Prompt turnaround
I agree the deadline after reviewing the material and scope. For urgent cases, please call and specify the required deadline.
Kraków · assignments across Poland
Digital forensics
and cybersecurity
Vadym Rekel · Master’s degree in Criminology
Court expertOn the list of experts of the Regional Court in WarsawField: computer science · specialisation: digital forensics
Digital evidence analysis for legal proceedings and private expert assessments. Acquisition and verification of phone, computer and storage data; analysis of metadata, communications and activity traces.
I welcome cooperation with courts, police and prosecutors. Prompt turnaround, agreed after assessing the scope. Based in Kraków, serving all of Poland.
IT expert witness
Vadym Rekel, Master’s degree
Vadym Rekel, Master’s degree IT expert witness Mobile data · computers · storage media
Assignments across Poland
Cooperation with courts, police and prosecutors
Digital forensic opinions, examination of phones, computers and storage media, and answers to questions about digital evidence.
Findings that address the questions
The opinion describes the examination, sources and reasoning. The analysis addresses the commissioning authority’s questions and the material provided.
Direct contact
To agree the scope, transfer of material and deadline: 883 040 483. Office in Kraków, ul. Kielecka 2/53.
Areas of expertise
Digital forensic analysis and expert assessments
Digital forensics involves acquiring, analysing and interpreting available digital material. The assignment determines the data sources, methods and scope of the report.
01Phones and mobile devicesAcquisition and analysis of mobile data: communications, apps, files, backups, metadata and activity timelines.02Computers and storage mediaAnalysis of files, system structures and metadata. Verification of consistency, activity traces and event timelines.03Data recoveryAssessment of lost or deleted data recovery, method selection and documentation of the available results.04IT expert opinions and assessmentsExpert opinions for proceedings and private assignments, describing the material, methods, basis of findings and limitations.
Parents and guardians · family matters · private investigators
Digital analysis and evidence support
I help establish what the available digital material shows and how to document technical findings.
Analysis of a child’s phone
I examine available data from a child’s phone, including browsing history, for signs of inappropriate or potentially illegal content and risks in communications. I explain the findings and the limits of the analysis in clear terms for a parent or guardian.
Scope of phone analysis →Divorce and family matters
I help organise and verify digital data you are entitled to access for divorce and family matters. I explain what can be established from the material and the limits of its interpretation.
Digital material in family matters →Support for private investigators
I analyse lawfully obtained digital material, including files and their metadata. I prepare a timeline and a report of findings, identifying the sources and limitations of the data.
Working with private investigators →I agree the scope individually, taking into account the available data, authority to provide and use it, the purpose of the work and its legal basis. Before work begins, I explain the possibilities and limitations and provide a tailored quote.
Request a tailored quote →
About the expert
Qualifications and specialist expertise
I hold a Master’s degree in Criminology, specialising in criminalistics and forensic sciences, and am on the list of court experts of the Regional Court in Warsaw in computer science, specialising in digital forensics. I combine criminology with analysis of digital evidence from phones, computers, storage media and applications.
I completed postgraduate programmes in cybersecurity, computer network administration, Python programming, and criminalistics and crime prevention methods. My opinions identify the sources of findings and explain the technical significance of records in relation to the questions asked.
I completed the postgraduate programmes “Pentester Cybersecurity Specialist” at WSB Merito University in Toruń and “Cyberspace Security and Protection” at WSB Merito University in Poznań. I also hold a DEKRA Polska certificate, “Cybersecurity Officer for Essential Services”, confirming completion of training and a passed examination.
- Education
- Master’s degree in CriminologyCriminalistics and forensic sciences · WSKZ
- Court expert listing
- Regional Court in WarsawComputer science · digital forensics
- Information security
- ISO 27001 internal auditor
- Mobile forensic tools
- MOBILedit Forensic ULTRAMobile device data analysis
Digital forensic methodology
Digital material analysis methodology
Procedures are selected for the assignment and material. Documentation records data sources, methods and the basis for findings and conclusions.
Purpose and scope
Define the examination’s purpose, technical questions, available data sources and scope of work.
Identifying the material
Record the origin and condition of devices or data, agree the transfer method and document the source material.
Acquisition and analysis
Select acquisition and analysis methods; verify records, metadata and chronology, taking technical limitations into account.
Report or expert opinion
Present results, answers to technical questions, methods, supporting evidence and interpretative limitations.
Data integrity and documented procedures make it possible to verify how the analysis was performed and what supports its findings.
