With the constant development of the information technology, The new types of crimes by taking the computer information system as the object and tools are increasing. It's getting more harmful. How to get the evidence of computer criminals become a new task of the law and computer science area. Computer forensic, as a area of computer science and law, becomes a focus of attention.Computer forensics is the technology field that attempts to prove thorough, efficient, and secure means to investigate computer crime. Computer evidence must be authentic, accurate, complete and convincing to juries. In this paper, the stages of computer forensics and the forensics tools are presented, and the theories and the realization of the forensics software are described. Two examples about forensic practice are also given. The deficiency of computer forensics technique and anti-forensics are also discussed. The result comes out that it is as the improvement of computer science technology, the forensics technique will become more integrated and thorough. |