Summary
Websites
Overview
Work History
Education
Skills
Accomplishments
Certification
a3
SARA NEWCOMER

SARA NEWCOMER

Bel Air,MD

Summary

Professional with deep expertise in digital forensics, qualified as an expert witness, and ready for leadership. Proven track record in driving business growth and operational efficiency. Strong focus on team collaboration and delivering impactful results. Known for reliability, adaptability, strategic vision, and effective problem-solving. Skilled in business management, effective communication, and customer relations.

Overview

25
25
years of professional experience
1
1
Certification

Work History

Co-Owner Digital Forensics Analyst/Engineer

Sabot LLC
05.2024 - Current
  • Company Overview: Sabot LLC provides digital forensics, eDiscovery collection and processing, data recovery, and expert witness testimony.
  • Managed day-to-day business operations.
  • Oversaw daily operations, ensuring all tasks were completed accurately and efficiently by team members.
  • Managed financial aspects of the business, including budgeting, financial reporting, and tax preparation.
  • Consulted with customers to assess needs and propose optimal solutions.
  • Developed and maintained strong relationships with clients, resulting in repeat business and referrals.

Digital Forensics Engineer

Peraton
03.2023 - 10.2024

Digital Media Examiner in Major Crimes Section of DC3, Cyber Forensics Laboratory CFL.

Results Achieved:

  • Displayed a working knowledge of digital forensics and techniques.
  • Displayed strong technical skills in forensics during analysis of digital media, providing complete and accurate documentation of examination and the results of the examination.
  • Provided substantive analysis reports and complete and accurate documentation of examination computers and other digital media in support of criminal investigations.
  • Provided analysis of digital media including cellular devices (iOS, Android), and computers (Windows, macOS) using examination tools such as AXIOM, Cellebrite Inseyets Physical Examiner, X-Ways, OpenText EnCase, Cellebrite Inspector, Oxygen, and other commonly used industry tools.
  • Established strong working relationships with clients through exceptional communication skills, fostering trust and collaboration.
  • Wrote, reviewed and edited technical document in accordance with template requirements.
  • Developed positive working relationships with stakeholders to effectively coordinate work activities.
  • Achieved successful project outcomes by maintaining accurate documentation and meeting strict deadlines.
  • Facilitated knowledge sharing sessions on latest forensic findings, fostering culture of continuous learning among team members.
  • Improved client satisfaction with detailed progress reports and proactive communication during project execution phases.

Technical Writer

BlackBag Technologies (Cellebrite)
03.2019 - 07.2020

Technical writer for BlackBag Technologies responsible for maintaining technical documentation for software products as well as website content, and BlackBag training course content.

Results Achieved:

  • Updated and created User Guides, Installation Instructions, Quick Start Guides, Release Notes, and the BlackBag website for releases of BlackLight, MacQuisition, and Mobilyze. Documents were generated in Confluence.
  • Created new technical documents including whitepapers and case studies.
  • Edited and reviewed instructional materials for BlackBag training courses.
  • Created and edited blog posts and other technical content on the BlackBag website.
  • Wrote and Published Whitepaper Apple Computer and macOS Basics
  • Proved successful working within tight deadlines and a fast-paced environment.
  • Managed version control and timely updates of documents through effective project tracking and organization skills.
  • Conducted thorough document reviews to identify inaccuracies, inconsistencies, or areas needing clarification.
  • Followed company policies and editorial guidelines to craft thorough, well-written content.
  • Collaborated with cross-functional teams to gather information for accurate and comprehensive documentation.
  • Maintained consistency across company documents by adhering to established style guidelines and templates.
  • Coordinated with subject matter experts to ensure the accuracy of technical content in documentation projects.
  • Streamlined internal processes by creating detailed standard operating procedures for various departments.
  • Implemented feedback from end-users to continuously improve the quality and effectiveness of documentation materials.
  • Enhanced user experience by simplifying complex technical concepts into easy-to-understand documentation.
  • Simplified complex technical information into engaging content for non-technical audiences.
  • Conducted regular reviews of existing documentation to keep it up-to-date and relevant.
  • Gathered technical data from engineering teams to produce accurate specification documents.
  • Adapted documentation style to suit different platforms, from print to online formats.
  • Integrated screenshots and diagrams into help articles, making complex processes easier to understand.
  • Managed documentation projects from concept to completion, meeting all deadlines.
  • Enhanced user comprehension by writing clear and concise user manuals for complex software products.
  • Translated technical specifications into user-friendly guides, facilitating easier product adoption.
  • Reviewed and edited technical documents for clarity, grammar, and accuracy before publication.
  • Improved product usability with creation of intuitive help documentation and tutorials.
  • Collaborated with software developers to gain deep understanding of product features for accurate documentation.
  • Worked closely with software engineers, product managers and other departments to determine accuracy and completeness of technical documentation.
  • Edited and proofread technical documents for accuracy and consistency.
  • Observed in-progress operations to identify important steps for technical instructions.
  • Developed detailed technical documents and user guides for technical products.
  • Organized material to research and complete writing tasks.
  • Developed online tutorials and web-based training materials for software products.

