Kevin Stokes

Kevin Stokes is an associate principal in the Forensic Services Practice of CRA. He has more than nine years of digital forensic and incident response (DFIR) expertise, including consulting and providing expert witness testimony for a forensics firm which was acquired by a Big Four accounting firm. His role involved deep-dive DFIR, including one of the most high-profile cyber breaches in history, with the discovery of malware deployed by a nation-state actor.

Prior to joining CRA, Kevin was Lead Specialist and Manager with KPMG’s Cyber Response Services. His responsibilities included in-depth analysis for digital forensics and incident response matters and leading analysts during investigations.

Kevin has been a speaker at the SANS DFIR Summit and the Open-Source Digital Forensics Conference (OSDFCon). His training and certifications include GIAC Cloud Forensics Responder (GCFR); GIAC Certified Forensics Analyst (GCFA); GIAC Certified Forensics Examiner (GCFE); GIAC Advanced Smartphone Forensics (GASF); IACIS Certified Forensic Computer Examiner (CFCE); and Cellebrite Certified Mobile Examiner (CCME).