Take things slowly or dive right in – our training team will meet you there.
Get the latest thinking, or earn an industry-leading certification – your way and on your time. Learn online with a dedicated view right into a live classroom, come to one of our certified training centers, or take a class online, on demand. Learn More
New to EnCase Products?
The best classes to ramp up quickly:
- Foundations in Digital Forensics
- Building an Investigation
- EnCase Startup
- EnCase Fundamentals
Lyn Goh joined Guidance and the U.K. Training team full-time in July 2015 after having worked as a part-time instructor for 8 years. Lyn has 30 years of experience working in IT, having started her career working on mainframe systems and networks. Prior to joining Guidance Lyn worked for the U.K.’s Forensic Science Service where she worked as a computer forensics investigator, investigating a wide range of crimes and giving evidence on cases that included child exploitation, drug smuggling, and fraud. After leaving the Forensic Science Service, Lyn worked for the U.K. financial regulator and worked on both criminal and regulatory investigations, many of which involved liaising with and/or working on joint operations with overseas regulators. Lyn has a Batchelor of Science degree in Chemistry and Natural Science and a post graduate Master of Science degree in Computer Forensics. Lyn also maintains the EnCase Certified Examiner (EnCE) certification.
Matt McFadden joined Guidance full-time in November, 2012 after having worked as a part-time instructor for 8 years. Matt currently serves as Director of the Curriculum Development team and is based in Dulles, VA. After 17 years of experience in law enforcement, Matt retired as a Police Sergeant from the Clovis Police Department in California. For 13 years, Matt conducted computer forensic investigations and supervised their department’s high technology crime team. He has provided expert testimony in state and federal courts for computer evidence examined in child exploitation, murder cases, fraud, and other crimes. His computer forensic case work has been featured by CNN, People Magazine, New York Times, TruTV, Oxygen Channel’s show Snapped, and in the book “Caught in the Web – Inside the Police Hunt to Rescue Children from Online Predators” by Julian Sher. Matt has received letters of commendation from the California and United States Attorneys General and a Unit Citation from the United States Customs Service for his computer forensic investigations. Matt received HTCIA’s Case of the Year award in 2003 for his computer forensic work in Operation Hamlet – an investigation that disrupted an international child exploitation ring. In addition to holding the EnCase Certified Examiner (EnCE) certification and the Certified Forensic Security Responder (CFSR), Matt has been a Certified Forensic Computer Examiner through IACIS since 2002.
Lisa Stewart began her career in 1986 as a Training Technician at the Federal Law Enforcement Training Center (FLETC) Computer Economic Crime Division after receiving Bachelor of Science Degrees in Math and Computer Science from Georgia Southern University, Statesboro, Georgia. In 1988 she was selected as an Instructor and was assigned to conduct training in computer forensics. In 1990 she was promoted to Senior Instructor of the Financial Fraud Institute and inherited responsibility for the Criminal Investigations in an Automated Environment and Seized Computer Evidence Recovery Specialist Training Programs. In 2002, she was assigned as the Acting Division Chief, supervising approximately 20 instructors while maintaining duties as the program manager for the Seized Computer Evidence Recovery Specialist Training Program. Lisa joined Guidance full-time in 2003 and currently serves as a Master Instructor based in the Dulles, VA Training facility and maintains her EnCase Certified Examiner (EnCE) certification.
Eddie Garren has been in the field of computer forensics since 1999 as a practitioner as well as conducting research and development of computer forensic investigative techniques and training curriculum. Eddie has an undergraduate degree in Criminal Justice from the University of Tennessee and a graduate degree in Network Security from Capitol College. Prior to joining Guidance as a full-time instructor based in the Chicago office, he served as a Criminal Investigator with the Georgia Governor’s Office and as Forensic Computer Examiner with the US Department of Health and Human Services, Office of Inspector General. Eddie also spent five years as Computer Crime Specialist with the NW3C where he led the development of numerous training classes for NW3C and Department of Homeland Security. Eddie has been a guest presenter at the FBI training academy as well as at several international and regional conferences. He serves as an adjunct professor at Fairmont State College and maintains several certifications, including Certified Forensic Computer Examiner (CFCE), Certified Information Systems Security Professional (CISSP), and EnCase Certified Examiner (EnCE).