Quality Assurance, Independent Contractor

BlackBag Technologies
09.2018 - 11.2018

Quality Assurance team member working on validation of BlackLight 2018 R4 (64-bit version) in macOS environment.

Results Achieved:

  • Performed pre-defined tests on known data sets to ensure BlackLight 2018 R4 functionality.
  • Identified bugs when product did not function as expected.
  • Compared performance of BlackLight 2018 R4 and 2018 R3 when bugs were identified.
  • Submitted idea regarding additional functionality that could be added in future releases of the product
  • Communicated effectively with client throughout the entire project lifecycle, keeping them informed of progress updates or any potential issues that arose.
  • Provided exceptional customer service by addressing client concerns promptly and offering solutions that met their needs.
  • Adapted quickly to changing demands or unforeseen challenges within the project's scope without compromising results.
  • Offered creative problem-solving techniques when faced with unexpected obstacles during the course of the project.
  • Improved overall project quality by reviewing work diligently before submission to the client for approval.
  • Optimized customer experience by delivering superior services and effectively troubleshooting issues.
  • Developed effective improvement plans in alignment with goals and specifications.
  • Gathered, organized and input information into digital database.
  • Consulted with customers to assess needs and propose optimal solutions.
  • Generated reports detailing findings and recommendations.
  • Collected, arranged, and input information into JIRA.

Cyber Intel Analyst

Lockheed Martin
04.2013 - 06.2018

Digital Media Examiner in Major Crimes Section of DoD Cyber Crime Center (DC3), Cyber Forensics Laboratory (DCFL).

Results Achieved:

  • Displayed a working knowledge of Digital and Multimedia (D/MM) forensics and techniques.
  • Displayed strong technical skills in D/MM forensics during analysis of digital media, providing complete and accurate documentation of examination and the results of the examination.
  • Provided substantive analysis reports and complete and accurate documentation of examination computers and other digital media in support of criminal investigations.
  • Provided expert witness testimony in federal court.
  • Provided analysis of computer media with a variety of operating systems including version of Windows, Mac OS X, and Linux.
  • Researched and developed a whitepaper OS X QuickLook Thumbnail Cache SQLite Database Analysis. Presented at SANS Digital Forensics and Incident Response Summit (July 2015).
  • Enhanced customer satisfaction rates through detailed analysis of customer feedback data and subsequent improvements in service offerings.
  • Streamlined reporting processes, significantly reducing time required to generate insights.
  • Enhanced report accuracy, conducting thorough audits of peer reports.
  • Increased reporting efficacy by developing and implementing new report template.
  • Reduced errors in analyses by instituting rigorous quality control checks.
  • Evaluated customer needs and feedback to drive product and service improvements.
  • Educated mentees on organizational mission and goals to help employees achieve success.
  • Maintained overall safe work environment with employee training programs and enforcement of safety procedures.
  • Optimized customer experience by delivering superior services and effectively troubleshooting issues.
  • Developed effective improvement plans in alignment with goals and specifications.
  • Helped meet changing demands by recommending improvements to business procedures.
  • Collaborated with cross-functional teams to identify opportunities for process improvement and increased efficiency.
  • Improved internal knowledge sharing by developing comprehensive documentation outlining standard operating procedures for various tasks.
  • Improved decision-making processes, providing senior management with detailed analysis and actionable insights.
  • Managed multiple projects simultaneously while adhering to strict deadlines and quality standards.
  • Spearheaded project to integrate new analytics software, boosting data analysis capabilities.
  • Generated reports detailing findings and recommendations.

Senior Digital Forensics Analyst

Spherecom Enterprises
11.2012 - 04.2013

Founding member of the Advanced Analytics and Response Center (AARC) for the Centers for Medicare and Medicaid.

