Sicarius · Flare — Digital Forensics & Cyber Incident Response

Digital forensics and cyber incident response.
Evidence you can act on.

Digital evidence is everywhere. Computers, servers, phones, cloud platforms — every one of them leaves a record. Sicarius finds it, preserves it, analyses it, and explains what it means. Then, if it comes to it, we take it to court.

Ex law enforcement. Global experience. Investigators who have given evidence in court.

Discuss a matter → Contact us

Active incident? Call 1300 027 401 — answered 24/7, Melbourne-based, Australia-wide.

Who we are

Investigators first.
Digital forensic specialists.

Flare is led by Mark Whittley, a former investigator with the Australian Federal Police and Victoria's Office of Police Integrity, who has given evidence in court. That background shapes how every matter is handled: evidence first, conclusions second.

Mark's experience spans criminal, civil and regulatory matters, in Australia and in global corporate roles. We know what a court needs, what a regulator will ask for, and what legal counsel needs to build a case — because we have been part of those processes, not just adjacent to them.

When we say we can take it to court, we mean it. We have done it.

"Sicarius is reliable, professional, digital forensic experts, and have demonstrated the highest level of integrity on which we rely for this component of our forensic investigations for our clients, and as and if necessary the ability for Sicarius to give expert evidence testimony in support of litigation."

Roger Darvall-Stevens

Partner, Fraud & Forensic Services · RSM Australia

How we work

Identify. Preserve. Analyse. Report.

01

Identify

We identify the evidence sources relevant to the matter — devices, accounts, platforms, and systems — before any analysis begins. Nothing is disturbed before it is preserved.

02

Preserve

Evidence is forensically imaged and preserved in accordance with accepted legal and technical standards. Chain of custody is established and maintained from the moment we take control.

03

Analyse

The evidence is examined using industry-standard forensic tools and methods. We establish what happened, when and how, and what the evidence does and doesn't show.

04

Report

Findings are documented in clear, structured reports written for the audience that will act on them — legal counsel, insurers, regulators, or courts. We explain not just what the evidence is, but what it means.

Every engagement is scoped before work begins. Chain of custody is established from the first moment we take control of evidence and maintained through to final delivery — whether that is a report, a court appearance, or a regulatory submission.

Where evidence lives

Wherever the evidence lives.

Digital evidence doesn't sit in one place. It spans devices, accounts, platforms, and systems — sometimes across multiple jurisdictions. Sicarius works across them.

Computers & Laptops

Windows, macOS, Linux — workstations and endpoints

Mobile Phones & Tablets

iOS and Android devices, including deleted data recovery

Servers & Storage

On-premise servers, NAS, SAN, RAID arrays

Cloud Platforms

Microsoft 365, Google Workspace, AWS, Azure, Dropbox

Email & Messaging

Email accounts, Teams, Slack, WhatsApp, SMS records

Financial & Business Systems

Accounting platforms, ERP systems, transaction records

Social Media & Online Accounts

Platform activity, account access, content preservation

Network & Access Logs

Firewalls, VPNs, access control systems, CCTV metadata

Matter types

Digital evidence is relevant across a far wider range of matters than most people realise.

If something went wrong and you need to know what happened, what was taken, or what the record shows — digital forensics can answer it. Here is where Sicarius is engaged.

Cyber incidents and breaches

Scope determination, attacker timeline, root cause analysis, regulatory notification support.

Litigation support

Pre-litigation evidence gathering, court-admissible reporting, and expert witness testimony.

Fraud and financial crime

Transaction tracing, document authenticity analysis, evidence packaged for prosecution.

Scams and identity theft

Tracing digital footprints as far as the evidence allows, and preserving evidence for law enforcement referral.

Suspected spying and surveillance

Device examination for malware, stalkerware, covert monitoring tools, and unauthorised access.

Insolvency and administration

Asset tracing, transaction history, director conduct analysis — evidence prepared for insolvency practitioners and regulators.

Employee misconduct and insider threats

Who accessed what, when, and where it went. Device and account forensics for HR, legal, or disciplinary proceedings.

Regulatory and criminal investigations

Evidence collected and documented to a standard that meets law enforcement, regulator, and court requirements.

Court-ready

We will take it to court.
And we have done it before.

Expert witness testimony is not an afterthought for Sicarius — it is part of how we work from day one. Every engagement is documented as though it will end in a courtroom, because sometimes it does.

Mark Whittley has given evidence in court. We work alongside legal counsel, prepare briefing materials for counsel's use, and present findings in the manner courts expect of forensic experts.

Expert witness testimony

Expert evidence in support of litigation, prepared for the court.

Briefing materials for counsel

Structured, technical-to-legal translation your legal team can use immediately.

Regulatory submissions

Evidence packaged and documented to meet regulator and law enforcement requirements.

If you are facing an active incident right now,
call us directly on 1300 027 401.

Having a cyber incident?

Call now. The line is answered 24/7, and early action protects evidence and money.

Call 1300 027 401 First-hour checklist

Testimonials

Trusted when it matters

"Mark and the team have been invaluable to me and my businesses. Their responsiveness is second to none, and their "bedside manner" is unparalleled. In the moments you need Sicarius the most, Mark and his team know you need experts that care and that is why I trust them implicitly."

Joni Pirovich

CEO · Crystal aOS

Engage Sicarius

Discuss a matter.

Tell us what's happened. We'll tell you what the evidence might show, what an engagement would involve, and whether Sicarius is the right team for your situation.

Book a conversation →

Or reach us directly — 1300 027 401 · info@sicarius.com.au