INVESTIGATIVE LEGAL SERVICES

_CTRL.
Litigation.

Seamless digital investigations, forensics and legal services

Explore ↓
00

Top Recent Cases

  • SEP 2026 Celebrity Defamation By Aspiring Senate Politician

    Investigated an online account defaming a client. The user was traced using historical WHOIS records to a referenced website, which returned a positive identification. The individual was a multi-running aspiring senate politician. Deeper analyses uncovered a dark past in which the individual created, maintained, and operated an online revenge porn website which preyed on vulnerable women on Craigslist. The individual had been on endless news programs and articles. The FTC issued a ruling which included 20 years of Federal probation. Of which the individual seemed to have been violating. Upon this evidence, he subsequently removed his online social media accounts and instantly went dark.

  • AUG, 2026 Emergency Response and Removal of Leaked Hit Song

    Epitaph Records ↗ through Ronnie Radke (Falling In Reverse) notified Mr. Walsh that an upcoming song titled Joseph ↗ featuring Serj Tankian (System of a Down) and Corey Taylor (Slipknot) had been leaked and needed it removed immediately. Through website source code checks, various traces and exhaustive measures the track was removed from all streaming platforms, websites, social media and mirrors within two hours. Overnight observation discovered the leaker(s) and sharer(s) on Reddit; their identities were uncovered and their social media account posts completely removed. As of September 21, 2026 the track has hit 137,000,000 combined streams.

  • JUN, 2025 Highly Technical CFAA-adjacent Intellectual Property Infringement

    Conducted an extensive forensic investigation into the alleged unauthorized collection, reproduction, distribution, and commercial exploitation of copyrighted motion-capture animations by an international motion-capture technology company. Investigated software behavior, historical terms of service, licensing agreements, corporate entities, internal communications, cloud infrastructure, and approximately 1.4 million animation assets. Identified discrepancies between contractual representations, software functionality, discovery productions, and sworn testimony, including questions concerning the retroactive application of revised licensing terms and the sublicensing of user-generated intellectual property. Developed and pursued a federal copyright infringement action in the United States District Court for the Central District of California, involving digital forensic analysis, expert testimony, electronic discovery disputes, and allegations of evidence spoliation and unauthorized use of copyrighted works in artificial intelligence training.

  • Other Recent Cases

    Additional Work History | Click to Expand ↗   
    • SEP 2026 Identity Theft by Parents (Florida)

      A client learned of multiple default judgments against him in Florida. Through investigations, it was uncovered his parents had been using his social security number, name, e-mail and other information to open multiple accounts such as toll bridge accounts, AT&T accounts to get free iPhones and Apple watches and numerous other lines of credit. The client only learned about this after garnishment. The judgments were all vacated ex parte and dismissed.

    • SEP 2026 Corporate Fraud Investgation

      [THESE ACCUSATIONS ARE ALLEGED] Conducted a corporate fraud investigation into the identities and histories of the entities involved. That assertion led to uncover the Defendant had allegedly operated under expired real estate brokerage license since 2017 and; a corporate suspension dating back to 2018 and; subsequent entity conversions, overlapping ownership and management, and continued operations under substantially identical business names. Traced the corporate succession through California Secretary of State records, Department of Real Estate licensing records, historical court filings, executed contracts, and archived business communications. The findings became central to a 190-page First Amended Complaint filed in Los Angeles Superior Court, alleging fraudulent inducement, misrepresentation, concealment, and challenging the validity and enforceability of multiple commercial real estate agreements.

    • SEP 21, 2026 Anonymous Social-Media Harassment — Identity Resolved

      Investigated an anonymous individual targeting a client. Resolved the account to a real-world identity, identified associated contact information, and established connections to a self-operated unlicensed business and it's lack of professional licensing.

    • AUG 28, 2026 GPS Hotspot Reconstruction & Geographic Attribution

      Generated geographic hotspot maps from historical account location records. Identified recurring areas of activity, manually enumerated nearby properties, and developed a targeted list of potential subscriber addresses for additional provider discovery.

