2 results about "Computer forensics" patented technology

This invention relates to the field of computer forensics and information security technology, specifically to an automated intelligent forensics system based on cloud-edge collaboration and multi-channel control. It includes: a video signal acquisition and processing module: capturing screen images of the target machine, preprocessing them, and then uploading them; an HID simulation control module: simulating the forensics terminal as an input device, receiving operation commands from the cloud and injecting control signals into the target machine; a network communication module: establishing a connection with the target machine for data transmission and command execution, and communicating with the cloud; a cloud-based large-scale model scheduling module: calling a cloud-based large-scale language model to analyze screen images and generate simulated operation commands or plan forensics tasks; a task planning and execution module: decomposing forensics requirements into a sequence of task steps and calling the corresponding modules to execute forensics operations according to the control channels; a data storage and management module: storing and managing forensic data; and a report generation module: generating formatted reports. This technical solution can improve the efficiency and accuracy of electronic data forensics.

The invention discloses an evidence obtaining rule determination method and device, electronic equipment and a storage medium. The evidence obtaining rule determination method comprises the steps of obtaining attack behavior data of at least one attack scene; processing the attack behavior data by using a forensic analysis model to generate a forensic rule set corresponding to each attack scene in the at least one attack scene; the invention further discloses a model training method and device. The model training method comprises the steps that the knowledge base in the field of computer forensics is acquired; training an initial forensic analysis model by using the knowledge base to obtain a forensic analysis model; the forensic analysis model is used for processing attack behavior data of at least one attack scene to generate a forensic rule set corresponding to each attack scene in the at least one attack scene.