You were a police officer. Can you be independent for the defense?

Yes. The analysis follows the data, not the client. A law enforcement background is an advantage for the defense: it means knowing how these analyses are produced, what shortcuts are common, and which conclusions tend to be overstated. If the evidence supports the government's conclusion, you'll hear that early, during case review, not at trial.

Can you work on court-appointed cases?

Yes. We can provide the scope and cost information you need for a court funding request.

What should I send first?

A brief description of the charges and the type of digital evidence involved, without privileged details. After a conflict check, we'll ask for the discovery: carrier returns, extraction reports, law enforcement reports and maps, affidavits, and any expert disclosures.

Digital Evidence Expert for Criminal Defense

Test the government's digital evidence before the jury hears it

Cellular records, device extractions, and location data are increasingly central to criminal prosecutions, yet the methodology behind the government's analysis often goes unchallenged. We provide independent, technically rigorous review: what the evidence shows, what it doesn't, and where the analysis falls short.

An insider's view of how these cases are built

Andrew McDermott spent 24 years in law enforcement, including federal task force service with the ATF and FBI, and trained thousands of investigators, analysts, and prosecutors in digital evidence. He understands not just how to interpret the data, but how the prosecution builds its case from it, and where the weaknesses usually are.

Areas of practice for the defense

CDR & historical cell site analysis

Review carrier records for accuracy, methodology errors, and overstatement in the prosecution's analysis. Challenge coverage maps, sector assignments, and location conclusions drawn from tower data, and identify alternative explanations. More on cell site analysis

Timing advance data

Interpret timing advance measurements and provide defensible alternative distance and location conclusions.

Device extractions

Independent forensic extraction of devices in defense possession, and scope, chain of custody, and interpretation review of Cellebrite, GrayKey, and Magnet AXIOM extractions. More on device extractions

GPS, app location & vehicle data

Reconstruct or contest movement narratives built on platform location, GPS coordinates, app activity, and vehicle telematics. More on location data

Video & image evidence

Authentication, timestamp verification, and comparison of surveillance, social media, and device media used to identify or place a defendant. More on video evidence

Social media evidence

Review of how the government's social media evidence was captured, preserved, and attributed, and forensic capture of public content that supports the defense before it disappears. More on social media investigations

Expert report rebuttal

Technical review and written rebuttal of government expert opinions and warrant affidavits. More on report review

Attorney education & trial prep

One-on-one technical briefings, cross-examination preparation, and demonstrative exhibit development. More on trial support

How an engagement works

Case review

After a conflict check, a technical review of the discovery to identify what the government's digital evidence shows and where it may fall short.

Strategy call

Work through what the evidence shows, what it doesn't, and where the defense opportunity lies.

Full engagement

Analysis, report, rebuttal, hearing and trial testimony, as much or as little as the case requires.