If the data was collected after the computer crime had occurred
it was difficult to ensure that the evidence were authentic
accurate and complete.A distributed computer forensics model was presented in this paper.The main parts of the model were designed
and a computer forensics system based on this model was implemented.Experiments indict that the model presented and the system designed in this paper are efficient.