The invention discloses a multi-track visual analyzing evidence-collecting method for user behaviors and a system. The method comprises the following steps: collecting and transmitting client/server side data, collecting multidimensional user behavior data at a user terminal and an application server side, and transmitting to a log storage module; pre-processing data, forming structural data and storing in a database; tracking the user, investigating and collecting evidences, and starting the investigating and evidence-collecting process; performing visual user/event investigating track; automatically calculating through a rule engine; and performing tool behavior analysis. The system comprises a collecting storage device, a behavior tracking device, a rule analysis engine and a behavior analyzer. The instant and offline user behavior monitoring and analysis are supplied; the user operation process can be accurately and fully restored at multiple visual angles; the event investigation can be directly performed; and the user behavior safety can be effectively monitored.