Contact Dr Sarah Morris

Areas of expertise

  • Computing, Simulation & Modelling


2021 - Present: Member of the Biometrics, and Forensics Ethics Group (BFEG). An advisory non-departmental public body sponsored by the Home Office.

2020 - Present: Head of the Digital Investigation Unit within Centre for Electronic Warfare, Information, and Cyber, Cranfield University

2018 - Present: Senior Lecturer in Digital Investigation, Centre for Electronic Warfare, Information, and Cyber, Cranfield University

2016 - 2020: Head of Digital Forensics Unit, and Course Director MSc Digital Forensics within the Centre for Electronic Warfare, Information, and Cyber, Cranfield University

Professional certification: Blacklight Certified Examiner, Autopsy Basics Hands-on, Forensic Computing Foundations (short course), Internet Forensics (Short Course), Legal Issues and Courtroom Skills (Short Course), Bond Solon Expert Witness Training, Advanced Forensic Computing (Short Course), Word Document Examination (Short Course)

Qualifications: PhD in Digital Forensics ("Establishing the evidential value of thumbnail cache file fragments in unallocated space"), and a BSc (Hons) in Computer Science. 

Sarah has also been responsible for the DIU laboratories since she joined Cranfield in 2008. 

Current activities

Overview: With over 13 years of experience in complex technical digital investigations, Sarah is the Head of the Digital Investigation Unit, part of the Centre for Electronic Warfare, Information, and Cyber. Sarah is focused on Digital Investigation and exploitation, a field devoted to the digital analysis of a variety of digital devices for any investigative scenario. This includes (but is not limited to) digital forensics, incident response, intelligence operations, open-source intelligence, civil proceedings, and corporate investigations. Sarah is focused on binary level analysis where appropriate and has a broad and deep technical skillset.

Sarah has supervised over 69 MSc dissertations and 2 PhD students to completion. She has brought in over £550,000 of funding. Her academic and casework interests include Document Analysis, Data recovery, File fragment identification and reassembly, Contextual analysis in Digital investigations, Legal aspects of computing, and digital investigations.

Media: As a well-known Digital Investigation practitioner and academic, she has given many interviews across TV, radio, and print formats. Her media engagements have included: BBC Radio 4 (Facebook live and live radio event), BBC World Service, BBC Radio 4 pre-records, HR Knowledge Bank, The Engineer, and BCS Now. Sarah was also the academic chosen to provide her views on education for the digital forensic focused special issue of the Police Professional magazine in 2019. In 2020, Sarah worked with CNN on an exclusive investigation, providing document analysis for an exclusive Covid related story. 

Casework: Sarah is casework active , focusing on Digital Investigations. She also performs complex data/document recovery and general consultancy, including ISO accreditation reviewers for organisations on request. She has worked on both civil and criminal investigations across a wide sphere of devices and operations. Sarah has worked with a variety of clients, including Civil, Criminal, Corporate, and Celebrity. Her most famous case involved the recovery of data from a smart washing machine. 

Esteem: Sarah gave oral evidence at the House of Lords as part of a Select Committee inquiry into Forensic Science (2018). In 2018 she was also the only academic shortlisted for the Women in Defence Awards. Sarah has also won 4 teaching awards in her time at Cranfield University.

In 2021, Sarah's experience in Digital Forensics Casework, Research and Academia led to her being appointed to the Biometrics and Forensics Ethics Group (BFEG), a non-departmental public body sponsored by the home office. 

Education: From December 2015 until 2021, Sarah was the Course Director for MSc Digital Forensics, which is currently in Teachout. Having only just formally taken over leading the Digital Forensics course, she took the MSc through a major university course review and successfully obtained full GCHQ accreditation – making the Cranfield Digital Forensics course the first Digital Forensics MSc to gain the full accreditation. Sarah continually receives positive feedback for her teaching. She is responsible for many teaching innovations, including remote delivery of the digital investigation content and gamification of scenario-based teaching.

Working Groups: Sarah is active in the Cranfield University community and is a member of several working groups. These include Information Security, Remote Examinations, Digital Online Teaching at CDS, and the Cranfield Disability Network (Deputy Chair). 


  • Covert Digital Investigation and Incident Response Requests
  • Law Enforcement
  • Civil Investigations
  • Corporate Clients
  • Celebrity Clients
  • Media Clients
  • Various Private Clients for Data Recovery, Digital Investigation, and Digital Forensic Analysis


Articles In Journals

Conference Papers