This invention relates to the field of
computer forensics and
information security technology, specifically to an automated intelligent forensics
system based on cloud-edge
collaboration and multi-channel control. It includes: a video
signal acquisition and
processing module: capturing screen images of the target
machine, preprocessing them, and then uploading them; an HID
simulation control module: simulating the forensics terminal as an
input device, receiving operation commands from the cloud and injecting control signals into the target
machine; a
network communication module: establishing a connection with the target
machine for
data transmission and command execution, and communicating with the cloud; a cloud-based large-
scale model scheduling module: calling a cloud-based large-scale
language model to analyze screen images and generate simulated operation commands or plan forensics tasks; a task planning and execution module: decomposing forensics requirements into a sequence of task steps and calling the corresponding modules to execute forensics operations according to the control channels; a data storage and management module: storing and managing forensic data; and a
report generation module: generating formatted reports. This technical solution can improve the efficiency and accuracy of
electronic data forensics.