# CyFIR **CyFIR** is the digital-forensics firm of Ben Cotton. It examined Maricopa County's voting equipment and system logs as a subcontractor to [[Cyber Ninjas]] in the [[2021 Maricopa County Presidential Ballot Audit]]. CyFIR's headline equipment claim was about 37,000 security events over two days in March. Maricopa County's January 2022 rebuttal found that the system's logs recorded 385, and that more than 400 events the auditors described could not be found at all. Cotton was named, with [[Doug Logan]], in a 2022 Michigan Attorney General petition over alleged unauthorized access to vote tabulators in three Michigan counties. In August 2023 the special prosecutor charged [[Matt DePerno]] and others and declined to charge Cotton and Logan, saying they had been "deceived" by some of the defendants.