Scientific Journal of the National Academy of Internal Affairs

The purpose of the article is to investigate electronic reflection as a forensic object, to find out the nature of electronic traces, mechanisms of tracing, features of detection, fixation and identification of electronic traces. Methodology. To achieve the purpose of the article, the scientific validity and objectivity of its results, a number of general and special methods were applied, including analysis, synthesis, explanation, comparison, deduction, induction, etc. The essence of the concept of material traces in the information and telecommunication system is investigated as a combination of the states of an ordered series of elementary media in the memory device of this system. It is suggested to define these traces as binary codes of information in a “pure form” not tied to a specific material medium. Emphasis is placed on the integral (combinatorial) nature of these traces, which gives them uniqueness. It is noted that the material trace in the elementary information carrier does not have individual forensic features. Scientific novelty. The concept of electronic trace as a reflection on the monitor of a computing device of a material trace in the information and telecommunication system is proposed. It is recommended to consider electronic display as a form of electronic trace detection. The opinion about the ideal nature of electronic traces is grounded. The misinterpretation of electronic traces as traces of virtual ones is proved. It is argued that the integral (combinatorial) nature of material traces in the information and telecommunication system gives grounds to consider them and their electronic traces as acquiring individual forensic features because of the uniqueness of binary codes and thus may be suitable for forensic identification. Features of detection and fixation of electronic traces are investigated. It is established that their detection and fixation is carried out by special methods through the use of general and special purpose software. Conclusions. Generally, material traces in the information and telecommunication system do not have individual forensic features. However, their integral (combinatorial) nature gives reason to claim that they and the electronic traces they create acquire these characteristics and may be suitable for forensic identification. The detection and fixation of electronic traces is carried out by special methods through the use of general and special purpose software. Existing problems with the detection and fixation of electronic traces need legislative regulation. Electronic displays have common and distinct identifying features. Identical electronic traces may have differences on individual grounds due to their dynamic nature