Digital Forensics • Analysis of Digital Evidence • IT Expert Reports • Independent Review of External Opinions
Why clients choose me:
- 25+ years of experience in digital forensics and cybersecurity
- Independent verification of external expert reports (counter-opinions)
- Incident analysis and event timelines delivered within 24 hours (urgent mode)
- Work compliant with ISO 27037, ISO 27001 and NIST SP 800-86
- Bit-by-bit forensic imaging + full data integrity (SHA-256)
- Court-appointed IT expert – reports written in clear, legally understandable language
- Full confidentiality and protection of all evidence
Digital forensics (Informatyka śledcza) is the discipline focused on the acquisition, analysis and interpretation of digital evidence in a way that preserves its admissibility and evidential value.
I support private clients, law firms and public institutions in preserving digital evidence, reviewing IT expert reports, and preparing case material in line with best practices (ISO/IEC 27037, NIST SP 800-86).
Scope of services
Review of expert reports (counter-opinion)
Independent assessment of the opposing party’s IT expert report — verification of methodology, errors, logic and correctness of conclusions.
Preservation of digital evidence
Creation of forensic bit-by-bit images, SHA-256 hashing, documentation and chain-of-custody procedures.
System & media analysis
Examination of computers, storage media, mobile devices, e-mail accounts, cloud services, server logs and file metadata.
Data recovery & reconstruction
Recovery of deleted or damaged data; MFT analysis, timelines, communicators, browser history and user artefacts.
Expert reports & opinions
Private reports and formal court expert opinions — clear, transparent and ready for use in proceedings.
Work process
- Consultation & material assessment
Initial discussion and definition of scope. Identifying data sources and objectives of the analysis. - Evidence preservation
Forensic imaging, integrity checks and documentation (hashes, descriptions, protocols). - Technical analysis
Analysis of files, logs, system artefacts and communications. Creation of the event timeline. - Report / expert opinion
Methodology, results, conclusions, limitations and recommendations. - Review of findings
Final briefing with the client, interpretation in the context of the case and next steps.
Use cases
- civil and criminal cases (e.g., confidentiality breaches, sabotage, computer fraud),
- employee computer analysis, data leaks, information theft,
- recovery and analysis of communications (email, WhatsApp, Messenger, Signal),
- verification of evidence presented by the opposing party,
- support for law firms and experts from other disciplines requiring technical analysis.
FAQ
How long does a digital forensics analysis take?
Depending on scope — from 3 to 15 business days. Urgent cases can be handled in express mode.Can I provide only a copy of the data?
Yes, I work on forensic images (bit-by-bit) or properly created evidence-grade copies.How will I receive the results?
You receive a PDF report with a qualified electronic signature and (optional) a copy of the evidence with integrity hashes.Is my case confidential?
Yes — full confidentiality and integrity of the material are top priorities. All evidence is stored according to ISO/IEC 27001.Contact
Would you like to discuss a case or verify an existing expert report?
📞 Phone: +48 515 601 621
✉️ Email: biuro@wichran.pl