In the era of big data, information communication is becoming more frequent, and violations of discipline and crime often leave traces of electronic data. In the discipline inspection and supervision work, the status and role of electronic data in the investigation of violations of discipline and crimes have become increasingly prominent, and it is imperative to strengthen the use of electronic data for evidence collection. The Data Supervision Center of the Commission for Discipline Inspection of Saihan District, in accordance with the requirements of the Commission for Discipline Inspection at a higher level, closely follows the pace of information development and carries out electronic data forensics in four stages in accordance with the law.

1. the development of electronic evidence system

In the initial stage of electronic data forensics work, Saihan District Commission for Discipline Inspection Commission Data Center began to improve the electronic data forensics system. The first requirement of the system is to obtain evidence in accordance with the authorization and in accordance with the law. Fulfill the required relevant documents and procedures to legally and completely carry out evidence collection. The second is to formulate electronic data forensics standards and standardize forensics work. In order to meet the requirements of evidence collection standards, data center personnel actively participated in the training of evidence collection talents organized by the autonomous region and our city. One of them obtained the authoritative evidence collection qualification certification of Xiamen Meiyabaike Company, and the other obtained the certification of the procuratorate. In the forensics work, the leading cadres of the data center play a leading role. When each staff member conducts disciplinary review and investigation, he is not limited to confessions and documentary evidence, but strengthens the training of electronic data processing and analysis capabilities, and strives to improve the forensics work. Level, so that every forensics work can meet the standards of electronic forensics.

2. improve the forensics team and forensics equipment

The data center has established a professional electronic data forensics team and an electronic forensics room that meets the high standards of work needs. Among them, the professional team is divided into two gradients: basic popularization type and expert forensics type, so that personnel can match cases with different degrees of cases. In the construction of the electronic forensics room, the data center adheres to the requirements of clean office, develops and utilizes the electronic forensics equipment introduced five years ago, deeply excavates the functions of the existing equipment, and on this basis purchases the latest comprehensive forensics analysis and judgment equipment-forensics aircraft carrier. At present, the electronic forensics room has portable forensics equipment forensics magic cube, mobile phone forensics integrated machine, comprehensive analysis and judgment of forensics equipment forensics tower and forensics aircraft carrier, can meet any requirements of forensics.

3. the establishment of electronic data verification system

In the daily case investigation and trial, involving electronic data need to obtain evidence, data center forensics personnel will intervene in advance to cooperate with the work of project personnel. With the help of forensics equipment and technical means in the forensics room, we can collect professional and standardized and efficient media such as personal computers, tablets, mobile phones, watches, daily social networking, positioning, entertainment software, etc., deeply explore evidence resources and improve the quality of evidence. In addition, forensics personnel can also carry out cloud forensics and cloud simulation, in which cloud forensics means can obtain the involved personnel WeChat Alipay and other complete time chain of income and expenditure bills, which in the past have to go to the company to obtain.

The data center personnel will use the forensics aircraft carrier to conduct comprehensive research and judgment on the electronic data related to the case taken out by the forensics equipment, quickly find clues from a large amount of data, and determine disposal suggestions. And through the accurate analysis of the evidence carrier to find out the relationship between the person under review and the important personnel involved and the transaction records and other information, to ensure that the electronic data evidence from the initial extraction to the review, application, the whole chain is legal, standardized, true and complete, and the relevant scenes can be reproduced and traced back. After analyzing and judging the case data, the aircraft carrier will form an analysis report, which can be directly witnessed by the electronic material evidence appraisal institution to lock the evidence.

In the process of gradual exploration, the data monitoring center has built a verification system of electronic data and traditional evidence. investigators have integrated electronic data and traditional evidence to eliminate contradictions and enable evidence to "speak up".

4. to obtain electronic forensics work results

Since the beginning of the evidence collection work, the data center has used electronic evidence collection methods to obtain important clues in many cases through the retrieval, recovery and analysis of the electronic equipment data involved in the case handling process, successfully opened the case breakthrough, and quickly broke through many cases. In the whole year, more than 70 mobile phones of the persons involved were collected for evidence, and the number of mobile phone data read reached 800GB and 12.23 million. Through mobile phone portrait system analysis and comparison of 163 collisions, more than 6000 valuable clues and more than 20 suspected problems were cleared out after data analysis and judgment. Hard disk data was retrieved 6 times, hard disk data was restored 6 times, 80GB of hard disk data and more than 200000 pieces of database data were extracted.

By carrying out electronic forensics work, the data supervision center has solved the low efficiency of handling cases due to the large amount of data and slow manual analysis and judgment in the past. While improving the quality and efficiency of work, it has reduced economic and labor costs and played an important role in handling cases, which has been highly recognized by the leaders of the Commission and the Commission for Discipline Inspection at a higher level. The importance of electronic forensics has become increasingly prominent, and it has become a weapon for the Saihan District Commission for Discipline Inspection.