About Us

Who we are

Since 2003, Forensik.IT has been active as an expert company in the field of information technology in various subject areas, with a focus on computer forensics.

Our expert office is composed of:

  • Experts with many years of experience
  • IT experts from various fields
  • "Non-specialist" experts such as physicians for interdisciplinary consultations and expert opinions

For more than 15 years we have been successfully entrusted with the evaluation of data carriers for authorities and courts.

Forensik.IT GmbH employees are specialists in Microsoft, Apple and Linux operating systems, ISP, web hosting, system administration & cryptocurrencies.

Read more

Apply now!

You are a student in the Munich / Berlin or Limburg area & looking for a new opportunity?



Thomas Hösl

· IT forensics expert
· Managing Director
· Diploma Industrial Engineer (FH)
· Master of Mediation

Jens Ricke

· IT forensics expert
· Managing Director
· DIN EN ISO/IEC 17024 certified expert for systems and applications of information processing in forensic investigations as well as data searches

Julia Walter

· Managing Director
· DIN EN ISO/IEC 17024 certified expert for forensic data and user behavior analysis

Carlos von Farkas

- IT forensics expert
· Managing Director
· Certified Analyst for Mobile Forensic
(GASF Cert.)
· Certified
Cryptocurrency Analyst
· DIN EN ISO/IEC 17024 certified expert for systems and applications of information processing in forensic investigations as well as data searches

Timo Hösl

· Chief Financial Officer
· Certified
Cryptocurrency Analyst
· Certified EDPS
(European Data Protection Supervisor)

Daria Zamarlik

· B.A. / Professional Certificate Business Information Systems
· Area Manager Limburg
· DIN EN ISO/IEC 17024 certified expert for information processing applications and data analysis in forensic investigations

Lennart Beier

· B.A. / Bachelor of Arts
· Area Manager Berlin


IT Forensics

The task of IT forensics or digital forensics is to systematically identify or exclude criminal acts in connection with IT systems as well as to analyze and, if necessary, reconstruct them.

In addition to the classic data carrier analysis of hard disks from PC and server systems, the evaluation of digital traces on mobile end devices is also becoming increasingly important.

The basic prerequisite for achieving comprehensible results is the correct handling of evidence.
Performing a forensic analysis of IT systems usually involves four steps:

  • Identification of data carriers, data, files, structures, environments
  • Evaluation and preservation of evidence
  • Analysis of the relevant evidence data collected
  • Preparation and documentation of the data usable in court in the form of expert opinions

The basis of every expert opinion and every forensic examination is the "reproducibility" of the result.
To ensure reproducibility, the following, among others, is observed:

  • The original evidence is "moved" as little as possible.
    Any "movement" of the evidence can result in falsification, so any "movement" is documented.
  • The chain of evidence is preserved, with flawless and complete documentation being a matter of course.
  • The integrity of the data is ensured at all times.

We stand for safety.

Police check of all Employees every 6 months.


White-collar crime

This service area differs to some extent from the other forensic areas, as very large amounts of data are usually available here.
These data volumes must be efficiently structured and evaluated.
This usually requires a so-called "process know-how".

The field is developing very vividly, as more and more procedures involve the use of cryptocurrencies as a means of payment.
In order to keep up with the current changes, our cryptocurrency investigators are trained several times a year.

  • Bitcoin
  • Ethereum & ERC-20-Tokens
  • Litecoin & co.

In all of the following areas, FORENSIK.IT GmbH
has already successfully provided expert opinions nationwide:

  • Fraud
  • False accounting
  • Money laundering
  • Insider trading
  • Insolvency offenses
  • Cryptocurrencies
  • Product piracy
  • Embezzlement
  • Infidelity
  • Espionage



Information and training events as well as workshops and training courses on numerous customer-specific topics are held regularly at the premises of our expert office in Munich.
Our clients are mainly courts, public prosecutor's offices, criminal investigation authorities and public administrations.
On request, the events can be held at the customer's premises and, depending on requirements and the subject area, external speakers can be invited.
Of course, we are also happy to work with you to develop individual, needs-oriented offers.

Possible training topics include:

  • Safety concepts
  • Data encryption
  • Internal security audits
  • File-Sharing
  • Bit Torrent Programs
  • Files and their creation times
  • Hacking
  • Anonymous surfing, DeepWe, Darknet & I2P
  • Manipulation of computer systems
  • Trojans on PCs and cell phones



... is our top priority.
Only authorized persons have access to the premises of Forensik.IT GmbH.
You will be subject to a police security check every 6 months.
All premises are alarm monitored & directly connected to the emergency call.

Our employees are contractually obligated to comply with the following provisions:

  • § Section 1 of the Act on the Formal Obligation of Non-Civil Servants of March 2, 1974 (BGBI p. 547)
  • § Section 201 (3) STGB - Violation of the Confidentiality of the Word
  • § Section 203 (2), (4) and (5) STGB - Violation of private secrets
  • § 204 StGB - Exploitation of third party secrets
  • §§ Sections 331, 332 STGB - Taking advantage and bribery
  • § 353 b STGB - violation of official secrecy

Evidence security - Our policies:

  • The transport of evidence and files is carried out by reliable and certified forwarding partners.
  • Our evidence and order management system ensures correct processing of orders.
    The loss or confusion of evidence and other data and information carriers can thus be ruled out.
  • The evaluations are carried out in our secured and police-approved premises and the expert opinions are prepared exclusively there.
  • All facilities and processes comply with the specifications of the Criminal Police Advisory Service for Technical Prevention of the Munich Police Headquarters.


Frequently asked questions

  • In cryptocurrency procedures we work for selected private clients & companies.

    In other areas this is not possible.

  • In Forensik.IT GmbH, close work on evidence is essential, accordingly no home office can be offered.

  • No general statement can be made about this. We ask you to contact us by telephone or e-mail if you have any questions about specific devices.

  • Please use the contact form - we will get back to you within 48 hours.


Contact us


Machtlfingerstr. 26 | 81379 Munich | Germany

branch office:

Bahnhofsplatz 2B | 65549 Limburg | Germany

branch office:

Greifswalderstr. 33A | 10405 Berlin | Germany


+49 (0) 89 411 47 95 0