Philip Blazer Catzen
PO Box 16228, Baltimore, MD 21210
410-891-1680 | [email protected]
Education
1976 – Gilman School
1982 – University of Virginia – BSCE
Computer Forensics Education
Guidance Software Professional Development and Training – Dulles Va (Makers of EnCase)
- Computer Forensics 1 – May 2008
- Computer Forensics 2 – June 2008
- Advanced Computer Forensics – June 2008
- Neutrino (Cell Phone Examination) – Dec 2008
- Advanced Internet Examination – Jan 2009
- Network Intrusion Investigations – March 2009
- Examination of NTFS Artifacts – March 2009
- Enterprise Examinations – July 2012
AccessData (Makers of FTK)
- FTK Bootcamp – February 2011
- WIndows XP Forensics – March 2011
- Windows 7 Forensics – April 2011
- Windows Registry Forensics – June 2011
- Internet Forensics – July 2011
- Applied Decryption – Nov 2011
- Mac Forensics – Dec 2011
- Mobile Phones 202 (MFI) – Jan 2012
- Blackberry Forensics (1 day) – Jan 2012
X-ways Forensics – June 2012
Time Line Analysis – (H.Carvey – Applied Security) – April 2013
Mac Forensic In-Depth Analysis (BBT-300, BlackBag Technologies) – October 2013
Essential Forensic Techniques 1 (BBT Mac\iOS Blackbag Technologies) – March 2015
SQLite Forensics Va. Department of Forensic Science – Teel Technologies – September 2015
Advanced Windows 10 Forensic Analysis – Spyder Forensics – July 2019
Teaching
Adjunct Professor – University of Baltimore, Criminal Justice Masters degree program.
Forensic Science – Computer Forensics – January 2016 – January 2018
Security University – Qualified Forensic Examiner
Speaking Engagements
National White Collar Crime Center (NW3C) – August 2019
Zip File Forensics (via web cast)
Techno Security Conference – Myrtle Beach SC- June 2019
Zip File Forensics
Techno Security Conference – Myrtle Beach SC- June 2018
Detection of Metadata Spoofing in MS Office Documents
Maryland State Bar Association – September 2016 (CLE Accredited Course Number: C-5035-16)
Electronically Stored Information (ESI) – What Lawyers Need to Know
Techno Security Conference 2016 – Myrtle Beach SC – June 2016
Metadata Exploitation and Detection in MS Office Documents
National Business Institute, Continuing Legal Education (CLE accredited) December 2015
How to Get Your Social Media, Email, and Text Evidence Admitted (and Keep Theirs Out)
What to Look for, Where to Find it and What to do With it: Email, Social Media, Texts and Video
Presenter
June 2015 – E-Discovery and Information Governance Committee of the D.C. Bar Litigation Section.
Forensics Collections: A Discussion with the Experts
Panelist
2014 Maryland Judiciary Conference – National Harbor – October 2014
Is Anybody There? Use of Cellphones and Technical Evidence in Criminal Cases
Presenter \ Panelist
Nuix Weninar – August 2014
Shared Intelligence: How Investigators Can Share Forensics Information across Multiple Cases
Panel Moderator
Techno Security 2014 – Myrtle Beach SC-June 2014
The Forensics of File System Tunneling
Meta Data Spoofing
Shared Intelligence (panel)
Licensing Executive Society May 2014
Mobile and Consumer Electronics Committee
Smartphone Security
Baltimore Family Law Committee – March 2014 (Circuit Court Baltimore City)
What Can Be Recovered from Your Smartphone, Tablet or Other Computer Device?
JSOC, Ft Bragg NC Dec 2013
The Forensics of File System Tunneling
Advanced Date Time exploitation
American Association of Matrimonial Lawyers – Maryland Symposium Nov. 2013
Smartphone Security
Techno Security 2013 – Myrtle Beach SC June 2013
The Forensics of File System Tunneling
Experience
1991 – 2008 President – Cape Computing Corp
I founded Cape Computing in 1991 after finding a passion in Computer Software and Hardware Configurations. Initially Cape Computing was a small company providing software development and network management services to small businesses. In 1998 we began writing the Credit Scoring environment for Caterpillar Financial. At that point the company was about 20% Infrastructure Management 80% software Development.
I was hands on with all aspects of the company from Software design, Data structure design, Network design and deployment, Coding, Business Process Engineering, software architecture, Virus analysis\cleaning
In 2004 we were contacted by a local attorney to provide Forensic Analysis in a matter. We received our initial Training From ASR Data (makers of the forensic tool, SMART). Following that case we entered the Forensic Analysis business and completed several assignments both Criminal (defense work) and Civil.
Personal experience at Cape included design, purchase, build and manage networks ranging in size from 5 pc’s in a single location to 175 PC,s (and servers) spanning 8 locations in multiple states. Design and write software and database application, Build VPN (point to point and mobile), Forensic analysis of hard drives.
