IT Forensics · Private Individuals
Can a private IT forensic report help my solicitor or the police in a case of cyberstalking?
Anyone who reports cyberstalking or applies for protective measures must provide a clear account of the digital incidents. A private expert report compiles the technical evidence in such a way that lawyers, the police and the courts can examine and make further use of it.
Why this question is important for private individuals
Digital reconstruction can have a profound impact on a person’s everyday life. At the same time, joint accounts, old shared files or routine technical procedures can have a similar effect. An independent investigation should therefore neither downplay the issue nor confirm a suspicion prematurely.
Technical background
Police investigations often focus on the substance of the allegation. A private expert report can supplement this by documenting incidents that are scattered across several devices and accounts, and by establishing their technical origin. It is no substitute for a police report or an official investigation.
Relevant evidence and data sources
- Secure communication using metadata (messaging apps, email, social media)
- Account and device logs (logins, authorisations, linked devices)
- Evidence relating to monitoring apps or trackers
Borders
- A private expert report constitutes a party’s submission; it is for the court or the relevant authority to assess it.
- It is usually not technically feasible to identify the person behind an account.
Possible results
- A structured report with a timeline and supporting evidence
- Attachments in a verifiable format (hash values, export logs)
- Clearly identifying outstanding issues
Why LanCologne?
Where cyberstalking or digital surveillance is suspected, the situation is often emotionally distressing for those affected. It is precisely for this reason that a professional investigation must draw a clear distinction between mere observation, technical capability and an incident that has actually been proven to have taken place.
Here’s how we do it
- Discuss the scope of the case with you or your solicitor.
- Forensically secure backup using hash values.
- Analysis and preparation of the expert report, including methodology, findings and limitations.
Personal safety takes precedence over the full preservation of evidence
Where there is a specific threat, the desire to obtain as complete a set of digital evidence as possible must not delay the necessary protective measures. The Police Crime Prevention Service recommends dialling the police emergency number in the event of an immediate threat. Forensic evidence collection and protective measures must therefore be appropriately coordinated on a case-by-case basis.
Suspicion, the ability to gain access and actual access are three different things
A previously known password, an active family sharing arrangement or installed remote maintenance software may provide a means of access. Only further evidence can reveal whether this means of access was actually used. Additional evidence may be required to attribute such use to a specific individual.
Why LanCologne in the context of cyberstalking and digital surveillance?
LanCologne is not commissioned to provide technical confirmation of a suspect who has already been identified. We examine the available digital evidence with an open mind. The report should be comprehensible to the person concerned whilst remaining sufficiently transparent to enable a solicitor, investigating authority or another qualified IT forensic expert to understand the key technical findings.
Legal framework
Section 238 of the German Criminal Code (StGB) governs stalking. The provision covers, subject to its conditions, repeated unauthorised stalking which is likely to significantly disrupt the affected person’s way of life. Examples include attempts to make contact via telecommunications or other means of communication, the misuse of personal data, and offences under Sections 202a to 202c of the German Criminal Code (StGB) committed against the affected person or persons close to them. Section 238(2) of the German Criminal Code (StGB) also cites, as a typical example of a particularly serious case, the use of a computer programme for digital spying in connection with such an offence.
Sections 202a et seq. of the German Criminal Code (StGB) may be relevant in cases of unauthorised access to specially secured data or certain forms of interception or preparation for such acts. It cannot be automatically concluded from a single technical artefact whether all the elements of the offence have been fulfilled.
The Protection Against Violence Act provides for court-ordered protective measures, subject to certain conditions. Section 1 of the Protection Against Violence Act (GewSchG), for example, prohibits making contact with the victim, including via means of remote communication. Under certain conditions, the provision also covers repeated stalking or harassment via means of remote communication. Legal advisers and the court will assess which protective measure is possible in a specific case.
The Police Crime Prevention Service advises victims of cyberstalking to keep any existing evidence – such as emails, messaging histories, digital photos or videos – as complete and unaltered as possible until they first contact the police. In the event of an immediate threat, personal safety takes priority.
LanCologne does not make any criminal attributions of guilt or liability, nor does it rule on protection orders. Our role is to establish the technical facts based on data lawfully provided to us and to document these findings in a transparent manner.
Frequently Asked Questions
Can a private IT forensic report help my solicitor or the police in a case of cyberstalking?
Is the expert report recognised by the police?
Do I need to see a solicitor first?
How much does a valuation cost?
Related topics
LanCologne – IT Forensics for Private Individuals
Do you have a digital enquiry? LanCologne can assist you with an objective, unbiased IT forensic investigation.
Related to this topic
- Why should I engage LanCologne if I suspect I am being cyberstalked or digitally monitored?
- How can I document threats to publish private photos or videos using forensic methods?
- How can I document repeated online harassment across multiple platforms?
- How can I ensure that the video recordings from my private CCTV camera are stored in a way that preserves their evidential value?