THE FEATURES OF FORENSIC EXPERIMENT DURING COMPUTER-TECHNICAL EXPERTISE

Abstract

The algorithm of an expert experiment is developed, which gives an opportunity to perform more detailed and substantial analysis of the research results. The advantages and disadvantages of typical methods of an expert experiment conduction are highlighted. The author gives reasons for the choice of one or another method, develops algorithms for their complex use. For some methods of conducting an expert experiment the author suggests software tools and technical solutions, taking into account the tasks solved during forensic computer-technical expertise. The main methods of conducting an expert experiment are described in the article.
Recommendations on the most optimal use of them and solving of expert tasks are given. The procedural peculiarities and limitations that may arise in the course of conducting an expert experiment during forensic computer-technical expertise are outlined.
Key words: experiment; modelling; virtualization; observation; data storage; operating system.