A method and system for materialization of electronic forensics equipment

Abstract

The invention relates to a method and system for the materialization of electronic forensics equipment. The system includes a client, a main control module and a plurality of forensics equipment; the forensics equipment is provided with a node module, and the node module collects forensic equipment information and forensics software list information and uploads it to The main control module is registered; the case is created through the client, and after selecting the forensics software, the docking instruction is sent to the main control module; the main control module sends the forensic instruction to the corresponding node module; the node module generates the unique identifier of the case according to the forensic instruction, and Forensics are collected, and the generated forensic result information is sent to the node module and forwarded to the main control module; the main control module associates the case with the case according to the unique identifier of the case in the forensic result information. The present invention can integrate the cases of all forensic equipment, all cases are initiated from the main control module, and then the case information is pushed to the forensic equipment until the forensic results of each forensic equipment are collected, forming a closed loop of case creation-forensics-collection-archiving.

Description

technical field [0001] The invention relates to the technical field of forensics, and in particular to a method and system for the materialization of electronic forensics equipment. Background technique [0002] With the continuous development of computer and network technology in my country, computers and networks have gradually become an indispensable part of people's lives. At the same time, cases involving computers, mobile phones, and network-related cases are also gradually increasing. In the face of more and more electronic data forensic identification cases, there will be more and more forensic needs and types. At present, most of the forensics processes do not have a unified standard. Each forensic software is basically a single-handed operation. Some forensic equipment will be highly customized, and it will take a large development cost to connect with a professional case management system. This also leads to an increase in the complexity of forensic equipment man...

AI Technical Summary

Problems solved by technology

It is not only necessary to establish a communication mechanism with the case management system, but also to manage the network connection, and the network connection must be ensured, and offline operations cannot be performed

Images