Tony first joined Guidance as a part-time instructor in 2009 and moved to a full-time instructor role in 2015. Prior to Guidance, Tony served with the Tinley Park Police Department (a Chicago suburb) for 20 years, retiring as a detective specializing in digital forensics and technology-based crimes. Tony was a member of two Internet Crimes Against Children Task Forces and conducted digital forensic examinations for numerous local, state and federal agencies. Concurrent with his law enforcement career, Tony was a cofounder of a digital forensics consulting company, providing digital forensic, electronic discovery, and incident response services to law firms, companies, and government agencies. Tony has testified as an expert witness in digital forensics in numerous federal and state courts. Throughout his career, he has conducted Continuing Legal Education (CLE) presentations, has spoken at numerous professional organizations and universities, and been a guest instructor at the Federal Law Enforcement Training Center. Tony is a graduate of Lewis University, a member of the IACIS, HTCIA, DFCB and HTCC industry organizations, and maintains the EnCE, CFCE, and DFCP certifications.
Carl Purser joined the Guidance U.K. training team as an instructor in November 2010, following a career with the Metropolitan Police, London UK. During his years there, Carl’s duties included assignment to the computer forensic section in September 2002. Beginning as a technician, Carl rapidly advanced to the role of examiner, focussing on Windows and Apple computer systems as well as associated storage devices. He also was tasked with the examination of numerous iPhone and iPad devices. Carl additionally instructed police officers in the areas of evidence handling and crime scene searching, relating to the digital crime scene and the capabilities of the digital examination laboratory. Carl received a OCU Commanders Commendation for Professional and dedication to duty as a result of his activities in a digital investigation of computers and media involving child exploitation materials. Carl obtained training in several areas, including iPhone and Macintosh Forensics. He has obtained a MS degree in Information Security and Computer Crime issued by Glamorgan University as well as a BSc Electronic Engineering with Computing issued by Kingston University. Carl also maintains the EnCase Certified Examiner (EnCE) certification.
Stephen currently serves as an instructor based out of the Guidance Pasadena office. Immediately prior to joining Guidance in mid-2016, he spent several months on a large electronic discovery project as a contractor for a major pharmaceutical corporation. During 2010 through 2015, Stephen deployed to both Iraq and Afghanistan as a civilian contractor several times, conducting Document and Media Exploitation (DOMEX/MEDEX) for the U.S. Army’s Military Intelligence branch, the National Ground Intelligence Center (NGIC), and the Defense Intelligence Agency (DIA) as well as doing work for numerous other government agencies. This work involved collecting and reporting on battlefield intelligence derived from the forensic analysis of computers, mobile telephones, digital storage devices, audio and video recordings, and paper documents. His final assignment in Afghanistan focused on mentoring the Afghan National Police in the establishment of their second national forensics crime lab. Stephen became involved in computer forensics in 2009 while working in the IT division of a large university when the campus began using EnCase Enterprise. He earned certificates in Computer Forensics I & II, along with a third certificate in Electronic Discovery. Three weeks after completing his final certificate, he left his university position to deploy to Iraq. In between overseas deployments in 2012 and in 2013, Stephen attended all of the training classes offered by Guidance and he also earned his EnCase Certified Examiner (EnCE) and Certified Ethical Hacker (CEH) certifications.
Prior to joining Guidance, Serj worked in the private sector as an IT consultant for a number of consulting firms and taught the MCSE track for four years. Serj joined Guidance as a Technical Support Engineer in 2008 and supported customers with technical issues on different platforms for four years before becoming an installer specialist for the EnCase Enterprise product, helping customers deploy EnCase Enterprise in their existing infrastructure. He also helped to build the virtual machine (VM) infrastructure for the Training department. In 2014 he transitioned to be full-time Instructor based in Pasadena, CA. Serj maintains several certifications, including A+, Network+, MCSE, MCDBA, MCT, CCNA, EnCE, and EnCEP.
Manfred joined the Guidance Training team as an instructor in January, 2006 and currently serves as the Director of the Pasadena Training facility. Originally from Germany, Manfred conducts numerous courses around the world, particularly in Europe, in his native language in addition to teaching at our U.S. based facilities. Prior to joining Guidance, Manfred worked in Germany with Cisco Systems GmbH, AXENT Technologies (Symantec), and as an IT Consultant. Manfred maintains several certifications, including the EnCase Certified Examiner (EnCE), EnCase Certified eDiscovery Practitioner (EnCEP), and CISSP.
