Computer Forensics
- Hard drive, server, and workstation examination
- File‑sharing, peer‑to‑peer, and TOR network cases
- Email header analysis and IP address attribution
- Artifact, timeline, and user‑activity reconstruction
EnCase · FTK · Magnet AXIOM
Digital Forensics · Expert Witness
Thomas Pullen, J.D., M.C.P., is a state and federal court‑certified expert in computer forensics and mobile forensics, with more than 25 years advising law firms, businesses, and government agencies — and a track record of testimony that judges have qualified and juries can follow.
Law degree from the University of Miami; decades in systems, networks, and forensic laboratories. I read discovery the way counsel does — and interrogate the data the way an examiner must.
Qualified as an expert in computer and mobile forensics by multiple United States District Judges and Florida circuit judges, with trial testimony in matters from homicide to federal racketeering.
Technical conclusions are only useful if the trier of fact understands them. My reports and testimony translate artifacts, logs, and extractions into plain English that survives cross.
Capabilities
Examination, independent review, and testimony across the full range of digital evidence — using the same court‑tested platforms relied on by federal laboratories.
EnCase · FTK · Magnet AXIOM
Cellebrite · Oxygen · Magnet AXIOM
CDR · Timing Advance · GPS Mapping
Case Types
Retained by defense counsel, civil litigators, and appointed in federal matters as a Criminal Justice Act (CJA) vendor. Every engagement begins with a conflict check and a candid assessment of what the evidence can — and cannot — support.
Multi‑defendant federal conspiracies, RICO and Hobbs Act matters — including terabyte‑scale discovery with dozens of devices.
Wire, tax, identity, and healthcare fraud — tracing the digital paper trail through emails, servers, and financial records.
Phone, GPS, and call‑record analysis in federal trafficking prosecutions, with trial testimony as a qualified expert.
Independent defense review of NCMEC CyberTips, P2P evidence, and device reports — work that has contributed to dismissed and declined charges.
Cell phone location analysis, social media records, and device artifacts in murder, battery, and firearms cases.
Defamation, business disputes, and employment matters — IP attribution, email authentication, and spoliation questions.
Court‑supervised filtering of attorney‑client privileged material from device extractions and seized discovery.
Organizing and curating terabytes of phones, video, jail calls, and social media into evidence a trial team can actually use.
Court Record
Since 2011, I have examined digital evidence in state and federal prosecutions across South Florida and beyond — and taken the stand when it counted. Multiple United States District Judges and Florida circuit judges have qualified me as an expert in computer forensics and mobile forensics before juries.
The work has ranged from a single phone in a state case to matters of international consequence — including the federal prosecution arising from the 2021 assassination of Haiti’s president, with over one hundred cellphones and more than 25 terabytes of evidence to organize and examine.
I serve as a vendor on the federal CJA panel and for Florida’s Justice Administrative Commission, and consult privately for retained counsel nationwide.
Credentials
Consult on a Case
Conflict check and initial consultation by email. Engagements accepted from defense counsel, civil litigators, corporations, and government agencies nationwide.
Based in Florida · Serving counsel nationwide · English / Español