Special trace evidence obtaining recovery equipment for Linux/Unix system

Abstract

The invention relates to special trace evidence obtaining recovery equipment for a Linux / Unix system. The special trace evidence obtaining recovery equipment comprises a cubic hollow case, wherein the upper surface of the case is fixedly provided with a touch screen, a central control system is fixedly arranged in an inner cavity of the case, the central control system is connected with an input interface, an output interface and a power supply interface through conducting wires, the input interface and the output interface are fixedly arranged at the side surface of the case, and the power supply interface is arranged at the side surface of the case. The special trace evidence obtaining recovery equipment has the advantages that a product is deployed in network environment requiring batch checking and evidence obtaining, an evidence obtaining client program is generated according to network configuration and checking and evidence obtaining rules, after the evidence obtaining client program operates in a computer to be checked, the automatic on-line operation can be realized for carrying out checking and evidence obtaining work, after the checking is completed, the evidence obtaining client program can be closed, the original network topological environment is not influenced, the normal use of the computer to be checked is not influenced, the problem that a USB (universal serial bus) interface cannot be used in the practical environment is solved, in addition, a portable handle is also adopted, the carrying is convenient, and the special trace evidence obtaining recovery equipment is applicable to different work scenes such as occasion-require fast trace obtaining, safety checking, field investigation evidence obtaining and laboratory evidence obtaining analysis.

Description

Technical field: [0001] The invention relates to electronic equipment, in particular to a trace evidence recovery equipment dedicated to Linux / Unix systems. Background technique: [0002] UNIX is the oldest general-purpose operating system. In 1969, K.Thompson and D.M.Ritchie of Bell Laboratories in the United States developed UNIX on the basis of the smaller and simpler time-sharing operating system MULTICS, which was implemented on DEC's PDP-7 minicomputer. In 1970 officially put into operation. For several years thereafter, UNIX remained an operating system limited to use within AT&T. In 1971, the V1 version written in PDP-11 / 20 assembly language was developed, including the most basic file system and some simple software, and then experienced some improvements. [0003] Simply put, Linux is a free-to-use and freely disseminated Unix-like operating system, which is mainly used on computers based on Intel x86 series CPUs. This system was designed and implemented by tho...

AI Technical Summary

Problems solved by technology

[0007] Most of today's system trace recovery or forensics equipment is aimed at hard disk or storage devices to copy and repair fragments. However, when such devices are connected to service terminals with operating systems, they cannot be perfectly integrated with the operating systems in the corresponding devices. Docking, resulting in slow transmission of data, and even data loss, which cannot truly reflect the effect of program recovery

Images