David L. Biser: Digital Forensics & Incident Response
I have spent over 20 years uncovering the facts behind security breaches and building the programs needed to prevent them. My career is rooted in decades of service as a cyber-criminal investigator, where I conducted digital evidence recovery and assisted agencies like the FBI, U.S. Secret Service, and ICE with investigations.
Today, I work at the intersection of deep-dive forensics and organizational strategy. Whether I am leading a team through a ransomware recovery or serving as a vCISO for a growing firm, my goal is to provide clear, actionable intelligence that resolves the immediate crisis and strengthens their long-term defense.
How I Help
Incident Response & Remediation: I specialize in containing and recovering from Business Email Compromise (BEC) and ransomware attacks, coordinating closely with legal teams and insurance providers to ensure a compliant and thorough recovery process.
- Digital Forensics: I perform advanced forensic examinations—including Registry reviews and MFT/AmCache analysis—to identify entry points and data exfiltration.
- Threat & Vulnerability Management: Beyond the breach, I design vCISO programs and vulnerability assessments that help organizations stay ahead of emerging threats.
- Strategic Readiness: I craft and lead custom tabletop exercises, giving leadership teams the hands-on experience needed to handle real-world security incidents with confidence.
Tech Toolbox
- Forensics: Magnet Axiom, EnCase, FTK Imager, Autopsy, and CDIR.
- EDR & Monitoring: CrowdStrike, Sentinel One, Microsoft Defender, Carbon Black, and QRadar.
- Threat Intel: Malware analysis (REM), VirusTotal, and Any.Run.
Certifications & Experience
My expertise is backed by 20+ years of field experience and specialized training from the U.S. Secret Service, EC Council, and the SANS Institute. I hold certifications in Computer Hacking Forensic Investigation (CHFI), Certified Ethical Hacker (CEH), and Certified Penetration Tester (CPT).
I am currently available for freelance consulting, forensic audits, and full-time leadership roles. If you need an investigator who understands the lifecycle of a threat from the crime scene to the cloud, let’s connect!