{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,1]],"date-time":"2025-11-01T13:42:27Z","timestamp":1762004547136},"publisher-location":"Berlin, Heidelberg","reference-count":9,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642411472"},{"type":"electronic","value":"9783642411489"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-3-642-41148-9_9","type":"book-chapter","created":{"date-parts":[[2013,10,9]],"date-time":"2013-10-09T18:47:31Z","timestamp":1381344451000},"page":"135-144","source":"Crossref","is-referenced-by-count":4,"title":["Creating Super Timelines in Windows Investigations"],"prefix":"10.1007","author":[{"given":"Stephen","family":"Esposito","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Gilbert","family":"Peterson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"9_CR1","unstructured":"B. Carrier, The Sleuth Kit (\n                    \n                      www.sleuthkit.org\n                    \n                    \n                  )."},{"key":"9_CR2","unstructured":"H. Carvey, RegRipper (\n                    \n                      regripper.wordpress.com\n                    \n                    \n                  )."},{"key":"9_CR3","unstructured":"J. Foster and V. Liu, Timestomp (\n                    \n                      www.forensicswiki.org\/wiki\/Timestomp\n                    \n                    \n                  )."},{"key":"9_CR4","series-title":"SANS Gold Paper","volume-title":"Mastering the Super Timeline with log2timeline","author":"K. Guojonsson","year":"2010","unstructured":"K. Guojonsson, Mastering the Super Timeline with log2timeline, SANS Gold Paper, SANS Institute, Bethesda, Maryland, 2010."},{"key":"9_CR5","unstructured":"K. Jones, Pasco v.1.0, McAfee, Santa Clara, California (\n                    \n                      www.mcafee.com\/us\/downloads\/free-tools\/pasco.aspx\n                    \n                    \n                  ), 2012."},{"key":"9_CR6","unstructured":"Mandiant, Web Historian, Alexandria, Virginia (\n                    \n                      www.mandiant.com\/resources\/download\/web-historian\n                    \n                    \n                  )."},{"issue":"S","key":"9_CR7","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1016\/j.diin.2009.06.008","volume":"6","author":"J. Olsson","year":"2009","unstructured":"J. Olsson and M. Boldt, Computer forensic timeline visualization tool, Digital Investigation, vol. 6(S), pp. S78\u2013S87, 2009.","journal-title":"Digital Investigation"},{"key":"9_CR8","unstructured":"SIMILE Project, The JFK assassination timeline with Dutch timeline labels, Massachusetts Institute of Technology, Cambridge, Massachusetts (\n                    \n                      www.simile-widgets.org\/timeline\/examples\/jfk_i18n\/jfk.html\n                    \n                    \n                  ), 2009."},{"key":"9_CR9","unstructured":"TZWorks, Yet Another Registry Utility (yaru), Herndon, Virginia (\n                    \n                      www.tzworks.net\/download_links.php\n                    \n                    \n                  )."}],"container-title":["IFIP Advances in Information and Communication Technology","Advances in Digital Forensics IX"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-41148-9_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,17]],"date-time":"2019-05-17T21:06:41Z","timestamp":1558127201000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-41148-9_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9783642411472","9783642411489"],"references-count":9,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-41148-9_9","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2013]]}}}