Mobile device analysis
MOBILedit Forensic ULTRA.
Acquiring, verifying and analysing mobile data
MOBILedit Forensic ULTRA supports extraction from compatible devices, application analysis and reporting. Acquired material is verified and interpreted against the assignment’s questions, record sources and technical limitations.
MOBILedit methods and scopeDevice → material → findings
01 Acquisition02 Analysis03 Reporting
Android / Apple iPhone
Method selected for the specific device
Data acquisition
Methods matched to the device and its condition, from logical extraction to advanced techniques for supported models.
Messaging and applications
Analysis of available conversations, attachments and application databases, taking versions and storage mechanisms into account.
Timeline and report
Link events over time, identify relevant material and explain findings and limitations.
Available data depends on the phone model, operating system, security measures and surviving material.
Assignment context
Digital material in proceedings and private expert assessments
An IT expert assessment explains issues requiring technical knowledge. It combines digital record analysis with documentation that allows the basis of the findings to be assessed.
Source and integrity
Identify devices, copies and files, and document acquisition. Hash verification assesses whether data has remained unchanged since capture.
Analysis and interpretation
Relate communications, files, metadata and system traces to the assignment’s questions. Assess consistency and the technical circumstances of their creation and storage.
Opinion and reasoning
Describe the subject, methods and source material; answer technical questions and identify the basis for conclusions, discrepancies and limitations.
Training and certificates
Master’s degree in Criminology. Digital forensic qualifications.
Diplomas, certificates and professional membership. Select a document to enlarge it.
1 / 24
Enlarge document ↗Education
Master’s degree in Criminology
Master’s degree diploma
Criminalistics and forensic sciences. Wyższa Szkoła Kształcenia Zawodowego; studies completed on 9 July 2026.
Enlarge document ↗Education
Pentester Cybersecurity Specialist
Certificate of completion of postgraduate studies
Uniwersytet WSB Merito w Toruniu, Faculty of Finance and Management in Bydgoszcz. Studies completed on 17 May 2026. Curriculum: 162 hours, 30 ECTS.
Enlarge document ↗Education
Cyberspace security and protection
Certificate of completion of postgraduate studies
Uniwersytet WSB Merito w Poznaniu, Faculty of Economics in Szczecin. Studies completed on 14 June 2026. Curriculum: 186 hours, 30 ECTS.
Enlarge document ↗Education
Cybersecurity and digital forensics
Postgraduate studies certificate
Two-semester postgraduate studies at Lazarski University in Warsaw.
Enlarge document ↗Education
Cybersecurity
Postgraduate certificate
Postgraduate studies in cybersecurity.
Enlarge document ↗Education
Cybersecurity — WSKZ
Postgraduate studies certificate
Postgraduate studies at WSKZ in Wrocław.
Enlarge document ↗Education
Criminology and criminalistics
Postgraduate studies certificate
Postgraduate studies in criminology and criminalistics.
Enlarge document ↗Education
Criminalistics and crime prevention methods
Postgraduate certificate
Methods of trace examination and combating crime.
Enlarge document ↗Education
New technologies law
Postgraduate studies certificate
English-language certificate of completion of postgraduate studies.
Enlarge document ↗Training, certificates and membership
Cyberspace Security Representative
PIKW certificate
Certificate associated with postgraduate studies in cyberspace security and protection at WSB Merito University.
Enlarge document ↗Training, certificates and membership
Expert Witness Institute — Affiliate Member
Membership certificate
Certificate confirming admission as an Affiliate Member of the Expert Witness Institute.
Enlarge document ↗Education
Computer network administration
Postgraduate certificate
Technical education in computer infrastructure and networks.
Enlarge document ↗Education
Python back-end development
Postgraduate certificate
Programming skills supporting data analysis and technical task automation.
Enlarge document ↗Digital forensics
Digital forensics — electronic evidence
Completed technical training
Acquisition and analysis of electronic evidence of crime.
Enlarge document ↗Digital forensics
Digital forensic workshops
Training completion diploma
Digital forensic workshops delivered by Altkom Akademia.
Enlarge document ↗Digital forensics
Computer forensics training
Training certificate
“Informatyka Śledcza — tajniki służb (computer forensics)” training.
Enlarge document ↗Cybersecurity
Cybersecurity officer for essential services
Training and examination passed
Training and examination passed: ISO/IEC 27001:2022, PN-EN ISO 22301:2020-04 and personal data protection under the GDPR. Certificate issued by DEKRA Polska on 28 April 2026.
