关键词: 电子取证, 取证知识, 知识汇聚, 取证知识库, 知识共享

Abstract: E-forensics knowledge is reflected by performer wisdom during forensic performance, while it is always disappeared in individual case on actual performance. By making forensics knowledge standard, upgrading forensics software, remodeling forensics equipment, converging and processing forensics knowledge, these method can produce various forensics knowledge bases and share with performers by network mechanism. It will change the original state that forensics ability is completely relied on personal ability, promote the integration of personal ability and collective wisdom. Meanwhile, the mechanism will build up forensics knowledge ecology, promote positive cycle of forensics technology and bring qualitative leap for forensics performance.

Key words: E-forensics, forensics knowledge, knowledge converging, forensics knowledge base, knowledge sharing