Review of log analytic technology in computer forensics
Yan Lei Jiang · Electronic Design Engineering · 2013
The log refers to some operations of certain objects and their operating results,according to the time order.Each log file consists of log records which describe every single systematic event.It is valuable to find out how to search for effective computer evidence by making full use of logs in the computer forensics field.This paper analyzes the important role of log files and log analysis in computer forensics,and reviews the basic and correlating analytic methods for log analysis,and points out the directions for log analysis development.