Kroll Experts

Devon Ackerman

SENIOR DIRECTOR, CYBER SECURITY AND INVESTIGATIONS

North America

Kroll
Kroll Associates, Inc.
300 Harmon Meadow Boulevard, Suite 305
Secaucus, NJ 07094
USA

Devon Ackerman is a Senior Director with Kroll’s Cyber Security and Investigations practice, based in Secaucus. Devon is an authority on digital forensics and has extensive experience in the investigation and remediation of cyber-related threats and incidents from his years with the Federal Bureau of Investigation as well as in the private sector.

Devon joined Kroll from the FBI, where he was a Supervisory Special Agent and Senior Digital Sciences Forensics Examiner in the Digital Evidence Field Operations Unit. In this role, he had responsibility for oversight and coordination of all FBI Digital Forensics-related field operations across the United States, spanning a variety of matters such as domestic terrorism, mass shootings, critical incident response events, and large-scale electronic evidence collections. In addition, Devon has provided expert witness testimony in federal and state courts.

During this time, Devon developed a number of widely used forensic tools. He was also the course material revision architect and co-author of approximately 80 hours of instructional material for the FBI’s CART Tech Certification program and Digital Evidence Extraction Technician (DExT) training curriculums. In addition to presenting on technical topics to colleagues and trainees at the FBI Academy in Quantico, Devon has spoken at numerous industry and educational conferences. He began his career with the FBI in 2008, where he co-founded the FBI’s first North Carolina Cyber Security and Intrusion Working Group (eShield).

Before joining the FBI, Devon owned and operated his own technical services firm for six years, specializing in managing the technology needs of corporate clients, to include desktop, laptop, and server IT solutions.

Forensic Tool Development / Collaboration

  • LECmd (Link .lnk Explorer) and PECmd (Prefetch .pf Explorer)
  • Registry Explorer and Windows Registry ShellBag Explorer
  • eMule Parser
  • FTK/LAB v5.1 Report Optimization Tool (underlying coding and styling adopted by AccessData Group Inc., as official in commercial releases >v5.1 of their forensic suite software)
  • osTriage v2 Live Response & Triage Tool
  • Sanderson Forensics’ Reconnoitre
  • FTK/LAB v4.0 and v5.0 Report Cleanup Tool

Publications

  • Digital Forensics/Incident Response - The Definitive Compendium Project
  • Digital Evidence - A Critical Response Workflow
  • Special Agents in CART - Investigative Forensic Examiners
  • Computer Analysis Response Team - Professional Development Career Ladder

Representative Presentations

As a digital forensics subject matter expert, Devon was a frequent presenter on technical subjects to colleagues as well as trainee classes at the FBI Academy in Quantico, Va. Following are representative presentations to government, academic, professional association, and civic audiences.

  • “Digital Forensics in the FBI,” to Belgian Federal Police delegation; also to New South Wales delegation
  • “Digital Forensic Capabilities of the 21st Century FBI,” to Turkish cyber leadership and accompanying foreign delegation officials; also to Bulgarian foreign delegation officials
  • “Digital Evidence and Federal Law,” Methodist University
  • “Cyber Threats and Trends,” North Carolina chapter, Association for Computer Operations Management (AFCOM)
  • “Federal Cyber Law and Digital Forensics,” Campbell University
  • “eMule Forensics,” CART Senior Forensics Research Project Review Board and CART community
  • “Tableau TD3 Forensic Imager Instruction & Training,” North Carolina Office of Information Technology Services
  • “Cyber Threats and Trends,” Agio Cyber Security Incident Response Conference
  • “Sexting,” Annual Child Abuse Conference
  • “Computer Crime, Theft of Intellectual Property & Infrastructure Protection,” North Carolina State University
  • “Concepts, Characteristics & Counterintelligence,” North Carolina State University

Education & Certifications

  • M.S., Digital Forensic Science, Champlain College
  • B.S., magna cum laude, Computer & Information Systems, Digital Forensics emphasis, Champlain College
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Certified Forensic Examiner (GCFE)
  • Certified Forensic Computer Examiner (CFCE)
  • Cyber Investigator Certification Program (CICP)
  • Certified Computer Examiner (CCE)

Affiliations & Memberships

  • International Association of Computer Investigative Specialists
  • International Society of Forensic Computer Examiners
  • FBI North Carolina Cyber Security and Intrusion Working Group (eShield)
  • Scientific Working Group on Digital Evidence (2013 - 2016)
  • FBI AccessData and Live Capture Subject Matter Expert Groups (2012 - 2016)
  • Anti-Phishing Working Group (2008 - 2013)

 Awards & Recognition

  • Citation for Special Achievement, Director of the FBI
  • Certificate of Recognition, Operational Technology Division
  • Department of Defense Intelligence Award
  • SANS Lethal Forensicator Award
  • 2011 National Counterintelligence Award for Insider Threat Team
 

More from Devon Ackerman

There are no items available.