Jason Hale

Jason’s prior work includes leading or supporting hundreds of investigations spanning a broad range of industry verticals including healthcare, financial, energy, legal, critical infrastructure, education, and telecommunications.  Jason’s experience in leading and conducting cybersecurity investigations, threat intelligence operations, and digital forensics enables him to effectively assess and address client needs in a wide array of engagements such as insider threat, cyber espionage, corporate and employee inquiries, incident response, cybersecurity investigations, and a broad range of matters in civil litigation.

Jason is also an adjunct professor in the Computer Information Systems and Information Security concentration program at the University of Louisville.

Jason’s professional experience includes:

• Leading and conducting hundreds of cyber investigations spanning numerous verticals.
• Testifying as an expert witness in cyber investigations for both state and federal court.
• Providing continuing education seminars and presentations to legal, technology, and digital forensic professionals. Prior presentation venues have included state bar associations, international digital forensic conferences, information security conferences, insurance investigator conferences, and private training events for legal and information security professionals.
• Instructing hundreds of students serving as an adjunct professor in the computer information systems information security concentration program at the University of Louisville. During his time as an adjunct professor, Jason has developed the curriculum for the computer forensics course including coursework, labs, and more.
• Development of multiple digital forensic tools used by professionals and training organizations internationally.

Jason’s notable investigations include the following:

• Investigation and pursuit of advanced threat actor within heterogenous global enterprise: Engagement involving an investigation into the compromise of a proprietary enterprise web application. Analysis and pursuit revealed pervasive compromise of global enterprise network spanning multiple years and leveraging sophisticated attack methodology and infrastructure. Supported remediation and containment efforts, along with implementation of custom alerting and monitoring design.
• Insider threat investigation: Engagement involving an information security assessment that identified an insider threat within the client’s critical infrastructure environment. Led a team of investigators to identify, investigate, and mitigate root cause. Conducted evidence preservation and system remediation across a diverse set of assets including on-premise and cloud-based endpoints, servers, databases, and operational technology systems.
• Misappropriation of trade secrets investigation: Engagement involving the alleged theft of intellectual property from an industrial manufacturing company. Identified several significant fallacies in opposing expert’s declarations and reports, which had resulted in a fundamental misunderstanding of the digital evidence. Clarified significance of digital evidence via deposition testimony, leading to dismissal of charges.
• Global investigation of patent infringement claim: Engagement of patent infringement litigation involving a global chemical company, requiring coordinated response, collection, and investigation across Germany, France, and the United States.