Computer attack information storage method and device and electronic equipment

The embodiment of the invention discloses a computer attack information storage method and device and electronic equipment, and relates to the technical field of network security. The method and the device are invented for solving the problem that attack techniques cannot be reproduced due to deletion of target log files. The computer attack information storage method comprises the following steps: monitoring a target log file stored in a local first storage area; obtaining a first log newly generated in the target log file; and encrypting the obtained first log by adopting a first encryption algorithm, and synchronizing the encrypted first log to a local second storage area for storage. The method is suitable for application scenes for storing computer attack information. 本发明实施例公开一种计算机攻击信息存储方法、装置、电子设备，涉及网络安全技术领域。为解决因目标日志文件被删除而无法复现攻击手法而发明。所述计算机攻击信息存储方法，包括：对本地第一存储区域保存的目标日志文件进行监视；获取所述目标日志文件中新生成的第一日志；对获取的所述第一日志采用第一加密算法进行加密，将加密后的第一日志同步到本地的第二存储区域中进行保存。适用于存储计算机攻击信息的应用场景。