CN112445773B - Method and device for generating decompression log of compressed file and readable storage medium - Google Patents
Method and device for generating decompression log of compressed file and readable storage medium Download PDFInfo
- Publication number
- CN112445773B CN112445773B CN202110132707.8A CN202110132707A CN112445773B CN 112445773 B CN112445773 B CN 112445773B CN 202110132707 A CN202110132707 A CN 202110132707A CN 112445773 B CN112445773 B CN 112445773B
- Authority
- CN
- China
- Prior art keywords
- log
- file
- decompression
- compressed
- recording
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/10—File systems; File servers
- G06F16/17—Details of further file system functions
- G06F16/174—Redundancy elimination performed by the file system
- G06F16/1744—Redundancy elimination performed by the file system using compression, e.g. sparse files
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/34—Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation ; Recording or statistical evaluation of user activity, e.g. usability assessment
- G06F11/3466—Performance evaluation by tracing or monitoring
- G06F11/3476—Data logging
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Quality & Reliability (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Debugging And Monitoring (AREA)
Abstract
The invention discloses a method and a device for generating a decompression log of a compressed file and a readable storage medium, wherein the method comprises the steps of filtering an acquired file log to obtain a related log of the compressed file; and determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule to obtain a decompression log of the compressed file. The embodiment of the invention filters the acquired file log to obtain the associated log of the compressed file; and determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule, so that log information of the compressed file in the decompression process can be obtained, and the decompression behavior of the compressed file can be tracked.
Description
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method and an apparatus for generating a decompression log of a compressed file, and a readable storage medium.
Background
With the advent of the big data era, a large number of network devices and security devices are added in the fields of internet, finance, communication and the like, the devices generate massive log data every day, and related departments need to store the log data in real time for service analysis such as audit or security problem traceability and the like.
In the existing scheme, a circulation path of a file cannot be acquired in the process of decompressing the file, so that the track of the file cannot be accurately positioned, private data can be lost and cannot be verified, and a lot of potential safety hazards are brought to user data.
Disclosure of Invention
The embodiment of the invention provides a method and a device for generating a decompression log of a compressed file and a readable storage medium, which are used for generating the decompression log according to the decompression process of the compressed file and realizing the tracking of data flow in the decompression process.
The embodiment of the invention provides a method for generating a decompression log of a compressed file, which comprises the following steps:
filtering the acquired file log to obtain a related log of the compressed file;
and determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule to obtain a decompression log of the compressed file.
In an embodiment, before filtering the obtained file log, the method for generating a decompression log of a compressed file further includes:
acquiring the file log according to a file operation request sent by a process and the exit operation of the process;
the file log comprises an operation log and a process exit log;
the file operation request at least comprises one of the following: file creation requests, file read requests, and file write requests.
In an embodiment, the filtering the obtained file log to obtain an associated log of the compressed file includes:
detecting a file suffix of a file read by a file read log under the condition that the operation log is determined to contain the file read log;
when the file suffix is determined to be a specified compressed suffix, recording the file read log;
the specified compression suffix comprises the following compression format: zip, rar, 7z, cab, and tar.
In an embodiment, the determining, according to the association log, an operation behavior performed on the compressed file, and recording the operation behavior according to a preset rule includes:
comparing the file creation log with a first log parameter of the file read log under the condition that the operation log is determined to contain the file creation log, and obtaining a first comparison result;
under the condition that the first comparison result is consistent, performing association recording on the file creation log and the file reading log;
wherein the first log parameter comprises at least one of: process ID and thread ID.
In an embodiment, the determining, according to the association log, an operation behavior performed on the compressed file, and recording the operation behavior according to a preset rule further includes:
under the condition that the operation log is determined to contain a file writing log, comparing the file writing log with a second log parameter of the file creating log to obtain a second comparison result;
under the condition that the second comparison result is consistent, performing association recording on the file writing log and the file creating log;
wherein the second log parameter comprises at least one of: process ID, thread ID, and file name.
In an embodiment, the determining, according to the association log, an operation behavior executed on the file, and recording the operation behavior according to a preset rule further includes:
comparing whether the process ID in the process exit log is the same as the process ID in the file creation log;
and under the condition that the comparison results are the same, generating a decompression log according to a preset file compression rule.
