Abstract:

The information technology is developing quickly, and the complexity and comprehensiveness of computer forensics is becoming more and more prominent. Based on an economic dispute case, this paper presents the whole process of examining a commercial computer system of an involved company. The main techniques introduced include commercial management software analysis, RAID reconstruction and database analysis. This is a typical case in this kind of forensic work.

Key words: electronic evidence, computer forensics, RAID, database

摘要：

随着信息技术的快速发展和普及，电子证据司法鉴定工作的综合性和复杂性特征日益突出。本文以一起经济纠 纷案为例，综合论述了某公司商用计算机系统的检验鉴定过程，文中涉及的主要技术包括商用管理软件分析、硬盘阵列 重组、数据库检验等，在这类案件司法鉴定工作中具有一定的代表性。

关键词: 电子证据, 计算机司法鉴定, 硬盘阵列, 数据库