    • JUL 17–19, 2026 Multiple Anonymous Personas — Identity Resolution

      Investigated two anonymous accounts engaged in repeated online harassment. Followed account relationships, historical identities, public records, and related individuals to establish that the apparently separate personas were connected to the same person. Developed identifying leads and contemporaneous location evidence.

    • JUL 16, 2026 Expert Forensic Report — Anonymous Account Operators

      Re-evaluated evidence involving disputed online accounts and prepared an expert report documenting reproducible findings and methodology. Identified a third potential investigative subject, enumerated associated devices, telephone artifacts, hardware identifiers, and operating system versions, and recovered additional account recovery information relevant to attribution.

    • JUL 5, 2026 Anonymous Harassment — Real-World Identity & Location

      Investigated an anonymous social-media user publicly targeting a client. Connected the account to historical aliases, corroborating identity information, and public records. Established a real-world identity lead and location evidence relevant to the activity.

    • JUN 20, 2026 International Digital Attribution

      Investigated an high profile landlord "scam operation" in which the landlord left the Country and claimed to be in Singapore. Through custom tooling and methods, definitively established location evidence placing the subject in London -- and again while the landlord was physically located at a specific lounge in London.

    • JUN 11, 2026 Social-Media Account Forensics & Geospatial Reconstruction

      Analyzed historical account-access records, performed IP tracing and geolocation analysis, and developed custom mapping software to reconstruct account activity in a geographic environment. Identified recurring locations and patterns of use to support additional investigative and discovery efforts.

    • MAY 27, 2026 Anonymous Account — Network & Device Attribution

      Conducted a controlled investigation of an anonymous account engaged in online harassment. Developed network and device evidence, identified an associated geographic location, and provided the investigative findings directly to the client.

    • MAY 14, 2026 Third-Party Discovery Search Methodology

      Developed technical guidance concerning reasonable search methodology for records held by a major technology provider. Prepared the analysis for transmission through litigation counsel.

    • APR 16, 2026 Account Metadata & Message Reconstruction

      Analyzed unique account identifiers, metadata, and historical communications. Located specific messages, dates, timestamps, and document pages necessary to identify responsive account activity in a third-party production.

    • MAR 25, 2026 Network Evidence & Technical Litigation Support

      Provided litigation counsel with analysis of IP addressing, internet standards, metadata confidentiality, and technical issues relevant to anticipated evidentiary objections.

    • MAR 17, 2026 In-Court Expert Support

      Attended a celebrity client's court hearing in connection with an active forensic investigation and litigation matter as an expert testifying witness.

    • MAR 2026 Tracking Down 'Off-Grid' Online Defamer

      A client had been repeatedly and severely defamed via numerous series' of videos. The individual represented themselves as legally untouchable as they had spent significant time in prison and had been living the last 20-years under an alias and were essentially and legally off-grid. Analyzing and enhancing videos and images eventually lead to clues about the suspects' location which was entirely opposite of what his online persona stated. The suspect had noted in an unrelated, posted comment that he was married on a particuar day. Searching Court records located his true name, his location, shell companies he used to open 'off-grid' bank accounts and so forth. The defamation stopped and the account(s) have been largely inactive since.

    • MAR 10, 2026 Supplemental Expert Evidence Analysis

      Re-examined newly submitted evidentiary material and prepared supplemental forensic analysis addressing inconsistencies between the new material and previously examined evidence.

    • FEB 19, 2026 Identity Resolution From a Single Telephone Number

      Began with a telephone number supplied by a client and resolved it to an Military veteran individual operating under multiple legal names. Connected the identities through social-media accounts and corroborating public records, locating additional historical and identifying information and produced an address.

    • APRIL 2025 Tracking Down False Reviewer

      An anonymous poster had been leaving disparaging false reviews on my clients' Google and Yelp pages reducing the rating from 4.9 stars to 3.1. Through various means, their IP address was retrieved and geotraced then triangulated to a specific address. The address was cross referenced using various known records and subsequently produced a single identity - discovered to be a competitor of my client who was living with his parents and used their internet to carry out the defamation. A defamation lawsuit was drafted and presented to the competitor who was given until midnight to not only retract the statements, but use them for good - by converting them to five star reviews. Subsequently, a settlement was reached in the matter including a non-disparagement clause.

