REVIEW OF EXPERT WITNESS REPORTS

Digital Evidence • Device Preservation • Digital Forensics

I help determine whether an expert witness report and the underlying digital evidence are complete, reliable and based on sound forensic methodology.

I preserve and examine smartphones, computers and storage media in a manner designed to protect data integrity and reduce the risk of their evidentiary value being challenged.

Improperly powering on a device, opening a file or examining original data may alter metadata, overwrite digital traces and make the evidence more difficult to use in legal proceedings.

Request an Expert Report Review → Preserve a Device →

How I Can Help

1. Review of Digital Evidence and Expert Witness Reports

I independently assess IT expert reports and digital evidence with regard to:

• the way the data was identified and preserved,
• the completeness of the examination,
• the methods and forensic tools used,
• consistency between the findings and final conclusions,
• omitted data and alternative hypotheses,
• methodological errors that may have affected the opinion.

2. Digital Forensics — Device Preservation and Examination

I preserve and examine:

• smartphones and mobile devices,
• desktop and laptop computers,
• hard drives, USB devices and other storage media,
• email accounts and messaging applications,
• files, metadata and system logs,
• backups and deleted data.

Whenever possible, examinations should be performed on a properly prepared forensic copy, with every action documented and the integrity of the data verified.

3. IT Disputes and Incident Response

I help reconstruct events, preserve available digital material and distinguish technical facts from assumptions.

Support may include the examination of security incidents, logs, user activity, technical documentation and digital material used in litigation or commercial disputes.

4. Cyber Due Diligence and Digital Risk Audit

I assess hidden digital risks before transactions, investments and material business decisions. I identify issues that may affect liability, business continuity and information security.

5. Ongoing Technical Support for Law Firms — B2B Retainer

I provide law firms with ongoing technical support in matters involving digital evidence, expert reports, electronic devices and IT disputes.

I help assess digital material before it is relied upon in proceedings and prepare technical questions or objections concerning an expert’s methodology and conclusions.

Before You Power On a Phone, Computer or Storage Device

If a device may contain material relevant to a case:

• do not browse files or messages,
• do not install software or updates,
• do not reset the device,
• do not connect it to an unverified computer,
• do not examine the original data directly,
• do not change the state of the device without prior consultation.

Every action may create new traces, alter metadata or make it more difficult to reconstruct the original state of the data.

When an Expert Witness Report Raises Concerns

A technical opinion should not be assessed solely on the basis of its final conclusions. The source material, preservation process, scope of examination, forensic tools and reproducibility of the work are equally important.

The review may include:

• checking whether the correct source material was preserved,
• assessing integrity and chain of custody,
• examining the methodology used,
• comparing the examination results with the conclusions,
• identifying inconsistencies and omissions,
• preparing technical questions or objections.

Support at Different Stages of Proceedings

Before Digital Material Is Used

Assessment of the device, the method by which data was obtained and the available options for proper forensic preservation.

During Proceedings

Analysis of digital evidence and expert reports, preparation of technical questions and identification of matters requiring clarification.

After an Expert Report Is Issued

Assessment of the methodology, completeness of the examination and consistency between the findings and conclusions.

During an Appeal

Identification of technical deficiencies that may be relevant to the assessment of the expert report and the formulation of appellate arguments.

About the Expert

Piotr Wichrań

• Court-Appointed IT Expert

Analysis and assessment of digital evidence for judicial proceedings.

• Licensed Private Investigator

Lawful information gathering and verification with attention to evidentiary requirements.

• IT/OT Cybersecurity Specialist

Over 20 years of experience in complex technology environments.

Digital Material Can Be Relevant Only When Its Origin and Integrity Can Be Demonstrated

If your matter involves a smartphone, computer, correspondence, logs, recordings or an expert witness report, it is worth consulting the next steps before any further action is taken.