{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:26:04Z","timestamp":1780053964700,"version":"3.54.0"},"publisher-location":"Cham","reference-count":23,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030562229","type":"print"},{"value":"9783030562236","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-56223-6_3","type":"book-chapter","created":{"date-parts":[[2020,9,6]],"date-time":"2020-09-06T15:03:24Z","timestamp":1599404604000},"page":"39-55","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Interactive Temporal Digital Forensic Event Analysis"],"prefix":"10.1007","author":[{"given":"Nikolai","family":"Adderley","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gilbert","family":"Peterson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,8,6]]},"reference":[{"key":"3_CR1","unstructured":"AccessData, Forensic Toolkit (FTK), Orem, Utah (accessdata.com\/products-services\/forensic-toolkit-ftk), 2020."},{"key":"3_CR2","unstructured":"Apollo Docs, Configuring the Cache, Apollo, San Francisco, California (www.apollographql.com\/docs\/react\/advanced\/cach ing), 2020."},{"key":"3_CR3","unstructured":"R. Carbone and C. Bean, Generating Computer Forensic Super-Timelines under Linux: A Comprehensive Guide for Windows-Based Disk Images, Technical Memorandum TM2011-216, Defence R&D Canada, Valcartier, Canada, 2011."},{"key":"3_CR4","doi-asserted-by":"crossref","unstructured":"Y. Chabot, A. Bertaux, C. Nicolle and T. Kechadi, Automatic timeline construction and analysis for computer forensic purposes, Proceedings of the IEEE Joint Intelligence and Security Informatics Conference, pp. 276\u2013279, 2014.","DOI":"10.1109\/JISIC.2014.54"},{"key":"3_CR5","unstructured":"GRANDstack, Build Full Stack Graph Applications with Ease (grandstack.io), 2020."},{"key":"3_CR6","unstructured":"K. Gudjonsson, Mastering the Super Timeline with log2timeline, Information Security Reading Room, SANS Institute, Bethesda, Maryland, 2010."},{"key":"3_CR7","unstructured":"Guidance Software, EnCase Forensic User Guide, Version 8.07, Pasadena, California, 2018."},{"key":"3_CR8","doi-asserted-by":"crossref","unstructured":"G. Hales, Visualization of device datasets to assist digital forensic investigations, Proceedings of the International Conference on Cyber Situational Awareness, Data Analytics and Assessment, 2017.","DOI":"10.1109\/CyberSA.2017.8073402"},{"key":"3_CR9","doi-asserted-by":"crossref","unstructured":"H. Hibshi, T. Vidas and L. Cranor, Usability of forensic tools: A user study, Proceedings of the Sixth International Conference on IT Security Incident Management and IT Forensics, pp. 81\u201391, 2011.","DOI":"10.1109\/IMF.2011.19"},{"key":"3_CR10","unstructured":"P. Hitlin, Internet, social media use and device ownership in U.S. have plateaued after years of growth, Fact Tank \u2013 News in Numbers, Pew Research Center, Washington, DC, September 28, 2018."},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"B. Inglot, L. Liu and N. Antonopoulos, A framework for enhanced timeline analysis in digital forensics, Proceedings of the IEEE International Conference on Green Computing and Communications, pp. 253\u2013256, 2012.","DOI":"10.1109\/GreenCom.2012.50"},{"key":"3_CR12","doi-asserted-by":"crossref","unstructured":"T. Isenberg, P. Isenberg, J. Chen, M. Sedlmair and T. Moller, A systematic review of the practice of evaluating visualization, IEEE Transactions on Visualization Computer Graphics, vol. 19(12), pp. 2818\u20132827, 2013.","DOI":"10.1109\/TVCG.2013.126"},{"key":"3_CR13","doi-asserted-by":"crossref","unstructured":"H. Lam, E. Bertini, P. Isenberg, C. Plaisant and S. Carpendale, Empirical studies in information visualization: Seven scenarios, IEEE Transactions on Visualization and Computer Graphics, vol. 18(9), pp. 1520\u20131536, 2012.","DOI":"10.1109\/TVCG.2011.279"},{"key":"3_CR14","doi-asserted-by":"crossref","unstructured":"J. Lewis, Psychometric evaluation of the post-study system usability questionnaire: The PSSUQ, Proceedings of the Human Factors and Ergonomics Society Annual Meeting, vol. 36(16), pp. 1259\u20131260, 1992.","DOI":"10.1177\/154193129203601617"},{"key":"3_CR15","unstructured":"National Institute of Standards and Technology, Hacking Case, Gaithersburg, Maryland (www.cfreds.nist.gov\/Hacking_Case.html), April 16, 2018."},{"key":"3_CR16","unstructured":"Neo4j, Introducing Neo4j, San Mateo, California (neo4j.com), 2020."},{"key":"3_CR17","unstructured":"J. Nielsen, Why you only need to test with 5 users, Nielsen Norman Group, Fremont, California (www.nngroup.com\/articles\/why-you-only-need-to-test-with-5-users), March 18, 2000."},{"key":"3_CR18","doi-asserted-by":"crossref","unstructured":"J. Olsson and M. Boldt, Computer forensic timeline visualization tool, Digital Investigation, vol. 6(S), pp. S78\u2013S87, 2009.","DOI":"10.1016\/j.diin.2009.06.008"},{"key":"3_CR19","doi-asserted-by":"crossref","unstructured":"G. Osborne and J. Slay, Digital forensic infovis: An implementation of a process for visualization of digital evidence, Proceedings of the Sixth International Conference on Availability, Reliability and Security, pp. 196\u2013201, 2011.","DOI":"10.1109\/ARES.2011.36"},{"key":"3_CR20","doi-asserted-by":"crossref","unstructured":"G. Osborne, B. Turnbull and J. Slay, The \u201cExplore, Investigate and Correlate\u201d (EIC) conceptual framework for digital forensic information visualization, Proceedings of the International Conference on Availability, Reliability and Security, pp. 629\u2013634, 2010.","DOI":"10.1109\/ARES.2010.74"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"D. Schelkoph, G. Peterson and J. Okolica, Digital forensic event graph reconstruction, Proceedings of the International Conference on Digital Forensics and Cyber Crime, pp. 185\u2013203, 2018.","DOI":"10.1007\/978-3-030-05487-8_10"},{"key":"3_CR22","unstructured":"B. Shneiderman, The eyes have it: A task by data type taxonomy for information visualizations, Proceedings of the IEEE Symposium on Visual Languages, pp. 336\u2013343, 1996."},{"key":"3_CR23","doi-asserted-by":"crossref","unstructured":"S. Teerlink and R. Erbacher, Improving the computer forensic analysis process through visualization, Communications of the ACM, vol. 49(2), pp. 71\u201375, 2006.","DOI":"10.1145\/1113034.1113073"}],"container-title":["IFIP Advances in Information and Communication Technology","Advances in Digital Forensics XVI"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-56223-6_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,6]],"date-time":"2024-09-06T00:02:58Z","timestamp":1725580978000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-56223-6_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030562229","9783030562236"],"references-count":23,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-56223-6_3","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"6 August 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DigitalForensics","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Digital Forensics","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New Delhi","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 January 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 January 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"digitalforensics2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ifip119.org\/Conferences\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}