01

FRE 702 never stood a chance.

Daubert me. I dare you.

My work is built to be attacked. Methods documented. Sources preserved. Conclusions reproducible. Every opinion tied to evidence that can be shown, tested, and defended under oath. Challenge the methodology. Good. I bring the receipts — and then the receipts for the paper they’re printed on.

Full Infrastructure Analyses ↗    Deepfake / Catfish #1 ↗    Deepfake / Catfish #2 ↗    Peer Review ↗
Download My CV    Contact me today
02

The document isn't the whole truth.

But it’s all they want you to see.

Who cares what it “says”? The file is only what made it to the screen. I want what happened before that — metadata, timestamps, revision history, system logs, registry artifacts, browser traces, cloud sync records, deleted remnants, backups, hashes, and network activity. Systems record more than people realize, and they rarely forget cleanly. People tell stories. Computers leave records. If the two disagree, I follow the machine.



Man In The Middle ↗   Manipulated Evidence ↗   Deconstructing A Virus ↗   Catfishing & Deepfake ↗   Locating Document Authors ↗  
Contact me today
03

The internet is a funny thing...

No one is anonymous. Nothing is hidden.

A random post is never just a post. A street sign in the background, a partial plate, a reflection, a storefront, a username reused once too often, an image with GPS metadata, a phone number buried in account recovery data — every artifact is another way in. I’ve worked backward through Snapchat and Meta productions, correlated hundreds of login and GPS records, matched recurring devices across changing IPs, traced burner accounts to recovery information, mapped activity across providers and physical locations, and written the subpoena language needed to turn the next clue into the next record. I’ve built custom tools to map and normalize large datasets, traced aliases across platforms, followed media through source code, APIs, CDNs, DNS, mirrors and upstream hosts, and monitored endpoints to see whether something was actually gone or merely moved. People make tiny mistakes every day and never notice them. One usually means nothing. Two produces clues. Three is triangulation. Four is a pattern. Five turns “anonymous” into a very specific person, time and place.



Anonymous Defamation ↗   Car Accident Liability ↗   Catfishing & Deepfake ↗   Catfishing & Deepfake ↗  
Contact me today
04

All that data and nowhere to go.

Evidence Is Weak. Tools Make It Bulletproof.

When the evidence outgrows the tools, I build new ones. I’ve turned thousands of social-media GPS records into temporal life patterns — showing where someone goes, when they go there, what repeats, and where different datasets intersect. I’ve built discrete, non-linear deposition systems that let counsel move through testimony by issue instead of page number. The deponent said no to Question A and Question C then it's time to ask Question X. Monitoring platforms that continuously track stolen intellectual property across websites, hosts, mirrors, APIs, and infrastructure; and custom databases, correlation engines, timelines, maps, and visualization tools built around the evidence itself. The point isn’t software for software’s sake. It’s seeing the pattern that was already there — before anyone else knows to look for it. Turn flat data into trial gold. SHOW the Judge what happened, how and when. Find the contradiction. Expose the pattern. Impeach the witness.




Contact me today
05

The most complete production you've seen. Same day.

Make Your Productions Impossible To Embarrass

A discovery production should be something you can defend, not something you hope nobody examines too closely. My platform takes raw evidence and builds the entire production around it: continuous Bates control, preserved natives, searchable text, conversion from ANY TYPE to all of {PDF, HTML, TEXT, Native, TIFF} and more. Automatically extracted EXIF metadata, SHA-256 hashes, parent/attachment relationships, Concordance/Lexis/Obj/Custom load files, privilege tracking, responsive-keyword indexes, manifests, and a machine-readable XML record of the production itself. Supplemental sets append cleanly into what already exists — indexes regenerate, Bates numbering continues, and the production remains one coherent dataset. Automated cover letters. Automated privilege logs and confidential stamping. Upload your files, and hand it over to opposing counsel the same day. If opposing counsel goes looking for missing structure, broken provenance, unidentified files, or a production nobody can explain six months later, they should have a very boring afternoon.




Contact me today
06

The consultation is free. You won't be disappointed.

E-MAIL: matthew@matthewrwalsh.com ↗
Download My CV    SEAK Profile