Abstract: Cloud computing is the most popular Internet computing model currently; its order to solve scientific problems of various information and to provide a powerful technology and resources. In the development of electronic evidence, we combine the characteristics of cloud computing and forensic technology, use the cloud computing method to the electronic forensics and construct a hybrid cloud used for electronic evidence work. In the electronic forensics, based on the combination of information security needs, design a practical forensic model and describes its function and examples. This article complies with actual work needs, compared to traditional methods, introduces new models and features and of successful experiment, for the associated industries and research to provides a valuable reference.