Cynthia Fitch

• University of Louisville | Louisville, KY
  Master of Education, Educational Counseling Psychology
• University of Louisville | Louisville, KY
  Bachelor of Arts, Histor

Speckin Forensics, LLC | Digital Forensic Investigator  – 2025 to Present

• Identify, acquire, analyze and conduct forensic imaging and data recovery of digital devices, including computers, hard drives, mobile phones, and cloud-based storage in both criminal and civil investigations.
• Prepare detailed forensic reports, declarations and present testimony in depositions and court proceedings as an expert witness.
• Examination and review of digital data provided in civil cases, corporate investigations, and matters related to criminal offenses.

• 2023 – IACIS Mobile Digital Forensics MDF202307
• 2022 – SANS 585 Smartphone Forensics (50 hours)
• 2021 – IACIS Windows Forensic Examiner (36 hours)
• 2020 – USPIS Digital Evidence, Axiom, Sumuri Mac and Courtroom Training (9 Hours)
• 2019 – SANS 508: Advanced Incident Response, Threat Hunting and Digital Forensics (49 Hours)
• 2019 – USPIS Digital Evidence, Macintosh Forensic Essentials (16 Hours)
• 2018 – USPIS Cryptocurrency/Dark Web (16 Hours)
• 2017 – Encase v7 Computer Forensics II (32 Hours)
• 2017 – Recon for MAC OS forensic training (24 Hours)
• 2016 – X-Ways computer forensics (24 Hours)
• 2015 – IACIS Basic Forensic Computer Examiner (80 Hours)
• 2015 – USPIS Digital Evidence, Triage Responder, OSTriage, RAM & EnCase v7 Ent. (24 Hours)
• 2013 – Handheld Devices and Crimes: Online Training (40 Hours)
• 2013 – USPIS Digital Evidence, Mobile Device Training (40 Hours)
• 2013 – The Computer and Enterprise Investigations Conference
• 2012 – Cellebrite UFED/Physical Certification
• 2012 – Techno Security and Forensic Investigations and Mobile Forensics World Conference
• 2012 – The Computer and Enterprise Investigations Conference
• 2012 – Peer Marshal / Mac Marshal Train
• 2012 – XRY Cell Phone Training and Certification 2010 Comptia A+ (Certification)
• 2010 – EnCase Network Intrusion
• 2010 – NW3C Linux Forensics
• 2009 – EnCase EnCE Prep Class
• 2009 – EnCase Computer Forensics II
• 2009 – EnCase Computer Forensics I
• 2009 – AccessData’s FTK Windows Forensics Vista
• 2008 – AccessData’s FTK Windows Vista Forensics
• 2007 – Computer Forensics with FRED
• 2007 – 6th Annual ICAC National Conference
• 2007 – AccessData’s FTK Internet Forensics
• 2007 – Investigating Computer Facilitated Crimes Against Children
• 2007 – Cell Phone Forensics 101, Presented by BK Forensics
• 2007 – AccessData’s FTK Windows Forensics
• 2007 – AccessData’s FTK Boot Camp
• 2006 – EnCase Intermediate Training
• 2004 – GIAC Security Essentials Certification (GSEC)

United States Postal Inspection Service | Detroit, MI July 2013 to October 2024
Digital Evidence Unit (Forensic Laboratory Services) | Computer Forensic Analyst
• Identify, acquire, and analyze digital media using forensically sound methodology in an accredited
ASCLD/LAB computer forensic lab environment in support of criminal investigations.
• Recover data and perform forensic examinations on desktops, laptops, cell phones, and portable devices across multiple platforms (Windows, UNIX, Macintosh).
• Help analyze findings in investigative matters and develop fact-based, technical reports detailing events over specified periods of time.
• Processed cloud storage and takeout packages from Apple and Google.
• Explain technical data from cases for court preparation to local, state, and federal attorneys.
• Maintain chain of custody for evidence submitted to DEU.
• Participate in search site warrants, triaging devices for Inspectors and imaging devices on site when needed.
• Work with law enforcement agents in the field on proper seizure procedures and provide advice about search warrants and evidence retrieval.
• Maintain Laboratory computer equipment, performing necessary upgrades and maintenance asrequired.
• Investigate a wide variety of cases including child exploitation, drugs, employee misconduct, and identity theft and fraud.
• Developed clear, accessible training materials and course content by translating complex technical and forensic concepts into understandable formats for new and junior employees.
• T5R (Top security clearance) granted by USPIS.
• Received IACIS Certified Forensic Computer Examiner (CFCE) certification.

Kentucky State Police | Frankfort, KY February 2007 to June 2013
Electronic Crime Section (Division of Technical Services) | Forensic Examiner II
• Performed forensic investigations utilizing EnCase, FTK, Cellebrite, and XRY.
• Certified in multiple cell phone forensic programs (XRY and Cellebrite).
• Recovered data and performed forensic investigations on desktops, laptops, and portable devices across multiple platforms (Windows, UNIX, Macintosh).
• Court preparation with federal attorneys on cases, explaining technical data for court presentation.
• Maintained chain of custody for evidence submitted to Electronic Crime Branch.
• Crafted policies and procedures for the entire branch, focusing on best practices and industry standards.
• Presented “lunch and learn” seminars to various computing groups and businesses on topical subjects like cell phone app security.
• Maintained electronic databases as well as physical evidence logs.
• Provided in-field training and guidance to law enforcement personnel on proper digital evidence seizure procedures, translating legal and technical requirements into clear, actionable instructions to support effective learning and compliance.
• Maintain Laboratory computer equipment, performing necessary upgrades and maintenance asrequired.
• Received Encase Certified Examiner certification in February of 2010.
• Recognized for having an excellent ability to describe complex technical concepts and ideas in non-technical terms.

Kentucky State Police | Frankfort, KY February 2007 to June 2013
Electronic Crime Section (Division of Technical Services) | Forensic Examiner II

Commonwealth Office of Technology (NOC) | Frankfort, KY July 2001 to February 2007
Security Team | Forensic Examiner
Security Auditing Team | Team Leader 
Server Team | Team Member 

• CFCE- Certified Forensic Computer Examiner, IACIS  – 2016, 2019, 2022, 2025
• ENCE- EnCase Certified Examiner, Guidance Software  – 2010 (recertified 2013, 2016, 2019)
• Cellebrite UFED- UFED Mobile Device Examiner  – 2012
• Cellebrite UFED- UFED Physical Examiner  – 2012
• XRY – XRY Certification of training  – 2012
• A+- CompTIA 2010  – (Lifetime)
• GSEC GIAC- SANS  – 2008 (expired)

• Computer Forensics
• Digital Forensics Incident Response
• Network intrusion and Cybersecurity
• Expert witness in state and federal court
• Network security and threat hunting
• Systems and server administration
• Internal investigations
• Policy implementation, procedure overview, change management
• Onsite and field covert forensic imaging
• CFCE, ENCE, SANS, A+, T5R clearance
• Reporting and collaboration with clients, attorneys, and stakeholders
• Education and training background
• EnCase, X-Ways, Axiom, Cellebrite, NIST, OIS