Committee Members

Photo of F3 Chairman… Danny Faith

F3 Chairman… Danny Faith

Danny served as a police officer for more than 20 years but recently moved on to work for a global bank as a forensic specialist. His career in computer forensics started in January 2003 when he attended Encase training with Guidance software. Over the last 8 years Danny has worked as a computer forensic analyst and carried out extensive training in the field at the National Police Improvement Agency (NPIA) and at Cranfield University, the Centre for Forensic Computing, where he is presently studying for a masters degree in computer forensics. …Read More

Danny served as a police officer for more than 20 years but recently moved on to work for a global bank as a forensic specialist. His career in computer forensics started in January 2003 when he attended Encase training with Guidance software. Over the last 8 years Danny has worked as a computer forensic analyst and carried out extensive training in the field at the National Police Improvement Agency (NPIA) and at Cranfield University, the Centre for Forensic Computing, where he is presently studying for a masters degree in computer forensics.

Danny takes an active role within the computer forensic community. Besides his position on the F3 Committee, he is a UK regional manager for the Certified Forensic Computer Examiner (CFCE), a certification program run by the International Association of Computer Investigative Specialists (IACIS).IACIS is an international volunteer non-profit corporation, dedicated to education in the field of forensic computer science.

As of Novemember 2012, he took to role of F3 Chairman, taking the baton from the longstanding previous Chairman, Geoff Fellows.

Photo of F3 Vice Chairman… Mike Harrison

F3 Vice Chairman… Mike Harrison

Mike started working for Kent Police in 2005 after having an epiphany and deciding that he wanted his family to be proud of him for the work he did, instead of the amount he earned. After a brief stint with Royal Mail in Oxford, Mike started contracting working for the Nat West Bank on their NT Platform roll out in Kegworth. …Read More

Mike started working for Kent Police in 2005 after having an epiphany and deciding that he wanted his family to be proud of him for the work he did, instead of the amount he earned.

After a brief stint with Royal Mail in Oxford, Mike started contracting working for the Nat West Bank on their NT Platform roll out in Kegworth. After being poached for several other projects he ended up working in London where he met his soon-to-be wife. At this time Mike started helping a small team specialising in Java development and through this started working on his own, offering support to local companies in Kent, which soon became his full time job.

After the usual mid-life crisis brought on by having small children, Mike decided that instead of complaining about the state of the world he would try and do something about it. Luckily, Kent Police allowed him to do this.

Mike has received training at the UK Defence Academy, Shrivenham and Wyboston and has recently completed his MSc in Computer Forensics at University College Dublin. His dissertation subject was ‘Forensically sound acquisition methods for Intel based Apple Mac computers’.

In 2007 Mike was been seconded to a Domestic Extremism investigation for two years. This has led to him lecturing at the FBI and the Austrian authorities on the techniques used to combat encryption and data recovery.

Mike has recently been released on a three year secondment to join the National Technical Assistance Centre (NTAC) in London, where as part of a specialist team he provides technical assistance to law enforcement in matters relating to the processing and recovery of protected information and recovering it into intelligible format.

Mike is married and has two children, one of each, who take up most of his time when he is not at work. The family has been joined by a rescue dog which is trying to eat as much of their house as he can.

In any spare time that he has left, Mike has recently taken up growing fruit and veg as a method of unwinding; he also enjoys watching Rugby and Cricket and listening to comedy on the radio. He is keen to develop his raw coding skills into something that is usable and is currently working on dictionary attack software. If this gives him an excuse to spend more time with Apples (not the edible sort) that would make his day.

As of November 2012, he took the role of F3 Vice Chairman.

Photo of F3 Treasurer… Steve Buddell

F3 Treasurer… Steve Buddell

Steve Buddell joined BDO LLP, Forensic Technology and eDiscovery in March 2014 on a fixed term contract in a role dedicated to growing the brand and bringing FTech services to the market. Prior to this Steve Buddell was a managing director with FTI Consulting, based in their UK offices in London. Steve was responsible for the delivery of Electronic Evidence Consulting incorporating all aspects of data identification, through forensic acquisition of data, data processing and delivery of data to a number of review applications. …Read More

Steve Buddell joined BDO LLP, Forensic Technology and eDiscovery in March 2014 on a fixed term contract in a role dedicated to growing the brand and bringing FTech services to the market.

Prior to this Steve Buddell was a managing director with FTI Consulting, based in their UK offices in London. Steve was responsible for the delivery of Electronic Evidence Consulting incorporating all aspects of data identification, through forensic acquisition of data, data processing and delivery of data to a number of review applications. Working within a global organization, Steve was also responsible for UK marketing strategy, recruitment and personnel development.

