{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,4]],"date-time":"2026-02-04T16:14:58Z","timestamp":1770221698042,"version":"3.49.0"},"reference-count":22,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2014,7,1]],"date-time":"2014-07-01T00:00:00Z","timestamp":1404172800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2015,6]]},"DOI":"10.1007\/s10207-014-0249-6","type":"journal-article","created":{"date-parts":[[2014,6,30]],"date-time":"2014-06-30T16:20:51Z","timestamp":1404145251000},"page":"249-261","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Automated inference of past action instances in digital investigations"],"prefix":"10.1007","volume":"14","author":[{"given":"Joshua I.","family":"James","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pavel","family":"Gladyshev","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2014,7,1]]},"reference":[{"key":"249_CR1","unstructured":"Palmer, G.: DFRWS technical report: a road map for digital forensic research . In: Digital forensic research workshop, p 42. Utica, New York. Retrieved from http:\/\/www.dfrws.org\/2001\/dfrws-rm-final.pdf (2001)"},{"issue":"1\u20132","key":"249_CR2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.diin.2009.08.001","volume":"6","author":"E Casey","year":"2009","unstructured":"Casey, E.: Digital forensics: coming of age. Digit. Investig. 6(1\u20132), 1\u20132 (2009)","journal-title":"Digit. Investig."},{"issue":"Supplement 1","key":"249_CR3","doi-asserted-by":"crossref","first-page":"S64","DOI":"10.1016\/j.diin.2010.05.009","volume":"7","author":"SL Garfinkel","year":"2010","unstructured":"Garfinkel, S.L.: Digital forensics research: the next 10 years. Digit. Investig. 7(Supplement 1), S64\u2013S73 (2010)","journal-title":"Digit. Investig."},{"issue":"1\u20132","key":"249_CR4","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1016\/j.diin.2010.07.001","volume":"7","author":"G Gogolin","year":"2010","unstructured":"Gogolin, G.: The digital crime tsunami. Digit. Investig. 7(1\u20132), 3\u20138 (2010)","journal-title":"Digit. Investig."},{"issue":"6","key":"249_CR5","doi-asserted-by":"crossref","first-page":"1353","DOI":"10.1111\/j.1556-4029.2009.01150.x","volume":"54","author":"E Casey","year":"2009","unstructured":"Casey, E., Ferraro, M., Nguyen, L.: Investigation delayed is justice denied: proposals for expediting forensic examinations of digital evidence*. J. Forensic Sci. 54(6), 1353\u20131364 (2009)","journal-title":"J. Forensic Sci."},{"key":"249_CR6","unstructured":"Raasch, J.: Child porn prosecutions delayed by backlog of cases . In: Eastern iowa news. Retrieved from http:\/\/www.easterniowanewsnow.com\/2010\/07\/12\/child-porn-prosecutions-delayed-by-backlog-of-cases\/ (2010)"},{"key":"249_CR7","unstructured":"BBC: Police \u2019need more e-crime skills\u2019 . Retrieved from http:\/\/news.bbc.co.uk\/2\/hi\/technology\/3725305.stm (2004)"},{"key":"249_CR8","unstructured":"InfoSecurity: digital forensics in a smarter and quicker way? Retrieved from http:\/\/www.infosecurity-magazine.com\/view\/2473\/digital-forensics-in-a-smarter-and-quicker-way (2009)"},{"key":"249_CR9","unstructured":"Kohtz, D.: Dealing with the digital evidence backlog In: Digital forensics magazine. Retrieved from http:\/\/digitalforensicsmagazine.com\/index.php?option=com_content&view=article&id=576&Itemid=72 (2011)"},{"issue":"2","key":"249_CR10","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1016\/j.diin.2004.03.001","volume":"1","author":"P Gladyshev","year":"2004","unstructured":"Gladyshev, P., Patel, A.: Finite state machine approach to digital event reconstruction. Digit. Investig. 1(2), 130\u2013149 (2004)","journal-title":"Digit. Investig."