取证与反取证

计算机取证就是运用软件技术和工具，照预定的步骤检查计算机系统和相关外部设备，保护、提取和分析计算机犯罪的痕迹，并产生具有法律效力的电子证据的过程。

反取证就是删除或者隐藏证据使取证调查无效。

-Forensics and anti-forensics

Computer Forensics is the use of software technology and tools, according to the predetermined steps to check the computer system and related peripheral equipment, protection, retrieval and analysis of traces of computer crime, and produce legally binding electronic evidence process.

Anti-forensics is to remove or hide the evidence of the forensic investigation is invalid.