数据恢复技术在计算机取证中的应用

The technology of data restores in the computer forensics collection application

计算机取证中的数据恢复与常规数据恢复虽然利用了相同的原理,但是有其自身的一些特点要求及技术实现方法。通过对存储结构到取证技术实现方法分析,以期为我国司法界今后的计算机取证在技术、规程、方法等方面的发展提供理论支持。

In computer forensics＇ s data recovery and convention data recovery, it has used the same principle, but it has its own some characteristic request and the technology realizes the method. Through the saved-structure to realize the method analysis to the evidence collection technology, take the time as our country judicial world present s computer evidence collection in aspect and so on technology, regulations, method development will provide the theory support.