},{"key":"249_CR11","unstructured":"Carrier, B.D., Spafford, E.H.: A hypothesis-based approach to digital forensic investigations. CERIAS, PhD (2006)"},{"key":"249_CR12","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1016\/j.diin.2007.06.013","volume":"4","author":"AR Arasteh","year":"2007","unstructured":"Arasteh, A.R., Debbabi, M., Sakha, A., Saleh, M.: Analyzing multiple logs for forensic evidence. Digit. Investig. 4, 82\u201391 (2007)","journal-title":"Digit. Investig."},{"key":"249_CR13","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1007\/978-3-642-11534-9_9","volume":"31","author":"J James","year":"2010","unstructured":"James, J., Gladyshev, P., Abdullah, M.T., Zhu, Y.: Analysis of evidence using formal event reconstruction. Digit. Forensics Cyber Crime 31, 85\u201398 (2010)","journal-title":"Digit. Forensics Cyber Crime"},{"key":"249_CR14","doi-asserted-by":"crossref","unstructured":"Marrington, A., Mohay, G., Morarji, H., Clark, A.: A Model for Computer Profiling. pp. 635\u2013640. IEEE (2010)","DOI":"10.1109\/ARES.2010.95"},{"key":"249_CR15","unstructured":"Khan, M.N.A., Wakeman, I.: Machine Learning for Post-Event Timeline Reconstruction, pp. 112\u2013121 (2006)"},{"issue":"3\u20134","key":"249_CR16","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1016\/j.diin.2007.11.001","volume":"4","author":"MNA Khan","year":"2007","unstructured":"Khan, M.N.A., Chatwin, C.R., Young, R.C.D.: A framework for post-event timeline reconstruction using neural networks. Digit. Investig. 4(3\u20134), 146\u2013157 (2007)","journal-title":"Digit. Investig."},{"key":"249_CR17","unstructured":"James, J.: Survey of evidence and forensic tool usage in digital investigations (2010). In: Digital forensic investigation research laboratory in corporation with INTERPOL working party on IT crime. Dublin. Retrieved from http:\/\/digitalfire.ucd.ie\/?p=858 (2010)"},{"key":"249_CR18","unstructured":"Menzies, P.: Counterfactual theories of causation . Stanford University. Retrieved from http:\/\/stanford.library.usyd.edu.au\/entries\/causation-counterfactual\/ (2008)"},{"key":"249_CR19","doi-asserted-by":"crossref","unstructured":"James, J.I., Gladyshev, P., Zhu, Y.: Signature based detection of user events for post-mortem forensic analysis. In: Baggili I. (ed.) Digital Forensics and Cyber Crime, vol 53, pp. 96\u2013109 (2011). doi: 10.1007\/978-3-642-19513-6_8","DOI":"10.1007\/978-3-642-19513-6_8"},{"key":"249_CR20","unstructured":"Carney, M., Rogers, M.: The Trojan made me do it: a first step in statistical based computer forensics event reconstruction. Int. J. Digit. Evid. 2(4), 1\u201311 (2004)"},{"key":"249_CR21","doi-asserted-by":"crossref","unstructured":"Kwan, M., Chow, K.P., Law, F., Lai, P.: Reasoning about evidence using Bayesian networks. In: Ray I., Shenoi S. (eds.) Advances in Digital Forensics IV, vol 285, pp. 275\u2013289 (2008). doi: 10.1007\/978-0-387-84927-0 _ 22","DOI":"10.1007\/978-0-387-84927-0"},{"key":"249_CR22","unstructured":"James, J.I.: Internet Explorer and Firefox User Activity Dataset . In: Digital forensic investigation research laboratory (DigitalFIRE). Retrieved from http:\/\/digitalfire.ucd.ie\/?page_id=855 (2013)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-014-0249-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10207-014-0249-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-014-0249-6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,29]],"date-time":"2019-05-29T07:05:05Z","timestamp":1559113505000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10207-014-0249-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,7,1]]},"references-count":22,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2015,6]]}},"alternative-id":["249"],"URL":"https:\/\/doi.org\/10.1007\/s10207-014-0249-6","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,7,1]]}}}