PROBLEM TO BE SOLVED: To efficiently and surely implement computer forensic.;SOLUTION: Virtual disks generated based on the disk of each computer to be investigated are installed for each purpose in a virtual disk image storage part 101, and a file content investigation part 103 and a behavior investigation part 105 investigate the virtual disk corresponding to each purpose.;COPYRIGHT: (C)2008,JPO&INPIT
展开▼