Carly currently serves as a full-time instructor for the Guidance Training team based out of the Dulles, VA office. She received her Bachelor’s degree in Networking/Telecommunications from the University of West Florida with a minor in Criminal Justice. She has completed various internships, including work with the Virtual Student Foreign Service program in a virtual internship through the Department of State in Beijing, China. Through this program she helped developed a Cybersecurity task matrix using the NIST 800-53 documents to assist government workers be securely compliant through their daily routines. Carly has also completed IT Security internships with local colleges where responsibilities included firewall management, network cabling, and virtual server setups. She also completed an internship with Stratcon, LLC, helping to develop realistic scenarios for the Cyber Intelligence mock investigations within their training department. Carly will be completing her Cybersecurity Master’s degree with concentration in Digital Forensics at the end of 2016 from the University of South Florida. She maintains certifications with Guidance (EnCE), Blackbag Technologies (CBE), and CompTIA (Network+) as well as an Intelligence Analysis certificate from the University of West Florida.
Bill Thompson joined Guidance in 2006 and serves as an instructor as well as the Director of the U.K. and EMEA office. His tenure with Guidance has included travel throughout Europe, delivering specialized training to a variety of agencies. Prior to joining Guidance, he enjoyed a 22-year career with Her Majesty’s Royal Air Force Police (RAFP) as a Special Investigator and Crime Scene Examiner. He subsequently became a member of the RAFP Computer Forensics team, conducting examinations involving service personnel and supporting civil authorities and NATO. Upon retiring from the RAF, he worked in the private sector as a computer forensic practitioner for a telecommunications service provider and for the Forensic Science Service. Bill has successfully completed post graduate training at the Royal Military College of Science at Cranfield University completing the Computer Forensics Foundation, Networking and Internet and Email courses. Bill maintains several certifications, including the EnCase Certified Examiner (EnCE).
Simon Key joined Guidance as a full-time instructor in 2004, following a 17½-year career as a police officer working for Northamptonshire Police, a small county police force located in central England. In 2008 Simon moved into the Guidance Training department's Curriculum Development unit. While continuing to teach, Simon concentrates on maintaining and updating the Macintosh Examinations and EnScript Programming courses as well as develops new courses. Prior to joining the UK training team at Guidance, Simon spent the majority of his police service as a uniformed custody sergeant in charge of the welfare and treatment of detained persons. He performed these duties until 2000 when he became Northamptonshire Police's forensic computer examiner. During his time in that post Simon became involved in training for a U.K.-based group of forensic computer practitioners called “F3.” Simon setup the first F3 website, was a member of the F3 committee, and presented several training sessions at F3 events. Simon continues to present at the annual F3 training workshops on a regular basis. In addition to his involvement with the F3 group, Simon also took on the role of visiting lecturer at the U.K. Defence Academy campus of Cranfield University at Shrivenham. Simon is a regular presenter at the Guidance Enfuse conference and spends a substantial amount of time writing EnScript programs, some of which have been incorporated into EnCase itself.
Daniel joined Guidance in July of 2006 and has worked in various facets of the business, including Pre-Sales, Enterprise Implementations, and Forensic Examinations. Daniel also oversaw the e-discovery processing for what would have been the world’s largest class action suit. His personal knowledge and experience in the industry has helped shape processes internally at more than a quarter of the Fortune 100 Companies and more than 15% of the Fortune 500. Daniel is currently a full-time Instructor with Guidance and travels to various facilities to conduct several courses, which supports his passion for research and the sharing of knowledge and experience. Daniel maintains his EnCase Certified Examiner (EnCE) and EnCase Certified eDiscovery Practitioner (EnCEP) certifications.
Nathen Langfeldt joined Guidance and the Chicago Training team in 2008. Before joining Guidance, Nathen worked as lead officer in the private security industry for several years. He currently splits his time teaching from the Chicago office, traveling and teaching from other Guidance Training facilities, and serving on the Curriculum Development team. Nate conducts several of the most advanced courses and has devoted much of his time to researching many aspects of the Windows 7 and Windows 8 operating systems, the results of which have been migrated into the content of several courses. Nathen maintains several certifications, including the EnCase Certified Examiner (EnCE) and the EnCase Certified eDiscovery Practitioner (EnCEP).