BUNTING DIGITAL FORENSICS
Where Data Meets Testimony
Digital Forensics That Goes Deeper
You don’t need another tool. You need someone who understands where the data lives, how it decays, and how to explain it clearly to a jury. I’m Stephen Bunting. I’ve spent 36 years in law enforcement, the last 26 years in digital forensics, and I now work as an independent examiner and expert witness.
I’m one of this industry’s pioneers, having started at the very beginning. My work, teachings, and publications have helped shape the digital forensics profession, documenting and promulgating many of the best practices in use today.
⚠️ Digital evidence is perishable. Minutes—not days—can make the difference. If you suspect a phone, computer, or cloud account may contain evidence, contact me immediately. Time-sensitive logs can vanish within 24 hours.
What I Do
I provide expert digital forensic analysis and courtroom testimony in criminal, civil, and internal investigations. I work with defense attorneys, prosecutors, civil litigators, and organizations seeking clarity and truth in complex digital cases.
Where push-button forensics end, I begin.
- Mobile devices (iOS & Android)
- Cloud storage
- Computers, from servers to laptops, Windows, Macs, and Linux/Unix.
- Storage media of all types, including legacy storage media (tape drives, floppies, zip drives, etc.)
- Logs and artifacts that most examiners overlook
Why It Matters
Digital evidence is often misunderstood—or missed entirely. Vendor courses and certifications alone don’t create an expert. My role is to go beyond the tool output, challenge assumptions, and explain complex behavior in a simple, truthful way. Where others focus on “collecting” certifications, I conduct research, I validate artifacts, I publish and / or share my findings in a mentoring or teaching role or present them in court.
Whether it’s reconstructing intent, detecting anti-forensics, or identifying spoliation, I bring depth and clarity to every case.