Enlarge document ↗Information security
ISO/IEC 27001:2022 internal auditor
Training with a final examination
Information security management system.
Enlarge document ↗Mobile data
Telegram and MOBILedit Forensic ULTRA
Conference presentation
Presentation on Telegram data extraction using MOBILedit Forensic ULTRA.
Enlarge document ↗Mobile data
iPhone data copies and MOBILedit ULTRA
Delivered presentation
Methodology of binary data copying — an iPhone 16 Pro Max case study with MOBILedit Forensic ULTRA.
Enlarge document ↗Evidence integrity
Data integrity and hash functions
Conference presentation
Cryptographic hash functions in digital forensics: evidential significance, methodological risks and standards.
Enlarge document ↗Digital forensics
Cloud forensics — cloud data
Conference presentation
Preserving cloud data using Cellebrite Cloud Analyzer.
Enlarge document ↗Mobile data
Preserving evidence from mobile devices
Conference presentation
Presentation on preserving digital evidence from mobile devices using Cellebrite UFED.
Enlarge document ↗Cybersecurity
Cybersecurity and digital crime
Conference participation
3rd International Scientific Conference “The Multidimensionality of Cybersecurity. New Dimensions of Digital Crime: Law, Technology, Society”.
View the full document gallery
Criminology diploma, postgraduate certificates and presentations on mobile data, MOBILedit, cloud data and digital evidence integrity.
Diplomas and certificates.
Before getting in touch
Commissioning an analysis
Material, technical feasibility, working arrangements and delivery of results.
How do we begin?
Describe the issue, available material and questions to be answered. We will then agree the possible scope and how to transfer the data.
Does the analysis cover Apple iPhone?
Yes. Digital forensics also covers Apple iPhone data. Availability depends on the model, operating system, security and device condition.
Can all deleted data be recovered?
Recovery is assessed individually. Storage type, overwriting, encryption and device condition matter. Recovery of every record cannot be guaranteed in advance.
Do you accept cases outside Kraków?
Yes. The office is in Kraków and accepts assignments across Poland. Transfer of material and working arrangements are agreed individually.
How long does analysis take, and how is it priced?
Timing and pricing depend on the type and volume of material, data availability and the questions asked. They are agreed after a preliminary scope assessment.
Can I upload material through this website?
Initial contact establishes the scope. This website does not accept files or evidence uploads. A general description is sufficient; data or device transfer is agreed separately.
Office · Kraków
Office and analysis workstation in Kraków
An office and digital analysis workstation in Kraków. Meetings and device handover are arranged individually.
Kraków office
Office at ul. Kielecka 2/53.
The second office room
Waiting area at Kielecka 2/53, Kraków.
Kraków · location and directions
Google Maps — from the office to court
The office is at ul. Kielecka 2/53, near Rondo Mogilskie. Check approximate walking and driving distances and times to selected courts in Google Maps.
Starting point
Arrange an appointment Vadym Rekel’s office
ul. Kielecka 2/53, 31-526 KrakówPrzy Rondzie 7, Kraków
Main building of the Regional Court and the district courts for Kraków-Śródmieście, Krowodrza, Podgórze and Nowa Huta.
Przy Rondzie 3, Kraków
Seat of the Court of Appeal in Kraków.
Rakowicka 10, Kraków
Seat of the Voivodeship Administrative Court in Kraków.
Kazimierza Kordylewskiego 11, Kraków
Commercial divisions IV, V, VII and VIII of the Kraków-Śródmieście District Court; information office and case file reading room.
Selected walking route
Regional Court and district courts
Approx. 550 m on foot · 8 min from the office
Google Maps connects to an external service only after you load the map.
Google Maps. Select a court and choose walking or driving.
Distances and times are estimates from Google Maps routes checked on 11 October 2026. Route choice, walking conditions and traffic may affect them.
Some court divisions have different addresses. Check the summons or official court website before visiting. Office meetings are by appointment.
Enquiries and assignments
Contact about an analysis or expert opinion
I welcome courts, police and prosecutors. Prompt deadlines are agreed after assessing the material and scope. Please describe the assignment, available devices or data, and questions for the opinion.
ul. Kielecka 2/53, 31-526 Kraków · Rondo Mogilskie
Assignments across Poland · meetings by appointment
View location on the map ↗
Map and distances to Kraków courts
Knowledge
Understanding digital evidence
Digital forensic methods, law and research. Resources for courts, prosecutors, police, legal representatives and anyone assessing digital evidence.
All articles →