{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T12:09:35Z","timestamp":1725538175591},"publisher-location":"Berlin, Heidelberg","reference-count":9,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642041549"},{"type":"electronic","value":"9783642041556"}],"license":[{"start":{"date-parts":[[2009,1,1]],"date-time":"2009-01-01T00:00:00Z","timestamp":1230768000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-3-642-04155-6_6","type":"book-chapter","created":{"date-parts":[[2009,9,29]],"date-time":"2009-09-29T12:04:42Z","timestamp":1254225882000},"page":"83-93","source":"Crossref","is-referenced-by-count":2,"title":["Temporal Analysis of Windows MRU Registry Keys"],"prefix":"10.1007","author":[{"given":"Yuandong","family":"Zhu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pavel","family":"Gladyshev","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joshua","family":"James","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"3","key":"6_CR1","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1016\/j.diin.2005.07.003","volume":"2","author":"H. Carvey","year":"2005","unstructured":"H. Carvey, The Windows registry as a forensic resource, Digital Investigation, vol. 2(3), pp. 201\u2013205, 2005.","journal-title":"Digital Investigation"},{"key":"6_CR2","volume-title":"Windows Forensic Analysis","author":"H. Carvey","year":"2007","unstructured":"H. Carvey, Windows Forensic Analysis, Syngress, Burlington, Massachusetts, 2007."},{"key":"6_CR3","unstructured":"B. Harder, Microsoft Windows XP system restore, Microsoft Corporation, Redmond, Washington (technet.microsoft.com\/en-us\/lib rary\/ms997627.aspx), 2001."},{"issue":"3","key":"6_CR4","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1016\/j.diin.2006.08.008","volume":"3","author":"K. Harms","year":"2006","unstructured":"K. Harms, Forensic analysis of system restore points in Microsoft Windows XP, Digital Investigation, vol. 3(3), pp. 151\u2013158, 2006.","journal-title":"Digital Investigation"},{"key":"6_CR5","unstructured":"J. Holderness, MRU lists (Windows 95) (www.geocities.com\/Silicon Valley\/4942\/mrulist.html), 1998."},{"key":"6_CR6","unstructured":"E. Kohl and J. Schmied, comctl32undoc.c, Wine Cross Reference (source.winehq.org\/source\/dlls\/comctl32\/comctl32undoc.c), 2000."},{"issue":"3","key":"6_CR7","doi-asserted-by":"publisher","first-page":"166","DOI":"10.1016\/j.diin.2006.07.001","volume":"3","author":"V. Mee","year":"2006","unstructured":"V. Mee, T. Tryfonas and I. Sutherland, The Windows registry as a forensic artifact: Illustrating evidence collection for Internet usage, Digital Investigation, vol. 3(3), pp. 166\u2013173, 2006.","journal-title":"Digital Investigation"},{"key":"6_CR8","unstructured":"Microsoft Corporation, Windows registry information for advanced users, Redmond, Washington (support.microsoft.com\/kb\/256986), 2008."},{"key":"6_CR9","first-page":"133","volume-title":"Handbook of Computer Crime Investigation: Forensic Tools and Technology","author":"B. Sheldon","year":"2002","unstructured":"B. Sheldon, Forensic analysis of Windows systems, in Handbook of Computer Crime Investigation: Forensic Tools and Technology, E. Casey (Ed.), Academic Press, London, United Kingdom, pp. 133\u2013166, 2002."}],"container-title":["IFIP Advances in Information and Communication Technology","Advances in Digital Forensics V"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-04155-6_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,3,10]],"date-time":"2019-03-10T00:42:14Z","timestamp":1552178534000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-04155-6_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9783642041549","9783642041556"],"references-count":9,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-04155-6_6","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2009]]}}}