Results Achieved:

  • Gathered and created Indicators of Compromise based on observed artifacts. Supported SOC efforts by assessing alerts and determining threat levels.
  • Collaborated with cross-functional teams to identify opportunities for process improvement and increased efficiency.
  • Improved internal knowledge sharing by developing comprehensive documentation outlining standard operating procedures for various tasks.
  • Enhanced team collaboration by providing clear communication of complex findings through visualizations and reports.
  • Implemented predictive analytics techniques that enabled proactive adjustments to business strategies based on emerging trends.
  • Conducted static analysis of malicious files for referral to CERT.
  • Conducted log analysis.
  • Captured relevant data structures from enterprise endpoints for evaluation and remediation efforts.
  • Routinely met with clients to develop strategies for event logging and reporting, including recommendations for improving tool performance.
  • Created detailed metrics to develop baseline security postures to effectively protect the enterprise.
  • Wrote and developed policies and procedures for AARC operations.
  • Developed a metrics program to provide indicators of performance.
  • Developed and executed testing plans for newly implemented incident response tools.
  • Increased efficiency by streamlining data analysis processes and implementing automation tools.
  • Streamlined reporting procedures by creating user-friendly dashboards for easy access to key performance indicators.
  • Developed new analytical models that improved forecasting accuracy and reduced risk exposure.
  • Improved team collaboration with implementation of new communication tools.
  • Optimized operational efficiency by redesigning workflow processes.
  • Streamlined data collection methods to improve speed and accuracy of analysis.
  • Improved decision-making processes, providing senior management with detailed analysis and actionable insights.
  • Developed comprehensive training materials for new analysts, improving onboarding efficiency.
  • Managed multiple projects simultaneously while adhering to strict deadlines and quality standards.
  • Led cross-functional teams in strategic planning sessions, aligning efforts with company goals.
  • Spearheaded project to integrate new analytics software, boosting data analysis capabilities.
  • Generated reports detailing findings and recommendations.
  • Collected, arranged, and input information into database system.
  • Conducted regular reviews of operations and identified areas for improvement.
  • Devised and implemented processes and procedures to streamline operations.

Deputy Lead Technical Engineer

Computer Science Corporation
04.2011 - 11.2012

Senior management team member responsible for the effective development and delivery of highly technical classroom, distance education, and online-hybrid training. Responsible for the oversight of all new course development, special projects, and delivery of over 100 courses per year to over 2,000 students. Responsible for the management of approximately 50 cyber subject matter experts in the areas of cybersecurity, emerging technology, incident response, computer forensics, network intrusions, malware analysis and cyber counterintelligence that delivered products and services to Department of Defense (DoD), DoD Cyber Crime Center (DC3) Cyber Investigative Training Academy (DCITA).

Results Achieved:

  • Increased Cost-Plus Award Fee Contract by 21%, including a 20% increase in the area of Technical Effectiveness from 60% to 80% in 12 months.
  • Acting Track Manager for Technology and Forensics Tracks, directly managed a team of 6 people.
  • Developed and delivered the Macintosh Triage and Forensics curriculum.
  • Designed and developed the Digital Data Protection Course.
  • Designed Incident Response course for online delivery.
  • Managed DC3 Cybercrime Conference process including pre-conference training and conference break-out sessions.
  • Presenter & Instructor DC3 Cyber Crime Conference 2007-2012.
  • Developed and implemented Instructor Development Program.
  • Analyzed instructor performance across the organization to determine effectiveness of resource utilization.
  • Analyzed enrollment trends, student population and drafted and proposed a course calendar based on enrollment information which was accepted by client.
  • Technical editing of courses (Forensic Intrusions in a Windows Environment, Linux Intermediate Fundamentals, Advanced Log Analysis, Digital Data Protection, Computer Incident Response Course, Introduction to Mobile Devices).
  • Designed custom solutions tailored to client-specific requirements, exceeding expectations with creative problem-solving techniques.
  • Provided secondary training to personnel struggling with technological tools and systems.
  • Provided exceptional technical support, addressing client concerns and ensuring their needs were met.
  • Implemented quality control measures to ensure the highest level of product integrity and reliability.
  • Improved system performance by troubleshooting and resolving complex technical issues.
  • Trained instructors and track managers, providing mentorship and guidance to foster their professional growth and development.
  • Established strong working relationships with stakeholders through effective communication and collaboration on shared goals.
  • Reduced production downtime by proactively identifying potential issues.
  • Monitored ongoing technical compliance with applicable laws and regulations.
  • Evaluated vendor proposals for system upgrades, selecting the most cost-effective options without sacrificing quality or performance.
  • Streamlined processes by automating repetitive tasks, increasing team efficiency and productivity.
  • Increased project efficiency by expertly managing resources and adhering to strict deadlines.
  • Meticulously maintained equipment inventory tracking logs, ensuring accurate records for audit purposes as well as efficient resource allocation during projects.
  • Collaborated with cross-functional teams to develop innovative solutions for challenging problems.
  • Provided technical support in both on-site and telephone consultations.
  • Implemented security measures to protect sensitive data from unauthorized access or breaches.
  • Mentored junior team members, providing guidance on best practices and industry standards.
  • Collaborated with other departments to facilitate successful project completion.
  • Designed and implemented quality control processes to facilitate customer satisfaction.
  • Implemented automated systems to improve accuracy and efficiency of schoolhouse processes.
  • Analyzed and interpreted customer requirements to develop solutions.
  • Implemented new strategies to reduce costs and improve efficiency of DCITA team.
  • Analyzed and interpreted data to identify trends and recommend improvements.
  • Developed and implemented procedures to verify compliance with government standards.
  • Created detailed reports on schoolhouse activities.
  • Led DCITA teams to successfully complete projects on time and within budget.

