Digital Forensics Expert – Court IT Expert – Cybersecurity Specialist – Private Detective
I help companies and private clients prevent incidents, respond effectively and preserve digital evidence.
I combine the perspective of a court IT expert, a licensed private detective and an IT/OT (ICS) cybersecurity specialist.
I work both on a project basis and in a retainer model.
Independent review of digital forensics reports
Do you have doubts about a presented expert report? Do you need an independent view and a professional second opinion?
I provide thorough reviews of digital forensics reports, covering the analysis of digital evidence, applied methods and conclusions.
This includes criminal, civil, commercial, family and insurance cases.
What I offer:
- detailed analysis of digital materials,
- assessment of the methods and tools used,
- independent conclusions and expert support at every stage of the proceedings.
Smartphone examinations – detection of spyware (stalkerware / spyware)
More and more people search for “how to check if my phone is being spied on” or “how to detect spyware on my phone”.
I offer professional examination of Android smartphones and iPhones, including detection of:
- spyware and stalkerware (and other surveillance apps),
- unauthorised access to accounts (Google, Apple ID, WhatsApp, Messenger, Signal),
- hidden applications and background services,
- call and SMS forwarding (MMI/USSD),
- attempts to clone the device or remote viewing,
- traces of compromise, root/jailbreak and system tampering.
How I work
- Assesment – a focused initial interview and a preliminary risk review (IT/OT, processes, assets, legal context).
- Planning – definition of priorities, objectives, and KPI/KRI metrics, followed by the preparation of a 30–60–90 day action roadmap.
- Implementation – solution architecture, policies and procedures, testing, training, and operational support.
- Ongoing support – periodic reviews (e.g. quarterly) or cooperation under a retainer model.
Depending on the nature of the matter, cooperation is preceded by the execution of a Non-Disclosure Agreement (NDA). In the case of investigative services, activities are carried out exclusively on the basis of a detective services agreement, in accordance with applicable law.
Meetings are conducted in person at a Warsaw office or at the client’s premises, as well as remotely (Teams / Zoom / Signal).
Smartphone examination – service details Spyware & stalkerware detection
Services
For companies
- IT/OT (ICS) security assessments – security posture review, vulnerability identification, recommendations (NIST SP 800-82, ISO 27001).
- Digital evidence preservation – professional acquisition and chain-of-custody compliant handling.
- Expert opinions and advisory – court expert reports, support in proceedings, IT/OT risk assessments.
- Cybersecurity trainings – data protection, prevention and incident response, programs for boards and technical teams.
For private clients
- Data recovery – HDD/SSD, USB, smartphones and other media.
- Divorce and civil cases – collection and analysis of digital evidence, cooperation with law firms.
- Smartphone and computer examinations – analysis of files/logs/user activity in line with court procedures.
- Account protection (social/e-mail) – compromise detection, account recovery, security hardening.
Experience – why you can trust me
Court IT expert in digital forensics
For many years I have supported courts, prosecutors and law enforcement agencies in criminal, civil and commercial cases.
I am entered on the list of court experts at the President of the Regional Court Warszawa-Praga in Warsaw.
I specialise in securing, analysing and assessing digital evidence – from computers and smartphones to complex OT/ICS industrial environments.
I have authored over 2,000 expert reports and opinions, many of which became key evidence in court proceedings.
Licensed private detective, OSINT practitioner
I hold a state-issued private detective licence granted under the Polish Private Detective Act (Dz.U. 2002 No. 12, item 110).
These credentials confirm the highest ethical and professional standards in investigative work in both private and business contexts.
By combining IT, investigative and legal expertise, I effectively handle cases involving fraud, corporate abuse and cyber incidents.
30+ years in IT/OT and digital forensics
My professional background covers both corporate environments and the public sector.
Since the early 1990s I have worked with IT systems and industrial infrastructure (OT/ICS), which gives me a unique blend of technological and operational experience.
Over the years I have completed more than 2,000 expert assignments, reports and analyses, many of them highly complex and business-critical for corporate clients and law enforcement.
- IT/OT + forensics – hands-on experience in industrial (ICS) and traditional IT environments.
- Compliance and standards – NIST/ISO, best practices for chain of custody.
- Fast, actionable results – ready-to-use templates, checklists and procedures for IRP/DRP/BCP.
Blog – latest posts
- Which Digital Evidence Has Real Evidentiary Value – and Which Is an Illusion 2026-02-01
- Detective Work, Evidence and Court Proceedings – A Practical Guide 2026-01-31
- Why Materials Collected by a Detective Are Often Challenged 2026-01-29
- Integrity of Digital Evidence – A Technical or a Procedural Issue? 2026-01-23
- Detective or Court-Appointed Expert – Whom to Appoint and When 2026-01-15
Contact
Informatyka Śledcza Piotr Wichrań
📞 +48 515 601 621 · ✉️ biuro@wichran.pl
I serve clients in Warsaw, the Mazowieckie Voivodeship, and across Poland.
Meeting office: Warsaw.
☎ Call for February 2026 emergency slot© 2025 · GDPR / Privacy notice · Cookies: Cookie information