The Use of Register Data of the Windows Operating System to Establish Cyber Crime Circumstances

The article considers the system registry of Windows operating system as a source of forensically signifi cant information about the circumstances of committing a computer crime. On the example of the connection of forensic technique and tactics the variants of using such knowledge in the process of investigation are considered. Examples of information that can be obtained from the system registry, technical and tactical means used to obtain them are given. The expediency of using information from the system registry to overcome potential resistance to the investigator in the course of verbal investigative actions is pointed out. The model of the tactical operation structure in which such information is used is described.