Forensics Professional/Subject Matter Expert

Computer Science Corporation
01.2006 - 04.2011

Assigned to the DoD, DC3, DCITA as a senior member of the Forensics Division charged with development and instruction on Forensic topics such as Windows Forensic Examinations with EnCase and the Forensic Toolkit; Macintosh Forensics; as well as Advanced Forensic Concepts.

Results Achieved:

  • Led development of new courses and rewrote courses for new operating systems including Windows Forensic Examinations Forensic Toolkit, Windows Forensic Examinations EnCase, Macintosh Forensics (all courses are American Council on Education (ACE) accredited for 5 upper-level academic hours).
  • Developed lessons for Windows Forensics Examinations, Advanced Forensic Concepts, Macintosh Forensic Examinations, and Deployable Forensics courses.
  • Developed MR. FAT concept, a FAT3 file system used to explain how the File Allocation Table file system operates.
  • Instructed DCITA courses having students with a variety of skill levels.
  • Developed scenarios to analyze for Windows Forensics Examinations, Macintosh Forensic Examinations, both Law Enforcement and Counterintelligence focused.
  • Mentored junior team members, contributing to their professional growth and development.
  • Established best practices for knowledge sharing, fostering a culture of continuous learning and improvement.
  • Developed effective training materials for diverse audiences, resulting in improved skillsets and increased job satisfaction.
  • Streamlined processes to increase efficiency, enabling teams to complete tasks ahead of schedule.
  • Managed complex projects from inception through completion, delivering high-quality results within tight deadlines.
  • Served as a liaison between technical experts and stakeholders to ensure alignment on project objectives and deliverables.
  • Enhanced team performance by providing expert guidance on critical projects and strategic initiatives.
  • Optimized subject matter content by conducting extensive research and incorporating industry trends.
  • Installed, configured, and monitored new system features based on user needs.
  • Enhanced client relationships by delivering tailored advice and demonstrating in-depth product knowledge.
  • Drove innovation by encouraging exploration of novel approaches to project challenges.
  • Served as go-to expert for resolving technical challenges, enabling smoother project progression.
  • Improved project outcomes with application of advanced analytical skills to solve complex problems.
  • Fostered culture of continuous improvement, identifying and implementing process optimizations.
  • Optimized resource allocation, ensuring projects were completed within budget and scope.
  • Conducted in-depth research to stay ahead of industry trends, ensuring company's solutions remained competitive.
  • Authored conference presentations that positioned DCITA as thought leader in the field of Cyber and Digital Forensics.
  • Cultivated strong professional network to gain insights into emerging industry trends.
  • Frequently inspected classrooms to verify proper equipment operation.
  • Evaluated customer needs and feedback to drive curriculum and classes offered.