4/2008 – Present
President – Catzen Forensic
President – Catzen Computer Consulting Corp.
Catzen Forensic provides data recovery services, forensic imaging of drives, reconstruction of NTFS and FAT file systems, reconstruction of RAID sets, Cell phone\Smart Phone forensics, Expert Witness, Forensic Examination of Hard drives, Network Traffic Analysis, Electronic Discovery, Network Intrusion Investigation and Analysis, Trojan/Virus reverse engineering.
We have performed over 250 investigations and hundreds of data recoveries
Catzen Computer Consulting Corp provides network management, software development and consultation services to small and mid-sized businesses.
Skill Sets
File Systems
- NTFS
- FAT
- Ext 2 & 3
- HFS \ HFS Plus
- APFS
Forensic Tools (partial)
- Encase Forensic (6.10 – 8.x)
- Encase FIM (Field Intelligence Model) 6.18.3
- FTK 3.2 – 6.0
- Paraben Email Examiner
- Paraben Network Email Examiner (NEMX)
- Paraben P2 Commander
- MPE+ (cell phone\smart phone)
- Cellebrite – UFED – PA- LA
- Oxygen
- Win Hex \ x-Ways Forensic 15.x, 16.x, 17.x,18.x,19.x
- Ethereal \ Wireshark
- dtSearch
- FTK Imager
- FTK Registry Viewer
- Net Analysis \ HstX
- Internet Evidence Finder (3,4,5,6)
- Axiom (3.x)
- Gargoyle
- BitPim
- SimCon
- BlackLight 2013-2019
- MacQuisition
- Mobilyze
- Intella 1.6.x, 1.7.x
- Nuix eDiscovery\Investigation Workstation (4, 5,6)
- TZWorks Suite
- Sanderson Forensic SQLite Forensic Toolkit
- PW Crackers \ Hackers
- Passware
- WinRTGen
- CAIN
- JTR
- L0PhtCrack
- PRTK
- Operating Systems \ Software Packages too numerous to list
I have testified or have been deposed as an expert witness:
MR CRESCENT CITY, LLC, et al. V GIANNASCA CRESCENT CITY, LLC, et al Circuit Court
for Baltimore City 24-C-07-001253
(Testimony)
KANDARE V A. KANDARE
Circuit Court for Anne Arundel County Case No. 02-C-08-134210
(Testimony)
MARYLAND ORTHOTIC AND PROSTHETICS INC. v METRO PROSTHETICS ET AL.
Baltimore County Circuit Court Case No. 03-C-12-001648
(Deposition and Testimony)
SADIE M. CASTRUCCIO V ESTATE OF PETER ADALBERT CASTRUCCI
Circuit Court for Anne Arundel County Case No 02-C-13-177699
(Deposition and Testimony)
AMY MARQUEZ v. DANIEL K. ASIEDU M.D., COASTAL MEDICAL INC.
State of Rhode Island Providence SC, Superior Court C.A. NO.: PC12-4320
(Deposition)
SECURE FUNDING, LLC, et al. v. GULZAR, INC., et al.
Circuit Court for Howard County, Md Case No. 13-C-14-100590 Consolidated
(Deposition)
JON M. FRIAR v. KATHRYN SPEARMAN FRIAR
Circuit Court for Baltimore City Case No. 24-D-15-002111
(Deposition)
SADIE M. CASTRUCCIO V ESTATE OF PETER A. CASTRUCCIO
Circuit Court for Anne Arundel County Case No C-02-CV-16-000278
(Deposition and Testimony)
WHITE MARLIN OPEN, INC. et al, v. PHILIP G. HEASLEY
United States District Court for the District of Maryland
C.A. No.: 1:16-CV-03105-RDB
(Deposition)
Attorney Grievance Commission of Maryland v. Samuel Sperling’ et al.
Misc. Docket AG NO. 40 & 76 September Term, 2016
Circuit Court for Baltimore County Case No.: 03-C-16-010146
(Deposition and Testimony)
JENNIFER COOKE v. STEVEN COOKE
Circuit Court for Baltimore County Case No. 03-C-15-008386
(Testimony)
CLIFFORD F. RANSOM, III v. JAMES J. DASHER
Circuit Court for Baltimore County Case No. 03-C-17-00267
(Testimony)
JOSEPH J. MEZZANOTTE v. TARA L. MEZZANOTTE
Circuit Court for Howard County Case No. 13-c-16-108394
(Testimony)
UNITED STATES v. DEMETRIOS STRAVAKIS
United States District Court for the District of Maryland
Criminal No. ELH 19 0610
(Testimony)
GRAHAM ENGINEERING CORP. v. ERIC ADAIR et al
United States District Court for the Middle District of Pennsylvania
Civil Action No: 1:16-cv-02521
(Deposition)
PAJAK v. UNDER ARMOUR, INC., et al.
United States District Court for the Northern District of West Virginia
Civil Action No. 1:19-cv-160
(Deposition)