单机联网环境下计算机现场勘查要点及流程

Studies on Main Points and Procedures of Crime Scene Investigation based on Single Computer Networking Environment

2016年两高一部制定了《关于办理刑事案件收集提取和审查判断电子数据若干问题的规定》以来,公安机关在办理各类案件中越来越多地遇到对现场计算机进行电子数据勘查和提取工作。由于电子数据具有易失性、易变性,极其容易被破坏,对计算机现场勘查一直是侦查工作的一个重要环节。本文结合新规定,研究了新形势下单机联网环境下的现场勘查要点及工作流程,以及封存证物、制作笔录、现场线索提取与分析要点,以便基层干警更好地完成计算机现场勘查工作。

Since the formulation of the regulations on collecting, extracting and examining and judging several problems of Electronic data by the Ministry of higher Education and the first High School in 2016, in dealing with various cases, public security organs are increasingly confronted with the work of electronic data exploration and extraction on site computers. Because electronic data is volatile and fragile, and it is extremely easy to be destroyed, on-site computer surveys have always been an important part of the investigation. Based on the new regulations, this article has studied the key points and work flow of site reconnaissance in the context of single-computer networking under the new situation, as well as the points for sealing evidence, making transcripts, extracting and analyzing the on-site clues, so that grassroots officers can better complete computer site survey work.