{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,28]],"date-time":"2025-03-28T00:56:58Z","timestamp":1743123418240,"version":"3.40.3"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031280726"},{"type":"electronic","value":"9783031280733"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-28073-3_45","type":"book-chapter","created":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T06:04:47Z","timestamp":1677650687000},"page":"656-673","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Factors Affecting the Persistence of Deleted Files on Digital Storage Devices"],"prefix":"10.1007","author":[{"given":"Tahir M.","family":"Khan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"James H.","family":"Jones","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alex V.","family":"Mbazirra","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,3,2]]},"reference":[{"key":"45_CR1","unstructured":"Shaaban, A., Sapronov, K.: Filesystem analysis and data recovery. In: Practical Windows Forensics: Leverage the Power of Digital Forensics for Windows Systems, p. 96. Packt Publishing, Birmingham, UK (2016)"},{"key":"45_CR2","unstructured":"Zelkowitz, M.V.: Partition organization. In:\u00a0Advances in Computers: Software Development, p. 7. Academic Press (2011)"},{"key":"45_CR3","unstructured":"Vacca, J.R., Rudolph, M.K.: Technical overview: system forensic tools, techniques, and methods. In:\u00a0System Forensics, Investigation, and Response, p. 86. Jones & Bartlett Learning, Sudbury (2010)"},{"key":"45_CR4","first-page":"145","volume-title":"Forensic discovery","author":"D Farmer","year":"2007","unstructured":"Farmer, D., Venema, W.: The persistence of deleted file information. In: Forensic discovery, pp. 145\u2013148. Addison-Wesley, Upper Saddle River, NJ (2007)"},{"key":"45_CR5","unstructured":"Duits, J.: The world\u2019s first data recovery, 08 December 2014. https:\/\/www.krollontrack.com\/blog\/2014\/01\/09\/worlds-first-data-recovery\/. Accessed 07 July 2017"},{"key":"45_CR6","unstructured":"Carrier, B.: Chapter 1: Digital Investigation Foundations. File System Forensic Analysis, pp. 20\u201321. Addison-Wesely, Upper Saddle River (2015)"},{"issue":"1","key":"45_CR7","doi-asserted-by":"publisher","first-page":"243","DOI":"10.1007\/s11042-010-0704-y","volume":"61","author":"B Yoo","year":"2011","unstructured":"Yoo, B., Park, J., Lim, S., Bang, J., Lee, S.: A study on multimedia file carving method. Multimedia Tools Appl. 61(1), 243\u2013261 (2011). https:\/\/doi.org\/10.1007\/s11042-010-0704-y","journal-title":"Multimedia Tools Appl."},{"key":"45_CR8","doi-asserted-by":"publisher","unstructured":"Dewald, A., Seufert, S.: AFEIC: advanced forensic ext4 inode carving. Digit. Investig. 20 (2017). https:\/\/doi.org\/10.1016\/j.diin.2017.01.003","DOI":"10.1016\/j.diin.2017.01.003"},{"issue":"3","key":"45_CR9","doi-asserted-by":"publisher","first-page":"50","DOI":"10.4018\/jmcmc.2013070104","volume":"5","author":"R Poisel","year":"2013","unstructured":"Poisel, R., Rybnicek, M., Schildendorfer, B., Tjoa, S.: Classification and recovery of fragmented multimedia files using the file carving approach. Int. J. Mob. Comput. Multimedia Commun. 5(3), 50\u201367 (2013). https:\/\/doi.org\/10.4018\/jmcmc.2013070104","journal-title":"Int. J. Mob. Comput. Multimedia Commun."},{"key":"45_CR10","doi-asserted-by":"crossref","unstructured":"Garfinkel, S.: Carving contiguous and fragmented files with fast object validation. Digit. Investig., 2\u201312 (2007)","DOI":"10.1016\/j.diin.2007.06.017"},{"key":"45_CR11","unstructured":"Gubanovis, Y., Afonin, O.: Recovering evidence from SSD drives in 2014: understanding TRIM, garbage collection and exclusions.