Digital Forensics in New York

Yes. The Manhattan office at (212) 561-5860 is the primary intake for New York matters. Examiners are dispatched into the five boroughs, Westchester and Long Island on a 24/7 basis for active incidents. Working meetings are held on site at counsel's offices, at the client site, or by video.

Examiners have prepared reports and given expert testimony in New York State Supreme Court across the five boroughs plus Nassau, Suffolk and Westchester, and in the Southern and Eastern Districts of New York. Reports are also prepared for arbitration under AAA and JAMS, and for regulator-facing matters at NYDFS, the New York Attorney General and the SEC and CFTC New York offices.

For active incidents in Manhattan, Brooklyn, Queens, Bronx and Staten Island, an on-site response is typically dispatched within a few hours of the initial call. Remote preservation of cloud tenants and endpoint telemetry starts on the call itself so that data that rotates on a short cycle, for example EDR process telemetry and mailbox audit logs, is captured before it ages out.

Yes. The engagement is scoped to the covered entity's information systems as defined in 500.1, and the testing program is documented against the requirements in 500.5: at least annual penetration testing from inside and outside the information systems, plus automated scans and manual review of systems not covered by those scans at a frequency determined by risk assessment and promptly after material system changes. Deliverables are organized so the CISO can hand the report to internal audit, the board committee that receives the 500.4 CISO report, and, where relevant, the DFS examiner.

Yes. Neutral, rebuttal and court-appointed engagements are a regular part of the practice. In a rebuttal posture, the starting point is a documented review of the opposing expert's method, tooling and workpapers against accepted practice, and a written record of what can and cannot be reproduced from the underlying data.

Both. Corporate matters (internal reviews, employment disputes, trade-secret protection, incident response, regulator-facing work, transactional diligence) are the majority. Private-party work is limited to matters where the technical questions and evidence sources are the same, for example high-net-worth probate and estate matters and civil disputes over data or intellectual property. GDF does not take divorce or custody matters.