Abstract: If the data was collected after the computer crime had occurred, it was difficult to ensure that the evidence were authentic, accurate and complete.A distributed computer forensics model was presented in this paper.The main parts of the model were designed, and a computer forensics system based on this model was implemented.Experiments indict that the model presented and the system designed in this paper are efficient.