David is one of the most experienced forensic practitioners in Australia with a career spanning more than 16 years including leading the Victoria Police Computer Crime Squad and leadership roles in the corporate sector.
Prior to establishing Forensic IT Pty Ltd in 2013, David was the Executive Director of the Forensic and Electronic Discovery division of a national professional services firm based in Melbourne, where he founded the firm's forensic IT practice in 2005 and built the business to a team of five.
David’s experience covers a broad range of forensic IT investigations, both civil and criminal in nature, and covering both the corporate and legal/policing environments.
Given the nature of his work, David often has a unique opportunity to review business IT systems “post event” where the impact of poorly managed or designed IT systems, malicious employees or lack of ongoing review and assessment has resulted in business outage or loss of data or both. From this experience he has been able to provide advice and recommendations regarding the structure of IT systems to reduce these risks.
David has prepared independent expert reports for a number of legal proceedings in the Federal, Supreme and Family Courts and has provided advice to litigators in a number of matters regarding data collection and analysis. He has also worked with international law and accounting firms on matters in North America, Europe and Asia.
David is experienced with a variety of forensic, data analysis and electronic discovery tools, and is trained on EnCase, Forensic Toolkit (FTK), Clearwell E-Discovery Platform, and is an EnCase Certified Examiner (EnCE).
Brendan has 6 years’ experience as a digital forensics practitioner having started his career with David Caldwell in 2010.
During his career, Brendan has become experienced in forensic IT data collection and analysis, eDiscovery (document review) and mobile device data extraction and examination. Brendan has also assisted in a number of search warrants undertaking the triage, acquisition and seizure of digital devices.
Brendan’s experience includes a broad variety of forensic IT investigations, including employee fraud and intellectual property theft as well as being responsible for the management of our electronic discovery reviews.
Brendan has prepared expert reports and given evidence in the County Court (VIC) and the Victorian Civil and Administrative Tribunal (VCAT).
Brendan’s qualifications and certifications include:
- EnCase Certified Examiner (EnCE)
- Qualified Cellebrite UFED Logical & Physical Operator (Mobile devices)
- Australian Government Security Clearance
- Member of the High Technology Crime Investigation Association [HTCIA]
- Graduate Certificate in Computer Crime Investigation
- Bachelor of Network Computing, Major in Network Technology - Monash University
Ned is the latest addition to the team coming from local government where he worked as an EDRMS System Administrator and Helpdesk Support Analyst.
When we were looking for a new member for the Forensic IT team, a client recognised that Ned had the characteristics we were looking for. Since then he has quickly picked up the basic requisites for forensic investigations, particularly relating to the collection of data from a wide range of media and devices.
Ned is currently studying a Bachelor of Information Technology at the Royal Melbourne Institute of Technology.
He is frequently involved in data collection and low-level forensic analysis across a range of matters including employee investigations, intellectual property theft, and liquidation and administration.
Ned has experience with a range of forensic tools including EnCase, Forensic Toolkit (FTK), F-Response and Cellebrite UFED.
Duncan has spent 25 years in the IT sector and six years focusing on cyber security. His sound understanding of computer infrastructure means he is well-placed to provide advice around security vulnerabilities and remediation.
Duncan’s background in computer system architecture and software development, as well as his knowledge of security recovery and solutions, means he has a thorough understanding of the modern digital landscape and the challenges it poses for modern businesses.
Duncan is often called on to conduct security requirements analyses. He helps clients in the development of endpoint protection policy and compliance mechanisms and has worked on the development of digital security management solutions for numerous corporations.
Beyond his focus on cyber security, Duncan is skilled at IT service management, solution architecture development, process improvement, system integration, data migration and data storage management.
He is also often called on to assist with disaster recovery and incident management, utilising his unique knowledge of computer architecture to access valuable and hard-to-ﬁnd data.
Andrew’s background with one of Australia’s largest IT service providers means he brings to the Forensic IT team extensive practical knowledge of IT management and support.
The Forensic IT team had worked with Andrew in his previous role and recognised his potential through the depth of his IT knowledge, work ethic, professional approach and bright and inquisitive mind.
When he approached us seeking an opportunity to join Forensic IT, we were delighted to have him become a member of the team.
It’s only early days for Andrew but already we can see that he is an extremely intelligent young man with a natural flair for analytic work and an appetite to learn all he can about cyber investigations and forensic analysis.
He brings to the Forensic IT team extensive skills in both Windows and iOS desktop and server support and management. We expect him to quickly develop into a very competent and skilled forensic and cyber investigator.