{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:22:45Z","timestamp":1742912565041,"version":"3.40.3"},"publisher-location":"Dordrecht","reference-count":6,"publisher":"Springer Netherlands","isbn-type":[{"type":"print","value":"9789400767379"},{"type":"electronic","value":"9789400767386"}],"license":[{"start":{"date-parts":[[2013,1,1]],"date-time":"2013-01-01T00:00:00Z","timestamp":1356998400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2013,1,1]],"date-time":"2013-01-01T00:00:00Z","timestamp":1356998400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013]]},"DOI":"10.1007\/978-94-007-6738-6_27","type":"book-chapter","created":{"date-parts":[[2013,5,2]],"date-time":"2013-05-02T15:22:19Z","timestamp":1367508139000},"page":"211-217","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["A Webmail Reconstructing Method from Windows XP Memory Dumps"],"prefix":"10.1007","author":[{"given":"Fei","family":"Kong","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ming","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yizhi","family":"Ren","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jian","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haiping","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ning","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2013,5,3]]},"reference":[{"key":"27_CR1","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1016\/j.diin.2009.01.004","volume":"5","author":"R Hadjidj","year":"2009","unstructured":"Hadjidj R, Debbabi M, Lounis H et al (2009) Towards an integrated e-mail forensic analysis framework. Proc Digital Invest 5:124\u2013137","journal-title":"Proc Digital Invest"},{"key":"27_CR2","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1016\/j.diin.2009.01.003","volume":"5","author":"MT Pereira","year":"2009","unstructured":"Pereira MT (2009) Forensic analysis of the Firefox 3 Internet history and recovery of deleted SQLite records. Proc Digital Invest 5:93\u2013103","journal-title":"Proc Digital Invest"},{"key":"27_CR3","doi-asserted-by":"publisher","first-page":"62","DOI":"10.1016\/j.diin.2011.05.008","volume":"8","author":"J Oh","year":"2011","unstructured":"Oh J, Lee S, Lee S (2011) Advanced evidence collection and analysis of web browser activity. Proc Digital Invest 8:62\u201370","journal-title":"Proc Digital Invest"},{"key":"27_CR4","doi-asserted-by":"publisher","first-page":"125","DOI":"10.1016\/j.diin.2012.04.005","volume":"9","author":"S V\u00f6mel","year":"2012","unstructured":"V\u00f6mel S, Freiling FC (2012) Correctness, atomicity, and integrity: defining criteria for forensically-sound memory acquisition. Proc Digital Invest 9:125\u2013137","journal-title":"Proc Digital Invest"},{"key":"27_CR5","unstructured":"http:\/\/www.ietf.org\/rfc\/rfc2822.txt"},{"key":"27_CR6","doi-asserted-by":"publisher","first-page":"68","DOI":"10.1016\/j.diin.2007.03.002","volume":"4","author":"J Solomon","year":"2007","unstructured":"Solomon J, Huebner E, Bem D, Szezynska M (2007) User data persistence in physical memory. Proc Digital Invest 4:68\u201372","journal-title":"Proc Digital Invest"}],"container-title":["Lecture Notes in Electrical Engineering","Multimedia and Ubiquitous Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-94-007-6738-6_27","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,19]],"date-time":"2023-02-19T11:31:18Z","timestamp":1676806278000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-94-007-6738-6_27"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"ISBN":["9789400767379","9789400767386"],"references-count":6,"URL":"https:\/\/doi.org\/10.1007\/978-94-007-6738-6_27","relation":{},"ISSN":["1876-1100","1876-1119"],"issn-type":[{"type":"print","value":"1876-1100"},{"type":"electronic","value":"1876-1119"}],"subject":[],"published":{"date-parts":[[2013]]},"assertion":[{"value":"3 May 2013","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}