Forensic tools

摘要

Computer security is generally focused on preventing intruders from misusing or subverting your systems. But it is just as important to prevent the misuse of systems by those on the inside. The earliest known computer crimes were committed on mainframe systems, but there were no direct legal precedents available at the time, so it was very difficult to use evidence taken from the IT systems to prosecute criminals.