At the request of a private individual, represented by Mr. Antonio Monserrat Moya, from the Mallorcan law firm Monserrat Abogados, I was requested to collaborate in preparing an expert report concerning the analysis of various WhatsApp communications, as well as several emails.
The expert report was commissioned in the context of criminal proceedings, as a response to the indictment filed by the opposing party. Another objective of the requested computer forensic report was to refute witness statements contrary to the interests of the individual represented by the law firm Monserrat Abogados.
Over several weeks, work was conducted with the individual to establish a chronology of relevant events. In this manner, it was possible to clarify the communications subject to computer forensic examination. Once this chronology of events was outlined, work proceeded to identify both the most relevant WhatsApp contacts and the time periods of the WhatsApp conversations that needed to be considered in order to refute, one by one, the various issues raised in the indictment.
Once the technical scope of the expert report was precisely defined and the technical feasibility of the assignment was positively assessed, the professional services engagement form was formalized. The requested expert report required the analysis of 17 WhatsApp conversations and a total of 18 emails exchanged with 5 different contacts.
The analyzed WhatsApp conversations totaled more than 27,000 exchanged messages. For each conversation analyzed, profiling was performed to identify the messages exchanged by each of the interlocutors both quantitatively and qualitatively, in addition to analyzing their integrity.
In the expert report submitted, in addition to the section analyzing the WhatsApp conversations, a second section was included containing the technical analysis of the 18 emails and their attachments. Based on the preliminary conclusions indicated by the analyzed communications, a third section was prepared in the expert report in which the provisional conclusions contained in the indictment were refuted, one by one.
In order to provide greater assurances in the expert report, analysis of various key multimedia elements such as images and voice notes was provided, both those exchanged in the analyzed WhatsApp conversations and those existing on the acquired mobile device.
All of the above analysis was submitted to the judicial proceedings in a computer forensic expert report of 350 pages in length, excluding annexes.