In an embodiment, the generating a decompression log according to a preset file compression rule includes:
and under the condition that the operation log contains a file write log corresponding to the current process exit log, matching the file write log and the corresponding associated record result according to a preset algorithm to obtain a decompression log.
In an embodiment, after obtaining the decompression log of the compressed file, the method for generating the decompression log of the compressed file further includes: and clearing all log records under the current process.
An embodiment of the present invention further provides a file log generating device, including:
the file filtering module is used for filtering the acquired file log to obtain a related log of the compressed file;
and the data processing module is used for determining the operation behavior executed on the compressed file according to the associated log and recording the operation behavior according to a preset rule so as to obtain a decompression log of the compressed file.
An embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements the steps of the foregoing method for generating a decompression log of a compressed file.
The embodiment of the invention filters the acquired file log to obtain the associated log of the compressed file; and determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule, so that log information of the compressed file in the decompression process can be obtained, and the decompression behavior of the compressed file can be tracked.
The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.
Drawings
Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:
FIG. 1 is a basic flow diagram of an embodiment of the present invention;
FIG. 2 is a general flow chart of an embodiment of the present invention;
FIG. 3 is a schematic structural diagram of an apparatus according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
A first embodiment of the present invention provides a method for generating a decompression log of a compressed file, as shown in fig. 1, including the following specific steps:
s101, filtering the acquired file log to obtain a related log of the compressed file;
s102, determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule to obtain a decompression log of the compressed file.
In the embodiment, the obtained file logs of various files are filtered, so that the associated logs of the compressed files are obtained. In this embodiment, the file logs of various files can be obtained by using the file operation executed by the process and the process actions such as process exit, and the file logs of various files are screened, so as to obtain the associated logs of the required compressed files. And then determining the operation behavior of the compressed file executed by the process according to the associated log, and recording according to the operation behavior executed by the process, thereby obtaining the executed log information which may exist in the circulation process of the compressed file and realizing the tracking of the circulation behavior of the compressed file.
In an embodiment, before filtering the obtained file log, the method for generating a decompression log of a compressed file further includes:
acquiring the file log according to a file operation request sent by a process and the exit operation of the process;
the file log comprises an operation log and a process exit log;
the file operation request at least comprises one of the following: file creation requests, file read requests, and file write requests.
In this embodiment, before filtering the obtained file logs, file logs of various files are further obtained. For example, the file filtering driver may obtain a file creating request, a file reading request, and a file writing request sent by the process, generate an operation log according to the file operation request of the process, and register a callback function in the file filtering driver to monitor the process exit operation, thereby obtaining the process exit log, and thus obtaining a complete file log, that is, the file log includes an operation log and a process exit log.
In an embodiment, the filtering the obtained file log to obtain an associated log of the compressed file includes:
detecting a file suffix of a file read by a file read log under the condition that the operation log is determined to contain the file read log;
when the file suffix is determined to be a specified compressed suffix, recording the file read log;
the specified compression suffix comprises the following compression format: zip, rar, 7z, cab, and tar.
In this embodiment, the file log is filtered to screen out the associated log of the compressed file. For example, in a case where it is determined that the operation log includes a file read log, a file suffix of a file read by the file read log may be detected, and when it is determined that the file suffix is a specified compressed suffix, the file read log may be recorded. The file suffix referred to in this embodiment is a compressed package file suffix, and the compressed format may be zip, rar, 7z, cab, and tar, or may be other compressed formats, which is not limited herein. Of course, if the file suffix of the file read by the file read log is detected in the case where it is determined that the operation log contains the file read log, as shown in fig. 2, if the detected file suffix is not the specified compressed suffix, no processing is performed.
In an embodiment, the determining, according to the association log, an operation behavior performed on the compressed file, and recording the operation behavior according to a preset rule includes:
comparing the file creation log with a first log parameter of the file read log under the condition that the operation log is determined to contain the file creation log, and obtaining a first comparison result;
under the condition that the first comparison result is consistent, performing association recording on the file creation log and the file reading log;
wherein the first log parameter comprises at least one of: process ID and thread ID.