\u00a0Forensic Focus for Digital Forensics and Ediscovery Professionals (2014). https:\/\/articles.forensicfocus.com\/2014\/09\/23\/recovering-evidence-from-ssd-drives-in-2014-understanding-trim-garbage-collection-and-exclusions\/. Accessed 20 May 2017"},{"key":"45_CR12","unstructured":"Russinovich, M.E., Solomon, D.A., Ionescu, A.: Chapter 9: Storage management. In: Windows Internals, Part 2, p. 130. Microsoft Press (2012)"},{"key":"45_CR13","unstructured":"Zhang, S.: 8 vital factors affecting hard drive data recovery, 26 May 2017. https:\/\/www.datanumen.com\/blogs\/8-vital-factors-affecting-hard-drive-data-recovery\/. Accessed 09 July 2017"},{"key":"45_CR14","unstructured":"Lange, M.C., Nimsger, K.M.: Computer forensics. In:\u00a0Electronic Evidence and Discovery: What Every Lawyer Should Know Now, p. 217. Section of Science & Technology Law, American Bar Association, Chicago, IL (2009)"},{"key":"45_CR15","unstructured":"Riden, J.: Persistence of data on storage media, 25 June 2017. https:\/\/www.symantec.com\/connect\/articles\/persistence-data-storage-media. Accessed 08 July 2017"},{"key":"45_CR16","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1016\/j.diin.2015.07.001","volume":"5","author":"J Reust","year":"2005","unstructured":"Reust, J.: Fifth annual DFRWS conference. Digit. Investig. 5, 4 (2005). https:\/\/doi.org\/10.1016\/j.diin.2015.07.001","journal-title":"Digit. Investig."},{"issue":"2","key":"45_CR17","first-page":"7","volume":"7","author":"K Fairbanks","year":"2012","unstructured":"Fairbanks, K., Garfinkel, S.: Column: factors affecting data decay. J. Digit. Forensics Secur. Law 7(2), 7\u201310 (2012)","journal-title":"J. Digit. Forensics Secur. Law"},{"key":"45_CR18","doi-asserted-by":"crossref","unstructured":"Jones, J.H., Khan, T.M.: A method and implementation for the empirical study of deleted file persistence in digital devices and media. In: 2017 IEEE 7th Annual Computing and Communication Workshop and Conference (CCWC) (2017)","DOI":"10.1109\/CCWC.2017.7868431"},{"key":"45_CR19","doi-asserted-by":"crossref","unstructured":"Garfinkel, S., Nelson, A.J., Young, J.: A general strategy for differential forensic analysis. Digit. Investig. 9, S50\u2013S59 (2012)","DOI":"10.1016\/j.diin.2012.05.003"},{"key":"45_CR20","doi-asserted-by":"crossref","unstructured":"Fairbanks, K.D.: A technique for measuring data persistence using the ext4 file system journal. In: 2015 IEEE 39th Annual Computer Software and Applications Conference (COMPSAC), vol. 3, pp. 18\u201323. IEEE July 2015","DOI":"10.1109\/COMPSAC.2015.164"},{"key":"45_CR21","doi-asserted-by":"crossref","unstructured":"Dittner, R., Majors, K., Seldam, M., Grotenhuis, T., Rule, D., Green, G.: Virtualization with Microsoft Virtual Server 2005, p. 158. Syngress, Rockland, MA (2006)","DOI":"10.1016\/B978-159749106-8\/50004-9"},{"key":"45_CR22","unstructured":"Kumar, K., Stankowic, C., Hedlund, B.: In:\u00a0VMware vSphere Essentials: efficiently virtualize your IT infrastructure with vSphere, p. 126. Packt Publishing, Birmingham (2015)"},{"key":"45_CR23","doi-asserted-by":"publisher","unstructured":"Purcell, D.M., Lang, S.