Background
Digital forensics and incident response, with extended experience carrying forensic findings from examination through testimony.
Warren Kruse has spent more than thirty years in the places where truth hides: in hard drives, in network logs, and in the faint digital traces most people never see. As Managing Director at iDiscovery Solutions (iDS), he brings the instincts of a former New Jersey police officer and the precision of a seasoned forensic expert to every matter he leads.
His career has carried him through government agencies, global corporations, and cross-border investigations where the stakes were measured in billions, not budgets. He has unraveled intellectual property theft, exposed fraud, and guided organizations through the pressure of regulatory scrutiny. When the U.S. Securities and Exchange Commission needed a computer forensic expert, they called Warren. He testified. And he delivered.
Warren is not only versed in the field. He has shaped it. He co-authored Computer Forensics: Incident Response Essentials, a foundational text for modern investigators. His work on the Comtraid intellectual property and trade secrets case earned HTCIA’s Case of the Year award. Later, the organization honored him with its Lifetime Achievement Award, a recognition reserved for those who elevate an entire profession.
“Don’t plead your case, prove it. Data tells a story, and our job is to uncover the truth with clarity, integrity, and objectivity.” ~ Warren Kruse
Whether he is leading a high-stakes engagement or speaking at conferences, Warren pushes investigations beyond surface-level searches. He champions advanced techniques such as concept analytics to reveal the patterns, connections, and meaning hidden inside data.
He holds a Master of Science in Digital Investigation Management and a Bachelor of Science in Digital Forensics from Champlain College. He continues to contribute to the field as an active member of the American Academy of Forensic Sciences, HTCIA, ISC2, and The Sedona Conference.
Certifications
- CISSP (Information Systems Security)
- CFCE (Certified Forensic Computer Examiner)
- DFCP (Digital Forensics Certification Board)
- EnCE (EnCase Certified Examiner)
Achievements
- HTCIA President 2002 and 2020
- DFCB President
- HTCIA Case of the Year for Theft of IP
- HTCIA Lifetime achievement
Education
MSc (Master of Science) B.S., Digital Forensics
Areas of Focus
Cyber Investigations · Digital & Mobile Forensics · eDiscovery Lifecycle (Identification to Hosting) · IoT Data · Intellectual Property Theft · Cross-Border Data Issues · Incident Response
Every computer crime leaves tracks—you just have to know where to find them. This book shows you how to collect and analyze the digital evidence left behind in a digital crime scene.
Computers have always been susceptible to unwanted intrusions, but as the sophistication of computer technology increases so does the need to anticipate, and safeguard against, a corresponding rise in computer-related criminal activity.
Computer forensics, the newest branch of computer security, focuses on the aftermath of a computer security incident. The goal of computer forensics is to conduct a structured investigation to determine exactly what happened, who was responsible, and to perform the investigation in such a way that the results are useful in a criminal proceeding.
Written by two experts in digital investigation, Computer Forensics provides extensive information on how to handle the computer as evidence. Kruse and Heiser walk the reader through the complete forensics process—from the initial collection of evidence through the final report. Topics include an overview of the forensic relevance of encryption, the examination of digital evidence for clues, and the most effective way to present your evidence and conclusions in court. Unique forensic issues associated with both the Unix and the Windows NT/2000 operating systems are thoroughly covered.
Computer Forensics is written for everyone who is responsible for investigating digital criminal incidents or who may be interested in the techniques that such investigators use. It is equally helpful to those investigating hacked web servers, and those who are investigating the source of illegal pornography.
Get your copy of Computer Forensics: Incident Response Essentials by Warren G. Kruse II, and Jay G. Heiser
This book provides a detailed methodology for collecting, preserving, and effectively using evidence by addressing the three A’s of computer forensics:
- Acquire the evidence without altering or damaging the original data.
- Authenticate that your recorded evidence is the same as the original seized data.
- Analyze the data without modifying the recovered data.
Featured Publications
