Bradley Schatz
DFI Engineering & Research at IFIP WG11.9 Digital Forensics Conference
Greater Brisbane Area Australia
Summary
👤
Senior🎓
Top SchoolBradley Schatz is a digital forensics leader and founder with 17+ years of hands-on computing experience and a PhD in Digital Forensics, now applying his expertise in DFI Engineering & Research at Apple. He built and ran Schatz Forensic and Evimetry, helping courts and corporations convert complex digital evidence into courtroom-grade testimony and pragmatic incident response. An internationally recognized researcher and educator, he has published on volatile memory and mobile forensics, taught across Asia, the USA and Australia, and serves on program and editorial committees for leading forensic conferences and journals. Bradley has contributed to the widely used Volatility memory forensics framework, adding AFF4 image support and deepening memory-image analysis capabilities. Comfortable at the intersection of academia, litigation and enterprise security, he combines forensic rigor with practical engineering to preserve and validate digital evidence. Based in Brisbane, he brings a rare mix of courtroom experience, open-source impact, and sustained research engagement.
17 years of coding experience
25 years of employment as a software developer
Ph.D., Digital forensics, Ph.D., Digital forensics at QUT (Queensland University of Technology)B.Sc., Computer Science, B.Sc., Computer Science at The University of QueenslandChurch of England Grammar School
Github Skills (3)
memory-dump10
python10
malware9
Programming languages (7)
Github contributions (5)
volatilityfoundation/volatility
May 2017 - Sep 2017
An advanced memory forensics framework
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:5 commits, 1 PR, 1 comment in 3 months
Contributions summary:Bradley primarily contributed to the `volatility` framework, focusing on expanding its support for memory image analysis. They implemented support for the AFF4 Standard v1 image format and modified the DTB scanner. Additionally, the user shifted AFF4 support to a contrib directory. These changes likely involved reading and parsing memory data, suggesting a focus on memory forensics.
memoryrampythonmemory-forensicslinux
aff4/Standard
Mar 2017 - Feb 2022
Contributions:5 commits, 4 pushes, 1 branch in 4 years 11 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.