{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T00:29:08Z","timestamp":1769732948539,"version":"3.49.0"},"reference-count":72,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2013,1,1]],"date-time":"2013-01-01T00:00:00Z","timestamp":1356998400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/OAPA.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2013]]},"DOI":"10.1109\/access.2013.2260817","type":"journal-article","created":{"date-parts":[[2013,5,10]],"date-time":"2013-05-10T20:19:46Z","timestamp":1368217186000},"page":"216-231","source":"Crossref","is-referenced-by-count":7,"title":["Automated Production of Predetermined Digital Evidence"],"prefix":"10.1109","volume":"1","author":[{"given":"Aniello","family":"Castiglione","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giuseppe","family":"Cattaneo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giancarlo","family":"De Maio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alfredo","family":"De Santis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2011.62"},{"key":"ref71","first-page":"685","author":"albano","year":"2011","journal-title":"INCoS"},{"key":"ref70","year":"2011","journal-title":"Forensic Toolkit V4"},{"key":"ref39","author":"christias","year":"2012","journal-title":"UNIX Man Pages Shred (1)"},{"key":"ref38","year":"2006","journal-title":"NIST Special Publication 800?88 Guidelines for Media Sanitization"},{"key":"ref33","author":"kerrisk","year":"2012","journal-title":"Unlink(2)?Linux Manual Page"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2011.64"},{"key":"ref31","year":"2013","journal-title":"Forensics Wiki"},{"key":"ref30","author":"kerrisk","year":"2013","journal-title":"Linux Man-Pages Online"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_21"},{"key":"ref36","year":"2010","journal-title":"DoD Directive 5220 22 National Industrial Security Program (NISP)"},{"key":"ref35","first-page":"1","article-title":"Data remanence in semiconductor devices","volume":"10","author":"gutmann","year":"2001","journal-title":"Proc 10th Conf Usenix Security Symp"},{"key":"ref34","first-page":"77","article-title":"Secure deletion of data from magnetic and solid-state memory","volume":"6","author":"gutmann","year":"1996","journal-title":"Proc 6th Conf USENIX Security Symp Focusing Appl Cryptography"},{"key":"ref60","year":"2013","journal-title":"NTFS Technical Reference Local File Systems"},{"key":"ref62","year":"2013","journal-title":"Windows 7 & SSD Defragmentation SuperFetch Prefetch"},{"key":"ref61","year":"2011","journal-title":"Windows SuperFetch File Format?Partial Specification"},{"key":"ref63","year":"2013","journal-title":"System Restore?Microsoft Windows"},{"key":"ref28","year":"2012","journal-title":"Linux Programmer's Manual (8)?LDCONFIG"},{"key":"ref64","author":"russinovich","year":"2013","journal-title":"Inside the Registry"},{"key":"ref27","author":"russinovich","year":"2005","journal-title":"Microsoft Windows internals Microsoft Windows Server 2003 Windows XP and Windows 2000"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2012.127"},{"key":"ref66","author":"carvey","year":"2012","journal-title":"RegRipper"},{"key":"ref29","year":"2013","journal-title":"Resources and Tools for IT Professionals?TechNet"},{"key":"ref67","author":"sofer","year":"2013","journal-title":"IECookiesView Cookies Viewer\/Manager for Internet Explorer"},{"key":"ref68","author":"sofer","year":"2013","journal-title":"IE HistoryView Freeware Internet Explorer History Viewer"},{"key":"ref69","author":"sofer","year":"2013","journal-title":"IECacheView?Internet Explorer Cache Viewer"},{"key":"ref2","author":"kruse","year":"2001","journal-title":"Computer Forensics Incident Response Essentials"},{"key":"ref1","year":"2012","journal-title":"Internet World Stats"},{"key":"ref20","year":"2013","journal-title":"Bandook"},{"key":"ref22","author":"myer","year":"2009","journal-title":"Apple Automator with AppleScript Bible"},{"key":"ref21","year":"2013","journal-title":"IP-KVM 