In this embodiment, under the condition that it is determined that the compressed file includes the file read log, in this embodiment, it is further determined whether the operation log includes the file creation log, and if the operation log includes the file creation log, the operation log is compared with the recorded file read log of the compressed file. And recording the log if the process ID and the thread ID of the file creation log are the same as the process ID and the thread ID of the recorded file read log of the compressed file. For example, a file read log of a compressed file may be stored in association with a corresponding file creation log. If the file read log recorded by the same process ID and thread ID does not exist, the processing is not carried out.
In an embodiment, the determining, according to the association log, an operation behavior performed on the compressed file, and recording the operation behavior according to a preset rule further includes:
under the condition that the operation log is determined to contain a file writing log, comparing the file writing log with a second log parameter of the file creating log to obtain a second comparison result;
under the condition that the second comparison result is consistent, performing association recording on the file writing log and the file creating log;
wherein the second log parameter comprises at least one of: process ID, thread ID, and file name.
In this embodiment, in the case that it is determined that the file creation log includes a compressed file, in this embodiment, it is further determined whether the operation log includes a file write log, and in the case that it is determined that the operation log includes a file write log, the file write log is compared with a second log parameter of the file creation log, so as to obtain a second comparison result. The specific file write log records a process ID for performing a write operation, a thread ID, and a file name for the write operation to be performed. For example, in this embodiment, the process ID, the thread ID, and the file name of the file write log may be compared with the process ID, the thread ID, and the file name of the file creation log, and as shown in fig. 2, if the process ID, the thread ID, and the file name are the same, the file write log is recorded. For example, a file write log of a compressed file may be stored in association with a corresponding file creation log. If the file write log recorded by the same process ID, thread ID and file name does not exist, the processing is not carried out.
In an embodiment, the determining, according to the association log, an operation behavior executed on the file, and recording the operation behavior according to a preset rule further includes:
comparing whether the process ID in the process exit log is the same as the process ID in the file creation log;
and under the condition that the comparison results are the same, generating a decompression log according to a preset file compression rule.
In this embodiment, the process ID in the process exit log and the process ID in the file creation log are further compared, and in the case that the comparison result is the same. That is, this indicates that the compressed file that performed the file creation step has completed subsequent operation actions. In this embodiment, after the process exits, the decompression log is generated according to the preset file compression rule under the condition that the comparison results are the same. Thus, the decompression log of the compressed file can be obtained.
In an embodiment, the generating a decompression log according to a preset file compression rule includes:
and under the condition that the operation log contains a file write log corresponding to the current process exit log, matching the file write log and the corresponding associated record result according to a preset algorithm to obtain a decompression log.
In this embodiment, it is further determined that the compressed file is subjected to the file write operation, in this embodiment, the file write logs corresponding to the process exit logs are compared, and it is determined that the compressed file is written with data before the process exits. An alternative determination is that the file size accumulation of the write file log under the process ID is larger than the file size of the read file log. Thus, it is determined that the write operation is performed on the compressed file, and thus the file write log and the corresponding associated record result may be matched according to a preset algorithm in this embodiment, so as to obtain a decompression log. For example, the file write log, the file read log of the associated record and the file creation log are matched according to a preset algorithm, so that a decompression log is obtained. In an alternative embodiment, the obtained decompression log may be named according to a file name of the corresponding file read log. Therefore, the problem that the compressed file in the process cannot be tracked is solved, and the tracking of the data flow of the compressed file is realized. And if the operation behavior of the compressed file comprises a file creation log, and the process is executed and exited under the condition that the operation behavior of the compressed file does not comprise a file writing log, the process is not recorded.
In an embodiment, after obtaining the decompression log of the compressed file, the method for generating the decompression log of the compressed file further includes: and clearing all log records under the current process.
In this embodiment, after the decompression log is synthesized, all log records under the process ID may be cleared, and a next file log is ready to be recorded.
In summary, the embodiment of the present invention converts the file operation and the process operation of the application program of the software into the file decompression operation, and realizes the tracking of the file decompression behavior, thereby effectively monitoring the situation that the private file is sent out after being decompressed, and checking the circulation of the data of the private file, and ensuring the compliance of the file circulation.
An embodiment of the present invention further provides a file log generating device, as shown in fig. 3, including:
the file filtering module is used for filtering the acquired file log to obtain a related log of the compressed file;
and the data processing module is used for determining the operation behavior executed on the compressed file according to the associated log and recording the operation behavior according to a preset rule so as to obtain a decompression log of the compressed file.
An embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the method for generating a decompression log of a compressed file according to the first embodiment are implemented.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.
Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.
While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.
Claims (5)
1. A method for generating a decompression log of a compressed file is characterized by comprising the following steps:
filtering the acquired file log to obtain a related log of the compressed file;
determining the operation behavior executed by the compressed file according to the associated log, and recording the operation behavior according to a preset rule to obtain a decompression log of the compressed file;
before filtering the acquired file log, the method further comprises:
acquiring the file log according to a file operation request sent by a process and the exit operation of the process;
the file log comprises an operation log and a process exit log;
the file operation request at least comprises one of the following: a file creation request, a file read request, and a file write request;
determining the operation behavior executed by the compressed file according to the association log, wherein recording the operation behavior according to a preset rule comprises:
comparing the file creation log with a first log parameter of a file read log under the condition that the operation log is determined to contain the file creation log, and obtaining a first comparison result;
under the condition that the first comparison result is consistent, performing association recording on the file creation log and the file reading log;
wherein the first log parameter comprises at least one of: a process ID and a thread ID;
the determining, according to the association log, an operation behavior executed by the compressed file, and recording the operation behavior according to a preset rule further includes:
under the condition that the operation log is determined to contain a file writing log, comparing the file writing log with a second log parameter of the file creating log to obtain a second comparison result;
under the condition that the second comparison result is consistent, performing association recording on the file writing log and the file creating log;
wherein the second log parameter comprises at least one of: process ID, thread ID, and filename;
the determining, according to the association log, an operation behavior executed by the compressed file, and recording the operation behavior according to a preset rule further includes:
comparing whether the process ID in the process exit log is the same as the process ID in the file creation log;
under the condition that the comparison results are the same, generating a decompression log according to a preset file compression rule;
the generating of the decompression log according to the preset file compression rule includes:
and under the condition that the operation log contains a file write log corresponding to the current process exit log, matching the file write log and the corresponding associated record result according to a preset algorithm to obtain a decompression log.
2. The decompression log generating method of a compressed file according to claim 1,
the filtering the obtained file log to obtain the associated log of the compressed file includes:
detecting a file suffix of a file read by a file read log under the condition that the operation log is determined to contain the file read log;
when the file suffix is determined to be a specified compressed suffix, recording the file read log;
the specified compression suffix comprises the following compression format: zip, rar, 7z, cab, and tar.
3. The decompression log generating method of a compressed file according to claim 1 or 2, wherein after obtaining the decompression log of the compressed file, the method further comprises: and clearing log records of all file logs under the current process.
4. An apparatus for generating a decompression log of a compressed file, comprising:
the file filtering module is used for filtering the acquired file log to obtain a related log of the compressed file;
the data processing module is used for determining the operation behavior executed by the compressed file according to the associated log and recording the operation behavior according to a preset rule so as to obtain a decompression log of the compressed file;
before filtering the obtained file log, the decompression log generating device is further configured to:
acquiring the file log according to a file operation request sent by a process and the exit operation of the process;
the file log comprises an operation log and a process exit log;
the file operation request at least comprises one of the following: a file creation request, a file read request, and a file write request;
the data processing module is specifically configured to:
comparing the file creation log with a first log parameter of a file read log under the condition that the operation log is determined to contain the file creation log, and obtaining a first comparison result;
under the condition that the first comparison result is consistent, performing association recording on the file creation log and the file reading log;
wherein the first log parameter comprises at least one of: a process ID and a thread ID;
the determining, according to the association log, an operation behavior executed by the compressed file, and recording the operation behavior according to a preset rule further includes:
under the condition that the operation log is determined to contain a file writing log, comparing the file writing log with a second log parameter of the file creating log to obtain a second comparison result;
under the condition that the second comparison result is consistent, performing association recording on the file writing log and the file creating log;
wherein the second log parameter comprises at least one of: process ID, thread ID, and filename;
the determining, according to the association log, an operation behavior executed by the compressed file, and recording the operation behavior according to a preset rule further includes:
comparing whether the process ID in the process exit log is the same as the process ID in the file creation log;
under the condition that the comparison results are the same, generating a decompression log according to a preset file compression rule;
the generating of the decompression log according to the preset file compression rule includes:
and under the condition that the operation log contains a file write log corresponding to the current process exit log, matching the file write log and the corresponding associated record result according to a preset algorithm to obtain a decompression log.
5. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, which computer program, when being executed by a processor, carries out the steps of the decompression log generation method of a compressed file according to any one of claims 1 to 3.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110132707.8A CN112445773B (en) | 2021-02-01 | 2021-02-01 | Method and device for generating decompression log of compressed file and readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110132707.8A CN112445773B (en) | 2021-02-01 | 2021-02-01 | Method and device for generating decompression log of compressed file and readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112445773A CN112445773A (en) | 2021-03-05 |
| CN112445773B true CN112445773B (en) | 2021-04-30 |
Family
ID=74740174
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110132707.8A Active CN112445773B (en) | 2021-02-01 | 2021-02-01 | Method and device for generating decompression log of compressed file and readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112445773B (en) |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107977442A (en) * | 2017-12-08 | 2018-05-01 | 北京希嘉创智教育科技有限公司 | Journal file compresses and decompression method, electronic equipment and readable storage medium storing program for executing |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9846721B2 (en) * | 2013-03-13 | 2017-12-19 | Genesys Telecommunications Laboratories, Inc. | Log file management tool |
| US11126531B2 (en) * | 2018-06-29 | 2021-09-21 | EMC IP Holding Company LLC | Real-time viewing tool for compressed log data |
| CN110851409A (en) * | 2019-11-06 | 2020-02-28 | 南京星环智能科技有限公司 | Log compression and decompression method, device and storage medium |
| CN111737203A (en) * | 2020-06-09 | 2020-10-02 | 阿里巴巴集团控股有限公司 | Database history log backtracking method, device, system, equipment and storage medium |
| CN111797067B (en) * | 2020-09-10 | 2020-12-08 | 北京志翔科技股份有限公司 | Method and device for acquiring file path for file read-write operation |
| CN112181914B (en) * | 2020-12-01 | 2021-03-19 | 北京志翔科技股份有限公司 | Method for determining compressed file endogenous file and storage medium |
-
2021
- 2021-02-01 CN CN202110132707.8A patent/CN112445773B/en active Active
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107977442A (en) * | 2017-12-08 | 2018-05-01 | 北京希嘉创智教育科技有限公司 | Journal file compresses and decompression method, electronic equipment and readable storage medium storing program for executing |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112445773A (en) | 2021-03-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109034993B (en) | Account checking method, account checking equipment, account checking system and computer readable storage medium | |
| CN107454103B (en) | Network security event process analysis method and system based on time line | |
| CN108667855B (en) | Network flow abnormity monitoring method and device, electronic equipment and storage medium | |
| CN110246033B (en) | Credit risk monitoring method, device, equipment and storage medium | |
| CN110321082B (en) | Data clearing method and device for computer | |
| CN114692049A (en) | Browser-based screen recording method and device, electronic equipment and storage medium | |
| CN112035205A (en) | Data processing method, device, equipment and storage medium | |
| CN110245059B (en) | Data processing method, device and storage medium | |
| CN107729541A (en) | A kind of data processing method, device and computer-readable recording medium | |
| CN110134538B (en) | Method, device, medium and electronic equipment for quickly positioning problem log | |
| CN113205130B (en) | Data auditing method and device, electronic equipment and storage medium | |
| Şentürk et al. | Image and file system support framework for a digital mobile forensics software | |
| CN112445773B (en) | Method and device for generating decompression log of compressed file and readable storage medium | |
| CN117857177A (en) | Data security storage system | |
| CN109002710A (en) | A kind of detection method, device and computer readable storage medium | |
| CN115756486A (en) | Data interface analysis method and device | |
| CN111309311B (en) | Vulnerability detection tool generation method, device, equipment and readable storage medium | |
| CN114978963A (en) | Network system monitoring analysis method and device, electronic equipment and storage medium | |
| CN114511403A (en) | Method and device for generating supervision report, electronic equipment and storage medium | |
| CN114186278A (en) | Database abnormal operation identification method and device and electronic equipment | |
| CN117112846B (en) | Multi-information source license information management method, system and medium | |
| US20080008443A1 (en) | Data management system and method | |
| CN110928754A (en) | Operation and maintenance auditing method, device, equipment and medium | |
| CN109711205A (en) | A kind of USB storage device usage record sweep-out method and device | |
| CN107247640B (en) | Rapid restoration method and device for operating system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |