Computer-technical exprertise means research and an expert’s conclusion, which will be used in the process of pre-trial investigation and as evidence in court. The objects of research can be computer equipment, software or information networks.

Computer and technical examination can be carried out both within the framework of court proceedings and at the request of individual citizens for external or internal verification.

Any piece of computer equipment can be a “crime scene” and contain evidence in the form of e-mails, Internet browsing history, documents or other files related to fraud, kidnapping, drug trafficking, murder and other crimes. Every hacking attack leaves its traces in system files, archive files, software, as well as the metadata of these files.

Forensic computer-technical expertise can reveal not only when the document appeared on the computer, was last edited, was saved or printed, but also establish the chronology of events, establish cause-and-effect relationships of user actions, or in the case of unauthorized access to establish how it happened and where the intervention came from.

Computer forensics collects and provides evidence in the commission of the following types of offenses: