基于手机QQ日志的人员行为轨迹刻画  

Depicting Personnel Behavioral Track Based on QQ Logs

作　　者：赵露 康艳荣 郭丽莉 龙源 王博 张倩 鲍梦湖 张耀国 ZHAO Lu;KANG Yanrong;GUO Lili;LONG Yuan;WANG Bo;ZHANG Qian;BAO Menghu;ZHANG Yaoguo(Institute of Forensic Science,Ministry of Public Security(MPS)&MPS’Key Laboratory of Trace Science and Technology,Beijing 100038,China)

机构地区：[1]公安部鉴定中心,痕迹科学与技术公安部重点实验室,北京100038

出　　处：《刑事技术》2022年第6期579-586,共8页Forensic Science and Technology

基　　金：公安部技术研究计划(2021JSYJC11、2021JSM02);中央级公益性科研院所基本科研业务费专项资金项目(2020JB019、2021JB018、2022JB031)。

摘　　要：手机作为当今人手必备的电子产品,在给人们工作生活带来很多便利的同时也记录了大量数据信息,对嫌疑人手机内数据信息的分析利用正是电子物证检验的一项主要工作。目前对手机数据的分析主要基于手机中的通联记录、照片录像等可以直观查看的数据,而对各类手机应用生成的日志文件的分析在实际案件应用中鲜有尝试。本文通过一个案例介绍了应用日志分析的基本方法和思路,该案中检验人员通过对嫌疑人手机QQ应用记录的日志进行深入分析,提取到手机联网时间、网络环境切换信息、主动操作记录等信息,还原了其案发时间行为轨迹,为推断其作案嫌疑程度提供了重要依据,为案件的进一步侦办提供了有力线索。Mobile phones,as the necessary electronic products for almost all hands today,not only bring a lot of convenience to people’s work and life but also record a good deal of data information.Digital forensics commonly relate to analysis and utilization of the information stored in suspects’mobile phones.At present,the analysis of mobile-phone-stored data is mainly targeting to those that can be checked directly,including contact records,photos and videos,yet rare to the log fi les generated from various mobile phone applications in actual cases.This paper relates about a case dealing with the basic method and approach being applied into log analysis.Through in-depth parsing into the suspect’s mobile-phone-stored QQ app logs,the investigators extracted the internet connecting time,contextual network-switching information,active operation records and other useful information,having revived the suspect’s behavioral track during the crime occurring,thus providing an important reference for inferring the probability about the suspect’s committing crime and a clue for further investigation of the case.

关 键 词：电子物证 日志分析 轨迹分析 数据提取 数据解析 

分 类 号：DF793.2[政治法律—诉讼法学]