Qualified and court accepted forensic experts

Our experts follow the High Court Rules (2016) Code of Conduct for Expert Witnesses.

Forensics

Why choose a forensic expert, why choose us?

Choosing the right forensic expert can be the difference between success and setback. Our team brings deep technical knowledge, proven methods and a strong understanding of legal process. We handle your case with accuracy, discretion and professionalism.

Identify, collect and preserve relevant data sources using forensically sound techniques
Process preserved data using forensic and eDiscovery tooling
Analyse, report and present findings to court-ready standard.

Service detail

Forensic experts uncover the facts

Accidental deletion, insider threats, Intellectual Property theft, computer misuse, and privilege abuse - all cases we've supported over the years.

Tried and tested

Take the guesswork out - rely on tried and tested experts to support your enquiry. No matter is too small; we're here to uncover the facts.

Our experts have given testimony in Family, District, and High Courts
Our experts have attended and obtained industry recgonised qualifications
We support education through guest lectures and advanced forensic training delivered internationally

‍

Our delivery process

The Digital Forensics delivery lifecycle

All forensic investigations follow a standard approach, but investigative threads are tailored to meet your specific objectives.

Scope the matter

We work with you to fully understand the scope and case objectives.

Identify, collect & preserve

We ensure the key evidence sources are preserved at the earliest opportunity

Process & analyse

Through detailed scoping and a clear understanding of your objectives, we determine how best to process and analyse the available evidence.

Benefits

What sets us apart

Bastion offers unmatched local expertise across Australia and New Zealand, supporting businesses and government through every stage of an investigation with the right experts when it matters most.

Qualified experts

We’re certified by globally respected organisations, including IACIS and SANS, and provide unmatched to support your investigation.

Decades of experience is a phone call away

From fraud to insider threats, we locate and analyse digital evidence for clients across various industry verticals.

Equipped with what it takes

Using forensically sound hardware and industry-recognised forensic and eDiscovery software, we ensure your matter is progressed.

What comes next

Expand your security coverage

Some investigations stem from gaps in governance or security controls. We’ll work with you to identify practical solutions to help prevent future issues.

Implementation of policies, such as an Acceptable Use Policy (AUP)
Deployment of USB device control to manage removable media
Integration of Data Loss Prevention (DLP) technology and alerting

Talk to an expert

Executive and Board Security Governance Training

We train executives and boards on their cybersecurity oversight role — focusing on risk framing, accountability, and key governance responsibilities.

Instructor Led ISO27001 Training

This instructor-led course equips participants with the knowledge and skills needed to become certified to lead, plan, and conduct ISO 27001 audits.

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

An employee is under investigation, what should I do?

We recommend carefully considering both covert and overt methods of evidence preservation, in consultation with Bastion and your internal legal counsel. This ensures your approach aligns with employment law obligations and privacy considerations in New Zealand and Australia. Where appropriate, we can also engage external legal counsel to ensure the process is legally robust and defensible, particularly if the matter proceeds to the Employment Relations Authority (NZ) or the Fair Work Commission (AU)

How long does a digital forensic investigation take?

The timeline varies depending on the complexity of the case and the volume of data. We’ll provide an estimated timeframe after an initial scoping call with you.

Can you provide expert witness testimony?

Yes. Our certified experts are experienced in presenting findings clearly and credibly in court or legal proceedings.

Can you help if we suspect data has been deleted?

Yes. We use advanced forensic tools to recover deleted files, emails, and logs—even after attempts to conceal or destroy them. If you suspect an issue, contact us as early as possible. Timely action helps preserve volatile evidence and can significantly improve investigation outcomes.

Can you help if we suspect data has been deleted?

What should I do before calling in a forensic expert?

Avoid accessing or altering the device in question and contact us promptly. Acting early helps preserve critical evidence and supports a more reliable investigation - giving you the assurance you need.