TOPICAL ISSUES OF FORENSIC COMPUTER-TECHNICAL EXPERTISE OF 1C:ENTERPRISE INFORMATION DATABASES
Back to articles of current journal| PDF: |  |
Author(s): | Chubar S. A., Klimovich L. P., |
| Number of journal: | 1(74) | Date: | March 2026 |
| Annotation: | The purpose of this scientific article is to systematize the typical tasks of forensic computer-technical expertise (FCTE) of data arrays generated within various programs based on the 1C business process automation platform. This systematization is based on an analysis of judicial practice and existing scientific and methodological approaches. The relevance of the study is determined by the growing number of legal proceedings related to the financial and economic activities of organizations, where 1C information databases serve as a key source of evidence. The subject of the study is the specifics of FCTE applied to 1C configurations, considered in a dual aspect: as a set of typical expert tasks determined by the architectural and functional features of the platform, and as a system of methodological requirements for the investigation of digital traces in this environment. The methodological basis consists of general scientific methods (analysis, synthesis, formalization), as well as comparative legal and technical-forensic methods. The result of the study is a systematization of typical FCTE tasks for 1C information databases: establishing the presence (or absence) of backdated changes to the database, establishing the chronological sequence of operations, detecting the presence (or absence) of deleted or modified records, analyzing user access rights, assessing the integrity of the program code used for generating accounting entries within the program. Based on an analysis of judicial practice, examples of typical forensic algorithms (duplicate entries, unauthorized adjustments, signs of simulated economic activity) are provided, and the evidentiary value of the results of an FCTE investigation is assessed. The theoretical significance of the study lies in the proposed systematization of FCTE tasks for 1C databases, which forms a basis for subsequent developments in the field of methodological support for FCTE. The practical significance consists in the fact that the obtained results can be used as reference information for investigators when formulating questions for examination, and as methodological guidelines for forensic experts of the expert specialty “Computer information research” for selecting correct investigation algorithms for 1C information databases depending on the specific expert task. | ||
| Keywords: | forensic computer-technical expertise / FCTE, 1C:Enterprise, analysis of 1C configurations, digital forensics, evidentiary value of expert conclusions, classification of FCTE, objects of FCTE expert examination, methods of forensic expert examination, directions for improving the practice of appointing and conducting FCTE |
||
| For citation: | Klimovich L. P., Chubar S. A. Topical issues of forensic computer-technical expertise of 1C:Enterprise information databases. Biznes. Obrazovanie. Pravo = Business. Education. Law. 2026;1(74):183—192. DOI: 10.25683/VOLBI.2026.74.1527. |
||