摘要
概述了电子证据在Windows系统下的时间框架及其文件的时间属性；分析了电子数据司法鉴定中windows系统下的两种鉴定类型及其常见鉴定技术和方法；介绍了时间属性在鉴定中的具体应用案例；最后总结概述了时间鉴定的难点。
The article gave a overview of the time frame and stamp of files on electronic evidence in Windows; analyzed two types of judicial identification, common techniques and methods of forensics on electronic data in Windows; introduced the case with time stamp in judicial identification; and finally summarized the difficulties of the forensics on the time in cases.
出处
《计算机科学》
CSCD
北大核心
2015年第B10期105-109,共5页
Computer Science
关键词
电子数据鉴定
时间属性
UTC时间
Electronic data identification,Time attribute,UTC time
