Who we are
DFIR Global is the digital forensics and incident response practice of Incident Response Solutions Limited, headquartered in New Zealand and serving clients worldwide. When an organisation is breached, we help answer the questions that matter under pressure: what happened, how far did it go, is it still happening, and how do we recover and prevent it recurring.
We pair hands-on incident response with rigorous digital forensics, so the work that stops an attack also stands up to your board, insurer, regulator, or a court.
What we do
- Respond to active breaches — containment, eradication and recovery, at speed.
- Investigate with forensic rigour, preserving evidence properly.
- Recover from ransomware and destructive attacks, restoring operations and reducing repeat risk.
- Prepare for the incident you haven’t had yet — response planning, exercises and compromise assessment.
Why DFIR Global
Forensics-grade, response-speed. We do incident response with forensic discipline, so containment and evidence preservation happen together, not at the expense of one another.
NZ roots, global reach. Based in New Zealand and fluent in the local regulatory context, but remote-first — we can be engaged and effective anywhere, fast.
Straight answers under pressure. We communicate clearly, set realistic expectations, and keep leadership informed in language they can act on.
Our background
DFIR Global is led by Campbell McKenzie, founder of Incident Response Solutions Limited. [FILL IN before publishing: a 3–5 sentence bio — years in DFIR, notable experience, certifications (e.g. GCFA, EnCE), professional memberships, and whether you offer expert-witness support. Then delete this note.]
Facing an incident right now?
Don’t wait — head to our Contact page and we’ll begin triage immediately.
DFIR Global 