This article is dedicated to definition of the term virtual traces in forensics. The author determined the peculiarities of virtual traces, which allowed giving definition to the traces on digital data storage devices. It is noted, the forensic science does not have a universal terminology for definition of traces left as a result of cybercrimes. Solution of this problem remains extremely important, as it would assist the advancement of the theory and practice of forensics in the indicated field. The author analyzed the case law for the purpose of determining peculiarities of utilization of terminology to describe traces detected in the course of studying digital data storage devices. The conclusion is made that most common and suitable term is “virtual traces”. The definition of the concept in questions was proposed leaning on the analysis of peculiarities of virtual traces and mechanism of their emergence on digital data storage devices. Thus, virtual trace is determined as varied in structure, special type of material traces that exists within the limits of digital data storage device and directly tied with it, as well as can be decoded only using special software and technical means.
Traces on digital data storage devices: definition of the concept