Sicarius · Forensics

Digital evidence is everywhere.
Most people don't know how to use it.

Computers, servers, phones, cloud platforms — every one of them leaves a record. Sicarius finds it, preserves it, analyses it, and tells you exactly what it means. Then, if it comes to it, we take it to court.

Ex law enforcement. Global experience. Real digital forensic experts — not IT people.

Discuss a matter → Contact us

Who we are

Not IT people.
Digital forensic specialists.

The Sicarius forensics team comes from law enforcement — investigators who spent careers building cases, handling evidence, and giving testimony. We brought that discipline into the digital world.

Our specialists carry global experience across criminal, civil, and regulatory proceedings. We know what a court needs, what a regulator will ask for, and what legal counsel needs to build a case — because we have been part of those processes, not just adjacent to them.

When we say we can take it to court, we mean it. We have done it.

"Sicarius is reliable, professional, digital forensic experts, and have demonstrated the highest level of integrity on which we rely for this component of our forensic investigations for our clients, and as and if necessary the ability for Sicarius to give expert evidence testimony in support of litigation."

Roger Darvall-Stevens

Partner, Fraud & Forensic Services · RSM Australia

How we work

Identify. Preserve. Analyse. Report.

01

Identify

We locate every potential evidence source relevant to the matter — devices, accounts, platforms, and systems — before any analysis begins. Nothing is overlooked. Nothing is disturbed prematurely.

02

Preserve

Evidence is forensically imaged and preserved in accordance with accepted legal and technical standards. Chain of custody is established and maintained from the moment we take control.

03

Analyse

Our specialists examine the evidence using industry-standard forensic tools and methodologies. We determine what happened, when, how, and who was responsible — with precision and without assumption.

04

Report

Findings are documented in clear, structured reports written for the audience that will act on them — legal counsel, insurers, regulators, or courts. We explain not just what the evidence is, but what it means.

Every engagement is scoped before work begins. Chain of custody is established from the first moment we take control of evidence and maintained without exception through to final delivery — whether that is a report, a court appearance, or a regulatory submission.

Where evidence lives

Every platform. Every device. Every environment.

Digital evidence doesn't sit in one place. It spans devices, accounts, platforms, and systems — sometimes across multiple jurisdictions. Sicarius works across all of them.

Computers & Laptops

Windows, macOS, Linux — workstations and endpoints

Mobile Phones & Tablets

iOS and Android devices, including deleted data recovery

Servers & Storage

On-premise servers, NAS, SAN, RAID arrays

Cloud Platforms

Microsoft 365, Google Workspace, AWS, Azure, Dropbox

Email & Messaging

Email accounts, Teams, Slack, WhatsApp, SMS records

Financial & Business Systems

Accounting platforms, ERP systems, transaction records

Social Media & Online Accounts

Platform activity, account access, content preservation

Network & Access Logs

Firewalls, VPNs, access control systems, CCTV metadata

Matter types

Digital evidence is relevant across a far wider range of matters than most people realise.

If something went wrong and you need to know what happened, what was taken, who was responsible, or what the record shows — digital forensics can answer it. Here is where Sicarius is engaged.

Cyber incidents and breaches

Scope determination, attacker timeline, root cause analysis, regulatory notification support.

Litigation support

Pre-litigation evidence gathering, court-admissible reporting, expert witness testimony — in any jurisdiction.

Fraud and financial crime

Transaction tracing, document authenticity analysis, evidence packaged for prosecution.

Scams and identity theft

Tracing digital footprints, identifying perpetrators, preserving evidence for law enforcement referral.

Suspected spying and surveillance

Device examination for malware, stalkerware, covert monitoring tools, and unauthorised access.

Insolvency and administration

Asset tracing, transaction history, director conduct analysis — evidence prepared for insolvency practitioners and regulators.

Employee misconduct and insider threats

Who accessed what, when, and where it went. Device and account forensics for HR, legal, or disciplinary proceedings.

Regulatory and criminal investigations

Evidence collected and documented to a standard that meets law enforcement, regulator, and court requirements.

Court-ready

We will take it to court.
And we have done it before.

Expert witness testimony is not an afterthought for Sicarius — it is part of how we work from day one. Every engagement is documented as though it will end in a courtroom, because sometimes it does.

Our specialists have given evidence in criminal and civil proceedings in Australia and internationally. We work alongside legal counsel, prepare briefing materials for counsel's use, and present findings in a manner that courts expect from genuine forensic experts — not IT consultants reading from a report.

Expert witness testimony

Criminal and civil courts, in Australia and internationally.

Briefing materials for counsel

Structured, technical-to-legal translation your legal team can use immediately.

Regulatory submissions

Evidence packaged and documented to meet regulator and law enforcement requirements.

If you are facing an active incident right now,
call us directly on 1300 027 401.

Engage Sicarius

Discuss a matter.

Tell us what's happened. We'll tell you what the evidence might show, what an engagement would involve, and whether Sicarius is the right team for your situation.

Book a conversation →

Or reach us directly — 1300 027 401 · info@sicarius.com.au