Mark Mckinnon
Certified Computer Examiner at RedWolf Computer Forensics
Michigan, United States
Summary
🤩
Rockstar🎓
Top SchoolMark Mckinnon is a Certified Computer Examiner with 10+ years of hands-on experience in digital forensics, imaging, and expert witness testimony, based in Michigan. He combines deep academic roots—teaching and developing digital forensics curricula at Davenport University—with practical casework through DataExam LLC and custom tooling from RedWolf Computer Forensics. A longtime contributor to high-profile open-source forensics projects like The Sleuth Kit and Autopsy, he has enhanced report generation, timeline management, and parsing of diverse artifacts (including Android and Echo data), showing attention to both backend data integrity and user-facing report usability. His background as a database administrator and software engineering master’s gives him a rare mix of forensic, database, and software-development expertise that informs reliable, auditable examinations. Colleagues rely on him for technically rigorous analyses and reproducible tooling that bridge academia, industry, and open-source ecosystems.
10 years of coding experience
6 years of employment as a software developer
SextonMaster of Science, Software Engineering, Master of Science, Software Engineering at Grand Valley State University
Github Skills (24)
sqlite10
computer-forensics10
python10
command-line-interface10
data-parsing10
text-formatting10
java10
javas10
command-line10
text-format10
cli10
data-processing9
sql9
incident-response9
rest-api8
Programming languages (5)
Github contributions (5)
sleuthkit/autopsy_addon_modules
May 2018 - Jul 2022
Repo to store compiled modules or links to 3rd party add-on modules.
Role in this project:
Backend Developer
Backend DeveloperContributions:19 commits, 14 PRs, 6 pushes in 4 years 3 months
Contributions summary:Mark primarily contributed to the development of modules for parsing and analyzing digital forensic data within the Autopsy framework. This involved writing Python scripts to interact with SQLite databases, extract information from various file formats, and create new artifacts and attributes in the Autopsy case. Their contributions focused on extending the functionality of the Autopsy tool by integrating new data sources and analysis capabilities, such as processing Amazon Echo data, recently used apps, file history, and jump lists.
partyjsinteropeagleaddonlinks
sleuthkit/sleuthkit
Feb 2018 - Oct 2022
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
Role in this project:Back-end Developer
Back-end DeveloperContributions:25 reviews, 84 commits, 32 PRs in 4 years 9 months
Contributions summary:Mark primarily contributed to the Java bindings for the Sleuth Kit data model, specifically focusing on extending the functionality related to report generation and data source deletion. Their work involved modifying the Java code to support adding URLs to reports, updating the database schema, and implementing database operations. Additionally, they updated the TimelineManager to handle time calculations for file and artifact events.
sleuthincident-responsentfscommand-line-toolsforensics
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.