Colin Ramsden Pgdip

WORK HISTORY

EDUCATION

ABOUT COLIN RAMSDEN PGDIP

Colin is a respected Digital Forensics and Incident Response professional who has over 15 years’ experience in both Government (MoD) and corporate sectors. During this time, he has attained a Post Graduate Diploma in Forensic Computing from Cranfield University and several renowned SANS certifications. Furthermore, Colin has attended approximately 40 vendor specific courses.His background, for 10 years, was predominantly conducting forensic acquisition and analysis upon electronic devices that were seized during criminal investigations. He also deployed multiple times to both domestic and international locations to assist in the recovery and on-site analysis of digital devices.Colin is now employed as the Incident Response Team Lead for Grant Thornton UK LLP, which involves deploying to client sites at short notice, along with his team to assist with the investigation and recovery of various size organisations IT infrastructure, which is usually as a result of a devastating ransomware attack.He is usually the ‘go to person’ when the need arises to extract data from systems that are difficult to access, conduct complex analysis and salvage log fragments etc. from partially encrypted virtual or physical hard disk drives.Colin is also the creator of Windows Forensic Environment Lite (WinFE Lite) and he is the author of the Write Protect Tool that is used within the WinFE family of forensic acquisition and triage platforms. And in his own words, he states that this is by far, the best forensic acquisition tool available!CV Available upon request.Specialties:Programming Assembly Language, C++, Python, PowerShell)Reverse Engineering extraction from, for example, iSCSI storage arrays where the Target Server no longer existsWindows Forensic Environment (WinFE) Developer