Purpose of Computer-Technical Examination during the Investigation of Crimes
Abstract
Abstract. The article presents a comprehensive study of the organizational, tactical, and procedural principles underlying the purpose of computer-technical examination during the investigation of criminal offenses. It is substantiated that, given the rapid spread of digital technologies and the growing role of electronic evidence, computer-technical examination is becoming one of the most common ways to apply special knowledge in criminal proceedings. It is established that its results are used not only during the investigation of cybercrimes but also in criminal proceedings regarding fraud, financing of terrorism, crimes against the foundations of national security, distribution of pornographic materials, transmission of information about the locations of the Armed Forces of Ukraine, and other offenses where digital traces have evidentiary value. The article defines the subject, objects, and main types of computer-technical examination and characterizes its place in the system of engineering and technical forensic examinations. It is found that the most expedient approach is to divide the objects of research into hardware, software, and information. Typical tasks solved during a computer-technical examination include, in particular, assessing the technical condition of devices, examining electronic correspondence, detecting malicious software, recovering deleted information, establishing the time of creation or modification of files, IP addresses, geolocation parameters, and facts about the use of specific software products. The features of preparing materials for examination, as well as the specifics of removal, packaging, transportation, and storage of digital media, are determined. It is emphasized that improper removal of devices, independent viewing of files by the investigator, and the absence of passwords, PIN codes, encryption keys, or other information about account access can significantly reduce the effectiveness of the expert examination or make it impossible to conduct it at all. Based on the analysis of judicial practice, the most common circumstances for which computer-technical expertise is assigned are summarized, and typical errors made during its assignment are identified. The need for further improvement of methodological recommendations for working with digital evidence, for more active involvement of specialists during the seizure of digital media, and for the wider use of complex examinations involving specialists in telecommunications, programming, and digital forensics is substantiated.
Keywords: digitalization; cyberspace; special knowledge; forensic examination; assignment of examination; computer technology.
Downloads
References
Avdieieva, H.K. (2021). Digital evidence in criminal proceedings: Problems of theory and practice. Law and Safety, 2(81), 175-182. Retrieved from https://ibn.idsi.md/sites/default/files/imag_file/370-374_5.pdf
Demydova, Ye.Ye. (2024). Digital traces of criminal offenses: Concept and features. Scientific Bulletin of Uzhhorod National University. Series "Law", 4(85), 71-75. DOI: 10.24144/2307-3322.2024.85.4.10
Dovzhenko, O.Yu. (2019). Some issues of appointing computer and technical examination during the investigation of cybercrimes. Uzhhorod National University Herald. Series "Law", 55(2), 124-127. Retrieved from http://nbuv.gov.ua/UJRN/nvuzhpr_2019_55%282%29__30
Hora, I.V., Kolesnyk, V.A., & Popovych, I.I. (2024). Digital forensics in the provision of crime prevention activities. Uzhhorod National University Herald. Series "Law", 4(85), 63-70. DOI: 10.24144/2307-3322.2024.85.4.9
Kalancha, I.H., & Harkusha, A.M. (2021). Copy of electronic information as evidence in criminal proceedings: Procedural and technical aspects. Juridical scientific and electronic journal, 8, 336-339. DOI: 10.32782/2524-0374/2021-8/77
Karpets, Yu.V. (2025). Digital evidence and computer-technical examinations in criminal proceedings on war crimes. Juridical scientific and electronic journal, 11, 226-230. DOI: 10.32782/2524-0374/2025-11/46
Kharkivskyi, P.P. (2014). Computer-technical examination: Problematic issues. Criminalistics Bulletin, 2, 97-100. Retrieved from https://elar.navs.edu.ua/server/api/core/bitstreams/32a5f766-8e02-4ac6-86fd-bc54bd67ea12/content
Liubavina, V. P., & Skliarenko, H.V. (2023). Conducting computer and technical examination during the investigation of cybercrimes. International Law Herald: Actual Problems of the Present (Theory and Practice), 17, 36-40. DOI: 10.32782/2521-1196.17.2023.36-40
Pohoretskyi, M.A. (2025). Judicial control in ensuring fair and admissible evidence in the criminal procedure of Ukraine. Analytical and Comparative Jurisprudence, 4(3), 269-279. DOI: 10.24144/2788-6018.2025.04.3.40
Pohoretskyi, M.A. (2026). Digital (electronic) evidence and the digital (electronic) form of evidence: Delimitation of concepts and its significance for criminal procedural proof. Analytical and Comparative Jurisprudence, 3(1). DOI: 10.24144/2788-6018.2026.01.3.18
Serhieieva, D.B. (2025). Use of special knowledge in the investigation of war crimes and crimes against humanity: Procedural aspects, expert interaction, and digital criminalistics. Analytical and Comparative Jurisprudence, 6(3), 234-247. DOI: 10.24144/2788-6018.2025.06.3.36
Shepitko, V.Yu. (Eds.). (2025). Digital forensics and its role in the formation of evidentiary activity in wartime conditions. Kharkiv: Pravo. Retrieved from https://pravo-izdat.com.ua/index.php?route= product/product/download&product_id=5983&download_id=2127&srsltid=AfmBOorWS8SwrY--sKGeEaaPgkOcAOZR6eQ8lyafo-CSCYbSLp8unLTE
Stepaniuk, R.L., & Kolesnyk, V.H. (2023). Forensic computer and technical examination: Current state and development prospects. Bulletin of Luhansk State University of Internal Affairs Named after E.O. Didorenko, 2(102), 289-305. DOI: 10.33766/2524-0323.102.289-305
Teplytskyi, B.B. (2018). Tasks, objects and questions of forensic computer and technical examination. Scientific Bulletin of the National Academy of Internal Affairs, 3, 303-315. Retrieved from http://nbuv.gov.ua/UJRN/Nvknuvs_2018_3_27
Udovenko, Zh.V., & Udovenko, V.V. (2024). Appointment of computer and technical examination during the investigation of criminal offenses committed in the field of computer information. Forensic examination during martial law: problems of theory and practice: materials of the 1st All-Ukrainian Scientific and Practical Conference (pp. 91-96). Vinnytsia: Erhard and Partners Expert and Consulting Center.
Abstract views: 23 PDF Downloads: 12
Authors reserve the right to authorship of their own work and transfer to the magazine the right of the first publication of this work under the terms of the Creative Commons Attribution License, which allows other persons to freely distribute published work with mandatory reference to authors of the original work and the first publication of an article in this magazine.
Authors have the right to enter into separate additional agreements on non-exclusive dissemination of the work in the form in which it was published in the journal (for example, to post an article in the institution's repository or to publish as part of a monograph), provided that the link to the first publication of the work in this journal is maintained.
The journal's policy allows and encourages the posting of articles by authors on the Internet (for example, in electronic storehouses of institutions or on personal websites), both before the submission of this manuscript to the editorial office and during its editorial processing, as this contributes to the creation of a productive scientific discussion and positively affects the efficiency and dynamics of citing the published work.
