This last month has been a whirlwind. It started when I decided to leave government contracting, a job I have known for the last 17-plus years and dive into the unfamiliar territory of working for a vendor company. It wasn’t a simple decision, but it felt right. So, I jumped in and I’m not looking back.

The amount of positive feedback I’ve received since making the transition has been overwhelming, and I’m grateful for the community that surrounds me. When I left my last job, many people asked me, “why?” Everyone thought I had it nailed down. I was able to work, teach SANS, and conduct research.

“For me the bottom line was finding a place where mission matters!”

To be honest, nobody jumps ship for simple reasons. For me leaving was much more than Bottom line – mission matters! When you lose sight of that vision, what is left to drive you?

I found myself wanting more, and the Cellebrite opportunity came my way.

What do I do here? This is the question I find myself answering most frequently. Sometimes I feel as if everything I’ve done over the last 17 years has positioned me to do exactly what I’m doing now, which is helping people. In my present position I get to help law enforcement, military and investigators understand digital data. I conduct a ton of research and get to share what I’ve learned with you, the community who has helped drive me this far.

Without your questions, your cases, and my curiosity, I would never have gotten to where I am today. What’s amazing is that Cellebrite cares enough about the community that it brought me on to help make the data speak for itself. In my role, I will continue to help the developers and product managers get into the mindset of the investigator and help investigators understand why the data is being reported a certain way and how to properly handle it.

So, what does it all mean? And why is my title what it is?

Defining Digital Intelligence

In my mind, “Digital Intelligence” is multi-faceted. You can begin to define DI by first understanding the problem that we are up against when it comes to digital media:

• How to access data
• How to become smart on the meaning of the artifact
• How to put the entire puzzle together 

My goal is to understand, research, and educate. I want to educate via webinars, blogs, and even Twitter posts. Not only do I want to educate you, I want to educate developers on your needs, and I want to keep educating myself.

I want to put what I learn out there for everyone to learn from as quickly as I can. In addition, I want to ensure the tools you rely on for mobile forensics are as accurate as possible and when they’re not, dive into the “why not” with you.

• When can you do just one dump of a phone and trust it?
• Why do you sometimes need more than one?
• How can I help you hit the bullseye and help you in your investigations?

I learned a decade ago that Cellebrite cares about the mission. I have worked on some horrific cases where I was on the phone with Ronen and Ron trying to get to the bottom of it. All of this made me realize that I didn’t want to become complacent and lose what matters most to me – the mission. Instead of working on one case at a time, I want my research and efforts to help thousands of cases. I want you to learn from my mistakes, my experience, and my methods.

“What I speak about will be what I believe are the best practices.”

Sharing Best Practices

I believe Cellebrite understands my passion for digital forensics and digital intelligence. They know I want to remain vocal in this community. One thing I love about working here at Cellebrite is that the tools are strong and really do stand on their own. I don’t have to sell them, which means I can test, critique, and make them even better for the rest of the world.

Not everyone has the time to test everything. Many investigators rely on a tool or a kiosk for a report. If you know me, you know I have stood on my soapbox for years telling you not to trust one tool. By doing so you know that you can trust me and that what I speak about will be what I believe are the best practices.

I will not force-feed you what you don’t want to hear while I am in this position. I want the opposite; I want you to reach out to me and tell me what the gaps are in your investigations. Where do you get hung up? What doesn’t speak to you and let me figure out how to make it better. You never know, it could be as simple as a query that will make everything work better. And if it isn’t, I give you my word that I will work with you to find the answer.

Digital Intelligence is nothing if it doesn’t speak to us. We need to understand our cases in a way that is beyond a machines’ output. We need a clear view of what the truth is. The bottom line is that not everything is black and white, but it’s a heck of a lot easier when it’s not gray.

Share this post