This paper presented a real-time forensics model based on fuzzy theory,and the prototype was implemented.The model took advantage of fuzzy theory in disposing of uncertain problems.The information records,which may be suspicious intrusion information,were