Forensic system, forensic method, and forensic program

A forensic method which acquires digital information recorded on a plurality of computers or a server to analyze the acquired digital information, comprising:

• a step of acquiring digital information containing digital document information composed of a plurality of document files, and user information about user utilizing the plurality of computers or the server;
• a step of recording digital information acquired by the digital information acquiring unit;
• a step of displaying the recorded digital information;
• a step of setting user-specifying information showing which one of users contained in the user information each of the plurality of document files is related with, and setting the recording unit to record the set user-specifying information;
• a step of selecting at least one user;
• a step of searching a document file where user-specifying information corresponding to the selected user was set;
• a step of setting additional information showing whether or not the searched document file is related with litigation;
• and
• a step of outputting a document file related with litigation based upon the additional information.

A recording medium recording therein a forensic program which acquires digital information recorded on a plurality of computers or a server to analyze the acquired digital information, the forensic program causing a computer to execute:

• a function of acquiring digital information containing digital document information composed of a plurality of document files, and user information about users using the plurality of computers or the server;
• a function of recording digital information acquired by the digital information acquiring unit;
• a function of displaying the recorded digital information;
• a function of setting user-specifying information showing which one of users contained in the user information each of the plurality of document files is related with, and causing the recording unit to record the set user-specifying information;
• a function of selecting at least one user;
• a function of searching a document file where user-specifying information corresponding to the selected user was set;
• a function of setting additional information showing whether or not the searched document file is related with litigation;
• and
• a function of outputting the document file related with the litigation based on the additional information.