Blazer Catzen’s CV

Download CV

Philip Blazer Catzen
PO Box 16228, Baltimore, MD 21210
410-891-1680 | sales@catzen.com


Education

1976 – Gilman School
1982 – University of Virginia – BSCE

Computer Forensics Education

Guidance Software Professional Development and Training – Dulles Va (Makers of EnCase)

  • Computer Forensics 1 –  May 2008
  • Computer Forensics 2 – June 2008
  • Advanced Computer Forensics – June 2008
  • Neutrino (Cell Phone Examination) – Dec 2008
  • Advanced Internet Examination – Jan 2009
  • Network Intrusion Investigations  – March 2009
  • Examination of NTFS  Artifacts  – March 2009
  • Enterprise Examinations – July 2012

AccessData (Makers of FTK)

  • FTK Bootcamp – February 2011
  • WIndows XP Forensics – March 2011
  • Windows 7 Forensics  – April 2011
  • Windows Registry Forensics – June 2011
  • Internet Forensics – July 2011
  • Applied Decryption – Nov 2011
  • Mac Forensics – Dec 2011
  • Mobile Phones 202 (MFI) – Jan 2012
  • Blackberry Forensics (1 day)  – Jan 2012

X-ways Forensics – June 2012

Time Line Analysis – (H.Carvey – Applied Security) – April 2013

Mac Forensic In-Depth Analysis (BBT-300, BlackBag Technologies) – October 2013

Essential Forensic Techniques 1 (BBT Mac\iOS Blackbag Technologies) – March 2015

SQLite Forensics Va. Department of Forensic Science — Teel Technologies – September 2015

Teaching

Adjunct Professor — University of Baltimore, Criminal Justice Masters degree program.

Forensic Science – Computer Forensics – Spring Term – 2016

Security University – Qualified Forensic Examiner

Recent Speaking Engagements

National Business Institute, Continuing Legal Education (CLE accredited) December 2015
How to Get Your Social Media, Email, and Text Evidence Admitted (and Keep Theirs Out)
What to Look for, Where to Find it and What to do With it: Email, Social Media, Texts and Video
Presenter

June 2015 — E-Discovery and Information Governance Committee of the D.C. Bar Litigation Section.
Forensics Collections: A Discussion with the Experts
Panelist

2014 Maryland Judiciary Conference — National Harbor – October 2014
Is Anybody There? Use of Cellphones and Technical Evidence in Criminal Cases
Presenter \ Panelist

Nuix Weninar – August 2014
Shared Intelligence: How Investigators Can Share Forensics Information across Multiple Cases
Panel Moderator

Techno Security 2014 – Myrtle Beach SC-June 2014
The Forensics of File System Tunneling
Meta Data Spoofing
Shared Intelligence (panel)

Licensing Executive Society May 2014
Mobile and Consumer Electronics Committee
Smartphone Security

Baltimore Family Law Committee — March 2014 (Circuit Court Baltimore City)
What Can Be Recovered from Your Smartphone, Tablet or Other Computer Device?

JSOC, Ft Bragg NC Dec 2013
The Forensics of File System Tunneling
Advanced Date Time exploitation

American Association of Matrimonial Lawyers — Maryland Symposium Nov. 2013
Smartphone Security

Techno Security 2013 — Myrtle Beach SC June 2013
The Forensics of File System Tunneling

Experience

1991 – 2008 President – Cape Computing Corp

I founded Cape Computing in 1991 after finding a passion in Computer Software and Hardware Configurations. Initially Cape Computing was a small company providing software development and network management services to small businesses. In 1998 we began writing the Credit Scoring environment for Caterpillar Financial. At that point the company was about 20% Infrastructure Management 80% software Development.

I was hands on with all aspects of the company from Software design, Data structure design, Network design and deployment, Coding, Business Process Engineering, software architecture, Virus analysis\cleaning

In 2004 we were contacted by a local attorney to provide Forensic Analysis in a matter. We received our initial Training From ASR Data (makers of the forensic tool, SMART). Following that case we entered the Forensic Analysis business and completed several assignments both Criminal (defense work) and Civil.

Personal experience at Cape included design, purchase, build and  manage networks ranging in size from 5 pc’s in a single location to 175 PC,s (and servers) spanning 8 locations in multiple states. Design and write software and database application, Build VPN (point to point and mobile), Forensic analysis of hard drives.

4/2008 – Present

President – Catzen Forensic
President – Catzen Computer Consulting Corp.

Catzen Forensic provides data recovery services, forensic imaging of drives, reconstruction of NTFS and FAT file systems, reconstruction of RAID sets, Cell phone\Smart Phone forensics, Expert Witness, Forensic Examination of Hard drives, Network Traffic Analysis, Electronic Discovery, Network Intrusion Investigation and Analysis, Trojan/Virus reverse engineering.

We have performed over 80 investigations and 40 data recoveries

Catzen Computer Consulting Corp provides network management, software development and consultation services to small and mid-sized businesses.

Skill Sets

File Systems

  • NTFS
  • FAT
  • Ext 2 & 3
  • HFS \ HFS Plus

Forensic Tools (partial)

  • Encase Forensic (6.10 – 7.08)
  • Encase FIM (Field Intelligence Model) 6.18.3
  • FTK 3.2 – 5.4
  • Paraben Email Examiner
  • Paraben Network Email Examiner (NEMX)
  • Paraben P2 Commander
  • MPE+ (cell phone\smart phone)
  • Cellebrite – UFED – PA- LA
  • Oxygen
  • Lantern 2, 3,4
  • Win Hex \ x-Ways Forensic 15.x, 16.x, 17.x,18.x
  • Ethereal \ Wireshark
  • dtSearch
  • FTK Imager
  • FTK Registry Viewer
  • Net Analysis \ HstX
  • Internet Evidence Finder (3,4,5,6)
  • Gargoyle
  • BitPim
  • SimCon
  • BlackLight 2013-2016
  • MacQuisition
  • Intella 1.6.x, 1.7.x
  • Nuix eDiscovery\Investigation Workstation (4, 5,6)
  • TZWorks Suite
  • Sanderson Forensic SQLite Forensic Toolkit
  • PW  Crackers \ Hackers
  • Passware
  • WinRTGen
  • CAIN
  • JTR
  • L0PhtCrack
  • PRTK
  • Operating Systems \ Software Packages too numerous to list

I have testified or have been deposed as an expert witness:

MR CRESCENT CITY, LLC, et al. V GIANNASCA CRESCENT CITY, LLC, et al Circuit Court
for Baltimore City 24-C-07-001253

KANDARE V A. KANDARE
Circuit Court for Anne Arundel County Case No. 02-C-08-134210

MARYLAND ORTHOTIC AND PROSTHETICS INC. v METRO PROSTHETICS ET AL.
Baltimore County Circuit Court Case No. 03-C-12-001648

SADIE M. CASTRUCCIO V ESTATE OF PETER ADALBERT CASTRUCCI
Circuit Court for Anne Arundel County Case No 02-C-13-177699

AMY MARQUEZ v. DANIEL K. ASIEDU M.D., COASTAL MEDICAL INC.
State of Rhode Island Providence SC, Superior Court C.A. NO.: PC12-4320

SECURE FUNDING, LLC, et al. v. GULZAR, INC., et al.
Circuit Court for Howard County, Md Case No. 13-C-14-100590 Consolidated

JON M. FRIAR v.  KATHRYN SPEARMAN FRIAR

Circuit Court for Baltimore City Case No. 24-D-15-002111