The concept of the doctrine on information-computer forensic models as the basis of computer crime investigation techniques

Introduction: The article continues our publications on the doctrines that make up the theory of information and computer support for forensic activity - the scientific basis for the solution and investigation of computer crimes. It examines the next stage the content of this theory study. It is noted that in the era of digitalization, new opportunities are opening for studying and generalizing large arrays of forensically significant information using Big Data technology. On this basis, the concept of information-computer forensic models of computer crimes can be implemented. Materials and Methods: based on the methodology of criminalistics including methods of dialectical and formal logic, general scientific and special methods, taking into account the analysis of investigative and operational-search practice, it was concluded that it is necessary to change the prevailing stereotypes of investigating computer crimes, since the methods of these crimes do not directly correlate with their types, but for commission of different types of computer crimes often use the same methods and information and computer support. Results of the Study: the concept of criminalistics doctrine on information-computer forensic models as the basis of methods for investigating computer crimes is proposed. The definition of the subject, objects and content of the doctrine is substantiated. Summary and conclusions: The concept of a new doctrine on information-computer forensic models of computer crimes, which is an element of the system of the theory of information-computer support of criminalistics activity, has been developed. The subject of the doctrine is the general patterns of the formation of information and computer models of computer crimes based on correlations between combinations of IT technologies and computer systems used for various methods of committing and concealing computer crimes and digital footprints, as well as the IT competencies of criminals and victims. The objects of doctrine include forensically significant computer information about combinations of IT technologies, digital footprints, and IT competencies of criminals and victims.