizes and sectors are increasingly required to investigate incidents of internal policy or legal violations within the workplace. More and more often, in today’s digital world these investigations involve electronic evidence. In the most severe form, the outcome of a human resource investigation may result in dismissal of an employee and may form the basis of a subsequent legal action for unfair dismissal. What's more, as the corporate scandals of 2001-2002 demonstrate, all companies are vulnerable to internal fraud. The damage can be devastating exposing your company to financial ruin, criminal prosecution, tort claim, regulatory action or the loss of your hard earned reputation. It’s unimaginable in today’s digital world to conduct an internal investigation of fraud without locating, preserving, and analyzing electronic evidence. There is a current tendency to place the review of electronic evidence with IT departments. However, IT staff may not be viewed by the courts as either neutral or detached, and will not possess the required understanding of the rules of evidence, or how to properly identify, gather, preserve, and analyze electronic evidence. This results in an unnecessary increase in risk for the employer. BitSec will minimize your risks through targeted, expert forensic computer consultations. Our examiners will: Collect and preserve electronic data using court-approved tools and techniques BitSec places great emphasis on producing reports that both you and the courts can understand. Chain of custody and each step of the forensic examination process are properly documented and available in either a professionally bound report, or on a compact disk, viewable like a web page. Is your organization or your client subject to Sarbanes Oxley, Gramm-Leach Bililey (GLB), PCI, or HIPAA? Information security compliance requires the precise enforcement of policies and controls. These laws and regulations specify investigation and response to security breeches or policy violations. Digital investigations using computer forensics are an essential part of this enforcement. BitSec will combine real world experience with the latest in computer forensic technology to assess your network for external and internal vulnerabilities and compliance. If there is a security breach, we’ll eliminate the threat and investigate the incident to determine it’s origin and whether there was data loss. One of the most popular features of the computer forensic tool EnCase® is the functionality of its EnScript® language. Several EnScripts® are provided with EnCase®; however, many users write their own or use others written by EnCase® users. BitSec Forensics offers custom designed EnScripts based your unique needs. For more information, please contact lance(at)bitsecforensics.com.
We've added a blog to our web site to better communicate with our visitors. We will use it to keep you up to date with the goings on at BitSec, to announce new courses, and to discuss tools and methodologies that impact our field. Official BitSec Blog Also, for the forensic examiners who visit our site, be sure to check out Lance Muellers's popular forensic blog which he's maintained since 2007. Lance Mueller's Forensic Blog
BitSec Forensics, Inc. is headquartered in Augusta, Maine with offices in Los Angeles, California and affiliated consultants in Washington, DC. You may reach us by email at info(at)bitsecforensics.com or by calling us toll free at (877) 272-1417. |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Contact us toll free at (877) 272-1417 or by email at info(at)bitsecforensics.com | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||