-D.: Forensic artifacts of microsoft windows vista system. In: Yang, C.C., et al. (eds.) ISI 2008. LNCS, vol. 5075, pp. 304\u2013319. Springer, Heidelberg (2008). https:\/\/doi.org\/10.1007\/978-3-540-69304-8_31","DOI":"10.1007\/978-3-540-69304-8_31"},{"key":"45_CR24","unstructured":"Chirammal, H.D., Mukhedkar, P., Vettathu, A.:\u00a0Mastering KVM Virtualization, p. 196. Packt, Birmingham, UK (2016)"},{"key":"45_CR25","first-page":"292","volume-title":"OPENSTACK: Building A Cloud Environment","author":"A Shrivastwa","year":"2016","unstructured":"Shrivastwa, A.: OPENSTACK: Building A Cloud Environment, p. 292. Packt Publishing Limited, Birmingham (2016)"},{"key":"45_CR26","unstructured":"Carrier, B.: File System Forensic Analysis, pp. 236\u2013237. Addison-Wesley, Boston (2005)"},{"key":"45_CR27","unstructured":"Berman, R.: Chapter 3: How a hard drive works. In:\u00a0All About Hard Disk Recorders: An Introduction to the Creative World of Digital, Hard Disk Recording, pp. 19\u201322. Hal Leonard, Milwaukee, WI (2003)"},{"key":"45_CR28","unstructured":"Nikkel, B.: Chapter 1: Storage media overview. In:\u00a0Practical Forensic Imaging Securing Digital Evidence with Linux Tools, p. 12. No Starch Press, San Francisco (2016)"},{"key":"45_CR29","unstructured":"Hailperin, M.: Disk space allocation. In:\u00a0Operating Systems and Middleware: Supporting Controlled Interaction, p. 284. Thomson, Boston (2007)"},{"key":"45_CR30","unstructured":"Jones, J.: Differential analysis as a data science tool for cyber security. In: Sanchez, I.C. (ed.) Proceedings of the Advance and Applications of Data Science and Engineering, pp. 29\u201332 (2016)"},{"key":"45_CR31","unstructured":"Laamanen, M., Nelson, A.: NSRL Next Generation - Diskprinting. Forensics @ NIST, Gaithersburg, MD, 3 December 2014 (2014). http:\/\/www.nsrl.nist.gov\/Documents\/Diskprints.pdf. Accessed 10 Apr 15"},{"key":"45_CR32","unstructured":"Jones, J., Khan, T., Laskey, K., Nelson, A., Laamanen, M., White, D.: Inferring previously uninstalled applications from digital traces. In: Proceedings of the Conference on Digital Forensics, Security and Law 2016, pp. 113\u2013130 (2016)"},{"key":"45_CR33","unstructured":"Nelson, A.J.: Software signature derivation from sequential digital forensic analysis. Ph.D. dissertation, UC Santa Cruz (2016)"},{"key":"45_CR34","doi-asserted-by":"publisher","unstructured":"Garfinkel, S.L., McCarrin, M.: Hash-based carving: searching media for complete files and file fragments with sector hashing and hashdb. Digit. Investig. 14 (2015). https:\/\/doi.org\/10.1016\/j.diin.2015.05.001","DOI":"10.1016\/j.diin.2015.05.001"}],"container-title":["Lecture Notes in Networks and Systems","Advances in Information and Communication"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-28073-3_45","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T06:14:15Z","timestamp":1677651255000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-28073-3_45"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031280726","9783031280733"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-28073-3_45","relation":{},"ISSN":["2367-3370","2367-3389"],"issn-type":[{"type":"print","value":"2367-3370"},{"type":"electronic","value":"2367-3389"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"2 March 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FICC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Future of Information and Communication Conference","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"San Francisco, CA","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 March 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 March 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ficc2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}