Our computer forensics team in Perth helps you find, recover and preserve digital information. For example, we help when emails, files or accounts are lost, locked or need to be investigated.

Much of a company’s history now lives in email, cloud storage and business systems. So when something goes wrong, the answers are usually digital, and they need careful handling.
Find the facts
First, we locate the emails, files and records that relate to your question.
Recover what was lost
Next, we work to restore deleted or damaged data from devices, accounts and backups.
Preserve the evidence
We also keep a record of how data was collected and handled, so others can rely on it later.
Explain it clearly
Finally, we report what we found in plain language for you and your advisers.
Metadata in plain English: metadata is the hidden detail stored with a file or email, such as who sent it, when it was created and when it was changed. As a result, it often shows how events unfolded.

We combine digital investigation with everyday IT experience. Therefore one team can recover your data, secure your systems and explain the results.
Email recovery
We recover deleted or archived emails and examine metadata such as timestamps. In addition, we can reconstruct email threads to show who said what, and when.
Backup restoration
When data has been lost or corrupted, we restore it from available backups. We also check the restored data so you know what was recovered.
Regaining access to key accounts
For example, during an administration or liquidation, we help you regain access to email, cloud and business accounts and then secure them.
Misconduct and fraud investigations
If you suspect misconduct or fraud, we examine devices and systems for relevant activity. Then we record what we find for your advisers.
Evidence preservation
We take careful copies of devices and accounts before analysis. As a result, the original data stays as it was.
Support for your advisers
We work alongside lawyers, accountants and insolvency practitioners. So our findings fit into the wider work on your matter.

When a company enters administration or liquidation, its records are often spread across email, cloud services and old devices. Meanwhile, passwords may be missing and former staff may be hard to reach.
First, tell us what has happened. Then we’ll explain your options in plain language.
Every computer forensics job we run in Perth follows clear steps, so you know what is happening at each stage.
Understand
First, we talk through what happened and what you need to find out.
Secure
Next, we secure the relevant devices and accounts and take careful copies.
Recover and analyse
Then we recover data and examine it for the information you need.
Report
Finally, we explain our findings and hand over the recovered data.
For 21 years, we’ve supported the IT systems of businesses in Perth and across WA. As a result, we understand where businesses keep their data, and where to look when it goes missing.

Computer forensics is the process of finding, recovering and preserving information from computers, email systems and other digital devices. In addition, it involves recording how that information was handled, so others can rely on it later.
Our clients include company administrators, liquidators and receivers, as well as lawyers and business owners. For example, they may need access to a company’s emails, files or accounts, or need to look into suspected misconduct.
Often, yes. However, it depends on how the data was stored, how long ago it was deleted and whether backups exist. So we assess the systems first and then explain what is likely to be recoverable.
We handle and document evidence carefully, so your lawyers can assess it. Whether evidence is admissible is a legal question, therefore your lawyer should advise on it for your matter.
It depends on the systems involved and our availability at the time. So contact our team as early as possible, and we will confirm what we can do and when.
Yes. We help administrators and liquidators regain access to company systems, recover records and keep data secure while they manage the company’s affairs.
We limit access to the people who need it. In addition, we record who handled the data and when, and we agree with you how we share findings.
You receive the recovered data you asked for, together with a written summary of what we found and how we found it. As a result, your advisers can review the work and decide on next steps.
So talk to our computer forensics team in Perth about what you need to find, recover or secure.