Computer Engineer

Army Materiel Systems Analysis Activity
10.2000 - 01.2006

Conducted studies and systems analyses of concepts for current and follow-on generation Command, Control and Communication (C3) systems and architectures. Item level performance, modeling and simulation, system performance. Required knowledge of computer/electronics engineering principles including: methods and techniques of communications, network theory and protocols, error detection and correction coding, electronic countermeasures, and computer architectures

Results Achieved:

  • Administered Non-secure Internet Protocol Router (NIPR) and Secure Internet Protocol Router (SIPR) computer and network systems.
  • Ran network simulation models to simulate battlefield networks, this included in-depth understanding of network communication protocols (TCP/IP), encoding and decoding of information, encryption and decryption of information, and error correction code.
  • Designed databases and developed software analysis tools for C3 studies, including tools to calculate packet transmission rates, message transmission rates, and optimal settings for TCP timeout on various

Education

Master of Science - Applied Information Technology

Towson University
Towson, MD
05.2004

Bachelor of Science - Computer Engineering

Virginia Polytechnic And State University (Virginia Tech)
Blacksburg, VA
08.2000

Skills

  • Digital Forensics
  • Mobile Device Forensics
  • macOS and Windows Forensics
  • Forensic Reporting, documenting results and findings
  • Expert Witness
  • Technical Training and Briefing
  • Research and Testing to Validate Findings
  • Incident Response
  • Tool Verification and Validation
  • Course Development using the ADDIE model
  • Network Security Policies and Protocols
  • Working in ANAB accredited facility
  • Tools:
  • Cellebrite Inseyets Physical Analyzer
  • Magnet AXIOM
  • X-Ways
  • OpenText EnCase
  • Cellebrite Inspector
  • Cellebrite Acquisition
  • Access Data Enterprise and FTK Suite
  • Oxygen
  • Mandiant Intelligent Response
  • Hardware Imaging Devices
  • Macintosh Forensics
  • Cellebrite Digital Collector (MacQuisition)
  • JIRA
  • Confluence
  • Tcpdump
  • Wireshark
  • VMWare Server
  • Passware Kit Forensic
  • Assembly (Motorola, Intel)
  • SNORT
  • NetAnalysis
  • Other Skills:
  • Forensic and working knowledge of Windows, macOS, iOS, Android, and various other Linux distributions
  • Leader in macOS forensics, first in the forensic community to discover and publish findings regarding the QuickLook database and what the data in the database meant
  • Knowledge and understanding of Incident Response investigations including detection and analysis, containment eradication and recovery, and post-incident activity
  • Expert knowledge and understanding of FAT, exFAT, NTFS, HFS, HFS, HFSX, APFS, EXT2/3/4 file systems
  • Expert knowledge of computer networking and network protocols such as TCP/IP
  • Ability to work in Windows, OS X, Linux, and UNIX
  • Working knowledge of, laboratory, and network security policies protocols
  • Respected Leader of results-oriented teams and projects
  • Consistently exceeds standards and achieves tangible results
  • Relationship building
  • Verbal and written communication
  • Customer relations
  • Small business operations
  • Client service
  • Team oversight
  • Staff hiring
  • Consulting
  • Employee development
  • Cost reduction
  • Regulatory compliance
  • Talent development
  • Key partnership cultivation
  • User experience enhancement
  • Hiring and staffing
  • Attention to detail
  • Customer service
  • Decision-making
  • Teamwork and collaboration
  • Team leadership
  • Effective leader
  • Scheduling
  • Goal setting
  • Quality assurance
  • Desktops, laptops, and mobile devices
  • Employee relations
  • Staff training/development
  • Delegating work
  • Performance improvement
  • Employee motivation
  • Operations oversight
  • Management
  • Supervision
  • Technical Writing
  • Hiring/Personnel Actions
  • Requirements Generation
  • Planning
  • After-Action Reviews
  • Peer Review
  • Risk Mitigation
  • Federal Contracting

Accomplishments

Whitepapers Published:

  • OS X QuickLook Thumbnail Cache SQLite Database Analysis: https://www.youtube.com/watch?v=DXHITB6jvQo
  • Apple Computer and macOS Basics: https://www.cellebrite.com/en/apple-computer-and-macos-basics/

Certification

  • IACIS CFCE Certification (lapsed)
  • EnCase Certified Examiner (EnCE)
  • AccessData Certified Examiner (ACE)
  • DoD Certified Digital Media Collector
  • DoD Certified Digital Forensic Examiner
  • CTT+ Certified Technical Trainer