【摘要】 简要介绍QQ取证及其司法鉴定研究的发展现状。分析QQ消息传输协议、数据库文件结构、Msg2.0.db文件的加密机制,重点研究QQ聊天记录及其他证据信息获取的思路和方法。在结合QQ取证鉴定案例的基础上,提出将手机与QQ进行融合取证的新思路,并对QQ取证及其司法鉴定的发展方向进行展望。更多还原

【Abstract】 This paper introduces the research status of digital evidence investigation in QQ software,and analyzes the QQ message transmission protocol,database file structure,and the encryption mechanism of Msg2.0.db files.The study focuses on the acquisition methods of QQ chat records and other evidence,and proposes a new thought that involves evidence acquiring from the combination sources of QQ and mobile phones.The outlook of digital evidence investigation in QQ and its forensic identification are given.更多还原