Mark McKinnon has over 20 years experience in IT. He started his career writing programs on a mainframe computer, then went on to do systems analysis, database administration, security audits and finally computer forensics. He received his computer forensic training from Key Computer Service through their training partnership with Kennesaw State University in Georgia.
Mark is a Certified Computer Examiner (CCE) and a GIAC Certified Forensic Analyst through SANS. He is active on many Computer Forensics forums helping other forensic examiners with technical problems and has contributed to the SANS Digital Forensics and Incident Response blog.
Mark has written many programs which aid in the computer forensics examination process. These programs are posted on his blog “Computer Forensics/Electronic Discovery Tips, Tricks and Information” (http://cfed-ttf.blogspot.com).
In 2005, Mark started RedWolf Computer Forensics and developed a program called “Drive Prophet” which is a triage program for Windows Systems. He has created many free programs used by forensic examiners around the world including Skype Log Parser, Google Chrome Parser, Windows Prefetch Parser, MFT Parser and the Vista Thumbcache Parser on which Mark holds a US copyright.
Mark has presented at the DoD Cybercrime conference, Sans What Works in Incident Response and Computer Forensics, and several regional conferences. He has also been interviewed on the Cyberspeak podcast.