Use of Special Knowledge in the Field of Forensic Computer-Technical Expert Examination in the Pre-Trial Investigation of Crimes Against the Foundations of National Security

Abstract

In modern legal proceedings, the use of various forms of forensic expert examination is important. The article analyzes the current state of forensic computer-technical expert examination and the current forensic expert practice in this area, considers the issue of the need for special knowledge to conduct this type of examinations. It is substantiated that forensic computer-technical expert examination is an independent type of forensic expert examination and belongs to the class of engineering and technical examination. The definitions of the object, the subject of computer-technical examination are presented, typical tasks are formulated. The issues, faced by the experts when assigning forensic computer-technical examinations for the study of new computer objects are considered. Determination of the expert’s assignment and the formulation of questions are considered as an important stage in the planning of an examination, on which the correct choice of research methodology depends. With the development of information technologies, investigators are interested in new objects for which it is necessary to prepare individual methodological recommendations, manuals for determining the sequence of conducting various types of examinations. It has been substantiated that the conclusions of forensic experts on computer-technical examination are of great evidentiary value. They make it possible to: decipher the encoded information; find information that was considered missing, lost or destroyed; restore the mecha­nism of a criminal event based on information traces.

Key words: forensic activity, forensic research, information and telecommunication system; computer crimes; forensic computer-technical examination; electronic media.