The importance of electronic records digital forensics is defined in this paper. Based on the digital forensics technology and the realization condition of electronic records’ evidence status being made clear, the connotation and characteristics of electronic records digital forensics and digital evidence are deeply analyzed, the electronic records digital forensics process model is established, and two kinds of digital forensics forms of the technical scheme (the certificate and the victim) are designed on the basis of the electronic records evidence protection technology. The results of this study have certain value for the security management of electronic records and the application of digital forensics in electronic records management.