Method for analyzing timeline aiming at computer files

Method for analyzing timeline aiming at computer files

  • CN 102,289,485 A
  • Filed: 08/04/2011
  • Published: 12/21/2011
  • Est. Priority Date: 08/04/2011
  • Status: Active Application
First Claim
Patent Images

1. a method of carrying out the timeline analysis at computer documents and record data is characterized in that described method comprises the steps:

  • 1) obtains corresponding file logging data by resolving concrete file system;

    2) determine the concrete form of every kind of record type place file, parse this record, obtain the relevant temporal information of file;

    3) resolve the registration table record, obtain the temporal information of registry entry;

    4) resolve mail data, obtain mail transmitting time, server time of reception, be saved in local time information;

    5) resolve the internet log record, obtain the access time information of internet log;

    6) resolve the instant messaging log record, obtain the temporal information of instant messaging record;

    7) parse operation system and use daily record data obtains the temporal information of daily record;

    8) the download items record of all kinds of downloaded software of parsing obtains download items creation-time, receiving time information;

    9) with the pointer of above-mentioned record, it is right to form data together with the time type, joins in the tabulation, sorts by time value;

    10) the right quantity of data in the calculations list, and record is shown in the interface;

View all claims

    Thank you for your feedback