计算机取证是一门新兴学科,主要内容在于从海量的复杂数据当中,获取同案件存在联系的电子证据。本文简要介绍计算机取证的内容与步骤,并在此基础上重点论述数据挖掘技术的应用框架。 Computer forensics is a new discipline, the main content is that from the massive and complex data, access to electronic evidence of the existence of the case. This article briefly introduces the content and steps of computer forensics, and on this basis, focuses on the application framework of data mining technology.