Site Index
Every page on this site, in one place — each practice area and the services beneath it, the industries we serve, our experts, published work, and the full archive of insights.
eDiscovery
Cybersecurity
Digital Forensics
- Digital Forensics — overview
- Cloud Computing Forensics
- Computer Forensics
- Consulting
- Deepfake Forensics
- Expert Witness
- Forensic Analysis
- Forensic Imaging & Chain of Custody
- Internet of Things Forensics
- Forensic Investigations
- Mobile Device Forensics
- Server Forensics
- Social Media Forensics
- Daubert Challenge Defense
Digital Banking
Investigations
- Investigations — overview
- Anti-Bribery, AML & Corruption
- Asset Tracing, Recovery & Forfeiture
- Corporate Risk & Internal Assessment
- Export Controls, Sanctions & Trade
- Financial Regulatory Enforcement
- Forensic Accounting & Fraud
- Insider Trading & Market Abuse
- Litigation Support & Evidence Preservation
- Monitorships & Compliance Reviews
- Whistleblower Allegations
- Trade Secret Investigations
Privacy
Industries
Experts
Case Studies
- All case studies
- eDiscovery Special Master in Gutierrez v. Amplify Energy — the Southern California Oil-Spill Litigation
- Cybersecurity Expert in United States v. Joseph Sullivan — the Uber CSO Prosecution
- eDiscovery Expert in the Volkswagen “Clean Diesel” Emissions MDL
- eDiscovery Expert in Washington Commanders v. National Football League
- Forensic Attribution Halts a Departing Engineer's Theft of Grid Design Data at an Electric Utility
- Forensic FCPA Investigation for an International Energy Developer
- Insider Theft of Proprietary Routing and Pricing Models Traced and Proven at a National Logistics Carrier
- Exposing a Royalty-Pipeline Licensing Fraud for a Global Media Company
- Forensic Attribution of Faculty Research-IP Theft at a Public Research University
- Trade-Secret Exfiltration Forensics Behind a National Retailer's Emergency Injunction
- Tracing a Pre-Release Leak to Its Source and Building the Record for Civil and Criminal Action
- Serving as court-appointed special master to resolve a discovery deadlock in aerospace MDL litigation
- Sanctions and Export-Controls Exposure Quantified and Remediated for a Global Automotive Group
- Defending a broker-dealer against an SEC spoofing investigation with forensic trading-data analysis — and closing the inquiry without charges
- Surviving Daubert as the cybersecurity expert in a connected-device class action
- Eight-Figure Digital Asset Recovery for a Global Cryptocurrency Liquidity Provider
- Standing up a blockchain and digital-asset compliance program for an asset manager
- Nation-State OT Intrusion Contained at a Major Regional Electric Utility
- Turning a payments platform data incident into a privacy-program transformation — and avoiding an $18M regulatory fine
- Building a board-level cybersecurity program for a gaming and hospitality group
- Trade-Secret Theft Uncovered at a Fortune 100 Industrial Manufacturer
- eDiscovery Backlog Resolved and Litigation Risk Contained for a Major Federal Agency
- Ransomware Response and HIPAA Breach Containment at a Large Academic Medical Center
- Privacy Program Overhaul for a Multi-State Hospital System Under HIPAA, CCPA, and Emerging State Law
- Cutting eDiscovery cost by 60% and winning early dismissal for a national insurance carrier facing a multi-state data-breach class action
- Running cyber and privacy due diligence on a cross-border logistics acquisition
- Investigating a business-email-compromise wire-fraud scheme at a global shipping company
- Unmasking a Deepfake Content Ring That Defrauded a Global Streaming Platform
- Internal Whistleblower Investigation at a Multinational Manufacturer
- Uncovering a $28M insider-fraud scheme before close — and preserving a private-equity firm's portfolio investment
- Protecting a $4B Drug Pipeline: Forensic Investigation and eDiscovery in a Trade-Secret Dispute
- Containing a ransomware crisis and restoring operations for a global bank in 72 hours
- Ransomware Incident Response and Recovery for a Regional Financial Institution
- Breach Scope Contained and Regulatory Exposure Limited for a Top-10 U.S. E-Commerce Retailer
- Turning a Cloud-Platform Breach Into a Privacy Compliance Transformation
- Testifying as source-code expert in a semiconductor patent infringement trial
- Special Master and Mediator in In re: Facebook — the Cambridge Analytica Privacy MDL
- Nine-Figure Arbitration Award in Software Trade-Secret Misappropriation Matter
- SIM-Swap Fraud Ring Dismantled and $38 Million in Customer Losses Attributed for a National Telecommunications Carrier
- Safeguarding Federally Funded Research After a Nation-State Intrusion at a Top-10 Research University
Resources
FAQs by practice
Answers
- Can cloud data be forensically collected?
- Can deleted files be recovered?
- Can deleted text messages be recovered?
- Can our IT department do the forensic collection?
- Can phone location history be used as evidence?
- Can Slack and Teams messages be used as evidence?
- Can we examine an employee's personal phone?
- Do I have to disclose that I used technology-assisted review?
- How do I challenge the other side's forensic expert?
- How do I preserve a departing employee's laptop?
- How do you authenticate a screenshot?
- How do you detect a deepfake?
- How do you prove a document was backdated?
- How do you prove files were copied to a USB drive?
- How long does a digital forensics examination take?
- How should we respond to a ransomware attack?
- We think an employee took data. What do we do first?
- What does a digital forensics expert witness cost?
- What does a digital forensics report contain?
- What makes digital evidence admissible in court?
- What sanctions can a court impose for spoliation?
- What should an ESI protocol include?
- When does a court appoint a special master?
- Who pays for a special master?
Glossary
- Anti-forensics
- Asset tracing
- Audit log
- Blockchain analysis
- Business email compromise
- CCPA
- Chain of custody
- Clawback agreement
- Cloud forensics
- Custodian
- Cyber insurance
- Data breach
- Daubert standard
- Deepfake
- Electronically stored information (ESI)
- Ephemeral messaging
- ESI protocol
- Forensic accounting
- Forensic image
- Forensic neutral
- GDPR
- Hash value
- Incident response
- Insider threat
- Legal hold
- Metadata
- Mobile device forensics
- Predictive coding
- Privilege log
- Proportionality
- Ransomware
- SEC cyber disclosure rules
- Social media evidence
- Special master
- Spoliation
- Timeline analysis
- Trade secret
- Write blocker
Comparisons
Guides
Insights by topic
Insights archive
The firm
Legal
Have a matter that turns on the evidence?
Tell us what you're facing and we'll point you to the right team.