This article presents a comprehensive study of the theoretical and methodological foundations of digital forensics, modern tools and technologies applied in investigative practice, and the established procedures for collecting, analysing, and preserving digital evidence. The relevance of the research is determined by the rapid advancement of information and communication technologies, which has been accompanied by a significant increase in digital crime, and by the demonstrable inadequacy of traditional forensic methods in addressing these emerging challenges effectively. The research draws on statistical data concerning digital crimes in the Republic of Kazakhstan for the period 2018–2023, foreign academic literature and judicial practice, as well as internationally recognised standards including ISO/IEC 27037, ACPO guidelines, and NIST SP 800-86. The methodology integrates theoretical analysis, a comparative legal approach, systems thinking, and quantitative statistical data processing. The article provides a detailed examination of the legal status of digital evidence, the chain-of-custody principle, the classification of hardware and software forensic systems, and current challenges encountered in forensic examination practice within the field of digital investigation. The findings demonstrate that the systematic application of digital forensics methodologies reduces average investigation timelines by 65.8% and raises the crime-solving rate to 89%. These indicators confirm the tangible legal and economic benefits associated with reforming and modernising this domain. The scientific contribution of the article lies in proposing a comprehensive methodological model tailored to domestic forensic practice, integrating standardised procedures with contemporary software and hardware solutions. The practical value of the results is relevant to investigative authorities, forensic examination institutions, and law faculties for both educational and applied purposes. The conclusions also contribute to the ongoing development and improvement of legislation in the Republic of Kazakhstan governing the field of digital forensics.

BISEMBIEV T.SH.

Master of law, senior lecturer, K. Zhubanov Aktobe regional university, Aktobe, Kazakhstan

E-mail: tbissembiev@zhubanov.edu.kz, https://orcid.org/0000-0001-9525-0587

BEKBAUOVA A.A.

Master of law, senior lecturer, K. Zhubanov Aktobe regional university, Aktobe, Kazakhstan

E-mail: bekbauova@mail.ru, https://orcid.org/0009-0007-1169-588X

MURSALOVA L.A.

Master of law, senior lecturer, K. Zhubanov Aktobe regional university, Aktobe, Kazakhstan

E-mail: Lazzat_mursalova@mail.ru, https://orcid.org/0009-0000-2767-4337

1. Europol Internet Organised Crime Threat Assessment (IOCTA). – Luxembourg: Publications Office of the European Union, 2023. 84 p.
2. Қазақстан Республикасы Бас прокуратурасының 2023 жылғы жылдық есебі. Астана, 2024. 112 б.
3. Исабекова Д.А. Қылмыстық процестегі электрондық дәлелдемелердің процессуалдық мәртебесі. Заң және заман. 2022. № 3. 45–52-б.
4. Nelson B., Phillips A., Steuart C. Guide to Computer Forensics and Investigations. 6th ed. Cengage Learning, 2019. 752 p.
5. Kent K., Chevalier S., Grance T., Dang H. Guide to Integrating Forensic Techniques into Incident Response. NIST SP 800-86. NIST, 2006. 121 p. DOI: https://doi.org/10.6028/NIST.SP.800-86
6. ISO/IEC 27037:2012. Information technology – Security techniques – Guidelines for identification, collection, acquisition, and preservation of digital evidence. Geneva: ISO, 2012.
7. Россинская Е.Р., Галяшина Е.И. Настольная книга судьи: судебная экспертиза. М.: Проспект, 2021. 464 с.
8. Толеубекова Б.Х. Компьютерлік криминалистика: теория мен практика. Алматы: Жеті жарғы, 2020. 298 б.
9. Дуйсенов Ж.К. Цифрлық дәлелдемелер: заңдық мәртебесі мен сараптамалық зерттеу. Вестник КазНУ. Серия юридическая. 2021. № 2. 78–85 б.
10. Zawoad S., Hasan R. Cloud Forensics: A Meta-Study of Challenges, Approaches, and Open Problems. arXiv:1302.6312. 2013. URL: https://arxiv.org/abs/1302.6312.
11. Kebande V.R., Ray I. A Generic Digital Forensic Investigation Framework for Internet of Things (IoT). IEEE Access. 2016. Vol. 4. P. 2053–2067. DOI: https://doi.org/10.1109/FiCloud.2016.57
12. Casey E. Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet. 3rd ed. Academic Press, 2011. 840 p.
13. Cisco Annual Internet Report 2018–2023. White Paper. Cisco Systems Inc., 2020.
14. McKinsey Global Institute. The Economic Potential of Generative AI. McKinsey, 2023. 68 p.
15. NIST SP 800-86. Guide to Integrating Forensic Techniques into Incident Response. National Institute of Standards and Technology, 2006.
16. ACPO (Association of Chief Police Officers). Good Practice Guide for Computer-Based Electronic Evidence. v.5. ACPO, 2012.
17. Kent K., Somasundaram M. An Integrated Digital Investigation Process (IDIP). Digital Investigation. 2006. Vol. 3. P. 102–112. DOI: https://doi.org/10.1016/j.diin.2006.08.003

digital forensics, electronic evidence, network forensics, disk analysis, cloud storage, blockchain, cyber traces, methodology