摘要
由于数字证据的特殊性,在基于LINUX系统的计算机取证的过程中,如何收集证据,何时收集何证据也变得很重要了。本文所探讨的就是如何按照易失性顺序在LINUX系统中收集证据。
As the specific characteristic of the electronic evidences, it＇ s getting more and more important that when and how to collect the evidence to a computer on LINUX system. It is focused on how to collect the evidences with the order of their volatility in a LINUX computer in this article.
出处
《科技广场》
2005年第10期76-78,共3页
Science Mosaic
