Classification of Computer Data Relevant to Forensic Analysis

Бесплатный доступ

The article examines the concept of computer information in foren-sics in the context of the theory of information and computer support for forensic activities and the doctrine of computer systems and tools’ forensic examination. Forensically significant computer information is defined based on fundamental con-cepts of information and information in computing environment, considering its in-herent connection with the concept of digital footprint. The possibility of classifying information in a computer environment is proposed according to: its reflection of real-world (material, physical) objects; the method of its introduction into the com-puter environment; its presentation format; its storage location within this envi-ronment; and its content. The article notes a characteristic feature of computer in-formation – its inseparable connection between content and storage format, which allows for its examination both within the framework of forensic examination of computer systems and in various areas of forensic technology, as well as in different types of forensic expert examinations.

Еще

Forensically relevant information, digitalisation, digital footprint, classification of computer data, computer environment, representation of physical objects

Короткий адрес: https://sciup.org/142244941

IDR: 142244941   |   DOI: 10.33184/vest-law-bsu-2025.26.16

Статья научная