Behavioural Forensics In Cybercrime Investigation: A Doctrinal Study Of The Psychology Of Cyber Criminals
Vasundhara V K, BBA, LLM (Business Law), Tamilnadu Dr. Ambedkar Law University, Chennai
Kaviya R, B.A, LLM (Cyber Law), Advocate, Madras High Court.
ABSTRACT
Cybercrime has become a global concern, with perpetrators crossing borders with ease and hiding behind anonymity. Investigations typically focus on technical artifacts such as logs, metadata, and device images, but these materials rarely explain why an offense was committed or help establish the mental element required for criminal liability. International measures, such as the Budapest Convention on Cybercrime (2001), have mostly focused on technological cooperation and the exchange of digital evidence. However, technological proof typically points to a device or account rather than the individual who created it. Behavioral forensics, which investigates an offender's motivations, routines, and patterns of behavior, is gaining popularity around the world as a supplement to digital investigation. The main contention is that behavioral analysis is an essential addition to technical forensics. Targeting decisions, weapon selection, timing, communication patterns, and operational security routines all reveal the motivations of offenders, including money, ideology, retaliation, and thrill-seeking, as well as characteristics like lack of self-control, narcissism. When properly analyzed, these traces can help identify insider threats, prove intent and mens rea, and support attribution. The methodology used in the study is doctrinal. The Information Technology Act of 2000, the Bharatiya Nyaya Sanhita of 2023, the Bharatiya Sakshya Adhiniyam of 2023, pertinent court rulings, and international agreements like the Budapest Convention on Cybercrime are among the key materials that are critically analyzed as primary sources. Scholarly works in criminology, forensic psychology, and digital forensics specifically, Routine Activity Theory, Social Learning Theory, and Neutralization Theory are examples of secondary sources. Although useful as an investigative tool, the study argues that behavioral analysis lacks explicit statutory acknowledgment and a clear admissibility criterion in court of law. It comes to the conclusion that a fair and efficient cybercrime investigation requires a balanced framework that protects constitutional rights while allowing the organized use of behavioral evidence in cyber forensics.
Keywords: Behavioral forensics, digital forensics, forensic psychology, digital investigation, digital evidence.
