一种基于键盘事件计算机取证过程模型的实现  

Implementation of one Keyboard-Event-Based Computer Forensics Process Modle

作　　者：刘文俭[1] 

机构地区：[1]四川警察学院计算机科学与技术系,四川泸州646000

出　　处：《科技创新导报》2014年第17期37-37,共1页Science and Technology Innovation Herald

摘　　要：该文简述了计算机取证技术及反取证技术对计算机取证结果的影响,结合动态、静态取证技术及常规证据提取技术,利用修改后的法律执行过程模型画出了基于键盘事件提取的取证过程流程图并将其实现。In the paper, simple introduction of Computer Forensics and influences of Computer Anti-forensics are made,And then, A Keyboard-Event-Based forensic process flow chart according to the revised law enforcement process model combining with dynamic and static forensic technology and conventional evidence extraction technology has been drawn out.

关 键 词：计算机取证 计算机反取证 常用取证模型 取证流程图 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]