Research on the model of Computer Dynamic Forensics Zhong xiu-yu1 (Department of computer, Jiaying Univercity, Meizhou,Guangdong,514015) Abstract: If the computer forensics is adopted after the crime had occured, it will have the problems of the true and the efficacy on the evidence. This paper presents the combine forensics with firewall and intrusion detection system to get the electronic evidence timely. It focuses on the model of the dynamic forensics, the data collection and data mining based on the model. Keyword: dynamic forensics, model, data collection, data analysis.