Steve has over 18 years of experience in the delivery of forensic IT services and solutions to support criminal and civil investigations in the public and private sectors. He has focused on engagements requiring solutions to deal with vast volumes of data and hardcopy material in respect of litigation affecting multi-national companies and high profile individuals. This has required Steve to build, work with and manage a number of multi-skilled teams in Europe, Asia and South America and to provide solutions to local and international legal requirements applicable to the movement of data between jurisdictions.
Before joining FTI Consulting, Steve was a senior manager with KPMG Forensic where he had responsibility for their Forensic IT capability in the UK. Having inherited a group of professionals, Steve set about building a very strong team that (he freely admits with a degree of good fortune) he transformed from being considered as a support function into a leading service line for KPMG LLP.

Steve is also able to draw upon 19 years of experience working in criminal investigations for HM Inland Revenue (now HM Revenue & Customs). He started in Surrey as an investigator with the Boards Investigation Office and moved to work in London for the Special Compliance Office. Ultimately, Steve migrated to forensic IT in 1994 and became the senior manager of the HM Inland Revenue National Forensic IT Team, based in Nottingham.

In the public sector Steve has worked with many police forces and government agencies including the Serious Fraud Office and (the then) HM Customs and Excise. In the private sector, Steve has continued to support these agencies however his experience is now more utilized by the private sector, particularly in the area of litigation and support of eDiscovery and electronic review.

Steve has been involved in many large-scale fraud cases and litigation engagements that have required hardware, software and documents from numerous locations and a diverse range of IT operating systems to be identified, captured, logged and processed for delivery to investigation and/or review teams.

Steve is also a founder member and Treasurer of F3 (First Forensic Forum) and was the chairman of a cross-industry committee responsible for the development of recognized qualifications in Forensic Computing in the UK.

Photo of F3 Site Administrator… Ted Smith

F3 Site Administrator… Ted Smith

Ted has been a digital forensics investigator at HM Revenue & Customs, Criminal Investigation Directorate, Digital Forensics Group since July 2002. He has been interested in computers since he was a teenager when he used to fiddle about with an old IBM 8086 and MSDOS 5. He joined the Civil Service in 1998 having graduated from university with a BS(c) (Hons) degree. …Read More

Ted has been a digital forensics investigator at HM Revenue & Customs, Criminal Investigation Directorate, Digital Forensics Group since July 2002.

He has been interested in computers since he was a teenager when he used to fiddle about with an old IBM 8086 and MSDOS 5. He joined the Civil Service in 1998 having graduated from university with a BS(c) (Hons) degree. In 2010 he completed an MS(c) in Forensic Computing at Cranfield University, Shrivenham, UK. His final year thesis was a study of eCryptfs – the enterprise level cryptographic filesystem for Linux – and its implementation into Ubuntu GNU/Linux 8.10 and 9.04.

He joined the F3 Committee in 2005 and designed and built a new F3 web site. In 2013, he revamped it again to form the current site.

He is an enthusiastic supporter of open-source operating systems and software applications and he contributes several software projects as well as developing some ‘law enforcement only’ programs. Most recently, he has created an open-source disk imaging tool called YAFFI (https://github.com/tedsmith/yaffi) that is in the making but available for bug tracking and benchmarking. For several years has also developed and maintained a data hashing tool called QuickHash (https://sourceforge.net/projects/quickhash) as well as some other more specific, but generally less interesting, utilities.

He has spent considerable time researching RAM based artifacts and has some “unusual interests” in that area that are typically reserved for LE eyes only.

He writes an online learning platform that includes short videos and textual narratives that demonstrate the functionality of X-Ways Forensics called ‘X-Ways Clips’ (www.xwaysclips.co.uk).

Photo of F3 Secretary… Lindy Sheppard

F3 Secretary… Lindy Sheppard

Lindy was elected to the F3 committee in 2004. She enjoys her role as secretary and is hopeful that she is doing a ‘good job’. Lindy assisted Tony Sammes when he set up the Centre for Forensic Computing at Cranfield University, Shrivenham in 2003. Until the end of 2012, when she left as a result of redundancy, she was the manager of the Centre, a varied role which included the day-to-day running of the Centre; acting as casework manager and exhibits officer; course/student advisor; she was also responsible for business development and marketing.Read More

Lindy was elected to the F3 committee in 2004. She enjoys her role as secretary and is hopeful that she is doing a ‘good job’.

Lindy assisted Tony Sammes when he set up the Centre for Forensic Computing at Cranfield University, Shrivenham in 2003. Until the end of 2012, when she left as a result of redundancy, she was the manager of the Centre, a varied role which included the day-to-day running of the Centre; acting as casework manager and exhibits officer; course/student advisor; she was also responsible for business development and marketing.

Lindy is currently running her own business, LinCaro Consulting http://www.lincaroconsulting.co.uk; the main area of which is Digital Forensics case management and career advice. She is currently building a Register of Digital Expertise, with the intention of providing a service of connecting analysts with those practitioners who have an expertise in specific digital devices (Navigational Systems, HDDs, CCTV etc.)

With an extremely quirky sense of humour and a complete sense of the ridiculous, Lindy is always the first to laugh at herself. She is, a self-confessed workaholic; and spends what free time she allows herself relaxing with her son and daughter and their families. At ‘29’, Lindy is a very young and proud grandmother of Megan, Maisy, DJ and Brooke. Her interests include long distance walking (founder in 2005 of ‘Fingerprints & Footsteps’ (http://www.fingerprints-footsteps.co.uk, dedicated to raising funds for good causes), yoga, most types of music, (from Baroque to Heavy Metal); writing poetry and short stories. She is currently ‘into’ WWII military history, especially the Normandy Campaign of which, her father was a veteran. She is currently researching his military career, also his fathers, awarded the DCM in WWI and her Great Grandfather who fought in the Boer War.

Lindy also likes fast cars…….but sadly doesn’t have the bank balance to go with it!!

Photo of Paul Birch

Paul Birch

Paul is a Senior Manager, on the Forensic Technology Team at the Accountancy Firm BDO LLP. Over the past twelve years his roles have included, Head of the Digital Forensics Unit of the SFO, running his own forensic technology firm – Eagle Forensics Ltd, Senior Managing Consultant of the legal and commercial Forensic Services Team at 7Safe Ltd, Senior Manager at the accountancy firm BDO LLP (first time round) and a Senior Forensic Investigator with HMRC. …Read More

Paul is a Senior Manager, on the Forensic Technology Team at the Accountancy Firm BDO LLP.

Over the past twelve years his roles have included, Head of the Digital Forensics Unit of the SFO, running his own forensic technology firm – Eagle Forensics Ltd, Senior Managing Consultant of the legal and commercial Forensic Services Team at 7Safe Ltd, Senior Manager at the accountancy firm BDO LLP (first time round) and a Senior Forensic Investigator with HMRC. Paul’s work has involved him assisting Corporates, Law firms and Fraud Investigation teams in Criminal and Civil matters both nationally and internationally. His cases have involved areas as diverse as email spoofing, IP theft, fraud and regulatory work.

Paul is a Certified Novell Engineer, a Fellow of the British Computer Society and a Certified IT Professional. He has a Masters degree in Forensic Computing from Cranfield University where he now regularly lecturers on the Masters Degree Network module.

Paul is married with two children and when he is not working or researching forensic computing matters, he likes to find time for rugby (playing and coaching), fishing, CEROC dancing and DIY

Photo of Alex Caithness

Alex Caithness

Alex is a compulsive hex fiddler, regex wrangler, Python evangelist and member of the R&D team at CCL-Forensics. Over the past few years he has spent his time trying to devise ways of getting hold of more and more interesting data and making the data he already has more interesting, especially with regards to mobile devices. …Read More

Alex is a compulsive hex fiddler, regex wrangler, Python evangelist and member of the R&D team at CCL-Forensics. Over the past few years he has spent his time trying to devise ways of getting hold of more and more interesting data and making the data he already has more interesting, especially with regards to mobile devices. As well as developing the internal capabilities at CCL, he has also written a number of commercially available forensic tools as well as open source scripts and modules.

Alex has also spoken at the F3 Annual Workshops and one-day training sessions providing training on digital fundamentals, the Python scripting language and the tools that he has written.

Photo of Gareth Davies

Gareth Davies

Gareth is a senior lecturer (computer forensics) and researcher in the Faculty of Computing, Engineering and Science at the University of South Wales. The main focus of his research is the forensic analysis of physical data storage technologies, in particular data recovery of malfunctioning hardware such as hard disk drives and memory chip-based devices. Over the past 5 years. …Read More

Gareth is a senior lecturer (computer forensics) and researcher in the Faculty of Computing, Engineering and Science at the University of South Wales.

The main focus of his research is the forensic analysis of physical data storage technologies, in particular data recovery of malfunctioning hardware such as hard disk drives and memory chip-based devices.

Over the past 5 years. Gareth has built a name for himself as a consultant and investigator on forensic and evidential recovery cases.  Clients include Hi-Tech crime units., the National Crime Agency, the Ministry of Defence, Government and large commercial organisations.  Gareth is also registered as an expert in forensic data recovery on the National Crime Agency database.

He holds two adjunct lecturer positions; one with the Security Research Centre at Edith Cowan University, Western Australia, and the second with The Centre for Cyber Security, Longwood University, Virginia, USA

He is a committee member of the Association of Digital Forensics, Security and Law (ADFSL) based in the USA.  In his committee role Gareth helps to organise annual conferences and workshops for law enforcement and the wider community.

Gareth has been awarded the Welsh Livery Company (London City Company) Gold Award 2015, for significant contribution in his area of technology.  The award recognises that Gareth has not only advanced himself to a level beyond that expected for his age, but that he is also helping nurture new talent in his field.

During his 2015 summer break, Gareth summited Mount Kilimanjaro (5,895m) in aid of the charity ‘Practical Action’, which supports sustainable clean water supplies for Africa.  He raised £3,500 .