Expert Witnesses that have been trained and tested by the FBI and have Federal Court experience.

Decades of experience in obtaining data and turning it into actionable intelligence.

Horizontal dividing line
Horizontal dividing line
"Your performance was recognized as some of the best. We were extremely pleased with your efforts."
--John I.
"WOW! I just had the opportunity to view this report - that is quite amazing work. It really pulls together a lot of useful data into one report (even I can understand)."
--Trey W.
"Your training session provided valuable information for our members and I'm sure they will be able to use what they learned in their respective agencies."
--James D.
Open Hard Drive

About Us:



AR Forensics, LLC is a veteran-owned Digital Forensics Company based in Northern Virginia. We focus on providing high caliber digital experts to satisfy our clients needs. AR Forensics sets itself apart from other companies by leveraging experience and exposure to turn data into actionable intelligence.

The following services are available at AR Forensics:



Computer Forensics


Computer or Cyber forensics is the application of computer investigation and analysis techniques to gather evidence from a computer and making it suitable for presentation in a court of law. The goal of computer forensics is to perform an investigation while maintaining a documented chain of evidence to determine the "who, what, when, where, and how" of a crime involving a computer.



Network Forensics


Coupled with computer forensics, our network forensics offering is a full service Incident Response Team that is skilled and experienced in handling real-world intrusion, attacks and incidents of APT inside a network. When identifying attacks, tools and techniques can be used to capture and inspect data packets passing through the network. These packets can be inspected live or stored for later analysis.



Mobile Forensics


Mobile forensics is the burgeoning science of retrieving data from a mobile device (cell phone, iPod, iPad, etc.) under forensically sound conditions. This includes full data retrieval and examination of data found on a SIM, the phone body itself, and/or optional memory cards. Data retrieved can include images, geotagged files, videos, text or SMS messages, call times and contact numbers—all present and deleted.



Digital Persona Management


Digital Persona management is the art and science applied to maintaining a specific digital identity to match a real identity. This service ensures that individuals (particularly those traveling in theater) do not inadvertently divulge personal identities and information.



Roaming Asset Validation (RAV)


RAV involves the analysis of digital media prior to any travel (whether in or out of country) and then the subsequent analysis of that same media upon returning. The goal of this service is to identify whether or not nefarious activity or access occurred while the digital media was in transit.



Counter-Threat Operations (CTOps)


In today's volatile and progressive world of technology, it is imperative for organizations to be aware of the vulnerable locations within their networks. This service will locate those vulnerabilities within your network, advise and make provisions to securing the same. Often referred to as "Red Teaming" or "Penetration Testing", this service differs because it is enacted like a real attack and not only tests the network, but also the facility, and all personnel.



Tracks Checklist from "Tracks Left Behind..." Presentation


Prefetch Enscript


Parse Unallocated Space for EVT Entries Enscript


AR Forensics can be reached at:



Phone: 571-306-0466


Email: info@ar-forensics.com


Leesburg, Virginia

Map of Leesburg, VA