1001"},{"key":"ref24","author":"silberschatz","year":"2008","journal-title":"Operating System Concepts"},{"key":"ref23","year":"2013","journal-title":"Video Game Bot?Wikipedia the Free Encyclopedia"},{"key":"ref26","year":"2013","journal-title":"Windows Event Log (EVT)"},{"key":"ref25","year":"2012","journal-title":"Linux System Administration (8)?SYSKLOGD"},{"key":"ref50","doi-asserted-by":"crossref","first-page":"416","DOI":"10.1007\/978-3-642-32498-7_31","author":"colombini","year":"2012","journal-title":"Multidisciplinary Research and Practice for Information Systems"},{"key":"ref51","author":"gudjonsson","year":"2013","journal-title":"Log2TimelineA Framework to Extract Timestamps from Various Artifacts and Combine Into a Single TimelineGoogle Project Hosting"},{"key":"ref59","year":"2012","journal-title":"Robot (Java Platform SE 7)"},{"key":"ref58","year":"2012","journal-title":"Robot (Java Platform SE 6)"},{"key":"ref57","year":"2013","journal-title":"AppleScript Overview"},{"key":"ref56","year":"2013","journal-title":"Apple Automator"},{"key":"ref55","author":"sissel","year":"2013","journal-title":"Xdotool?Fake Keyboard\/Mouse Input Window Management and More"},{"key":"ref54","year":"2012","journal-title":"X11"},{"key":"ref53","author":"sandklef","year":"2013","journal-title":"GNU Xnee"},{"key":"ref52","year":"2013","journal-title":"AutoHotkey"},{"key":"ref10","author":"bravo","year":"2013","journal-title":"La Computer Forensics Nelle Motivazioni Della Sentenza Sull'Omicidio Di Garlasco"},{"key":"ref11","year":"2013","journal-title":"Sentenza Di Appello Del Caso Garlasco"},{"key":"ref40","author":"russinovich","year":"2013","journal-title":"SDelete"},{"key":"ref12","year":"2013","journal-title":"Garlasco L'accusa Ricorre in Cassazione Illogica L'assoluzione di Alberto Stasi"},{"key":"ref13","author":"mccullagh","year":"2013","journal-title":"Police Blotter Web Cookies Become Defendant's Alibi"},{"key":"ref14","author":"mccullagh","year":"2013","journal-title":"Police Blotter Computer Logs as Alibi in Wife's Death"},{"key":"ref15","first-page":"359","author":"de santis","year":"2011","journal-title":"MURPBES"},{"key":"ref16","year":"2012","journal-title":"TeamViewer?Free Remote Control Remote Access & Online Meetings"},{"key":"ref17","author":"weber","year":"2012","journal-title":"Portable RealVNC Server"},{"key":"ref18","year":"2013","journal-title":"VNC Server Java Applet (GSVNCJ)"},{"key":"ref19","year":"2013","journal-title":"ProRat"},{"key":"ref4","year":"2001","journal-title":"Digital Evidence Law & Legal Definition"},{"key":"ref3","year":"2013","journal-title":"Norton Cybercrime Report 2012"},{"key":"ref6","year":"2013","journal-title":"Facebook Message Frees NYC Robbery Suspect"},{"key":"ref5","year":"2001","journal-title":"Legal Definitions and Legal Terms Dictionary"},{"key":"ref8","author":"juarez","year":"2009","journal-title":"Facebook Status Update Provides Alibi?CNN Website"},{"key":"ref7","year":"2013","journal-title":"I'm Innocent Just Check My Status on Facebook"},{"key":"ref49","first-page":"591","author":"colombini","year":"2012","journal-title":"IMIS"},{"key":"ref9","author":"vitelli","year":"2013","journal-title":"Sentenza Di Primo Grado Del Processo Stasi"},{"key":"ref46","year":"2013","journal-title":"List of Sequenced Bacterial Genomes"},{"key":"ref45","author":"bassetti","year":"2012","journal-title":"CAINE (Computer Aided INvestigative Environment)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23300-5_26"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.1000162107"},{"key":"ref42","author":"bennett","year":"2012","journal-title":"AutoIt V3 3 6 1"},{"key":"ref41","author":"padrepietro","year":"2013","journal-title":"DEFT Linux?Computer Forensics Live CD"},{"key":"ref44","author":"abell","year":"1994","journal-title":"LSOF(8)?List Open Files"},{"key":"ref43","author":"russinovich","year":"2012","journal-title":"Process Monitor"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/6336544\/06514969.pdf?arnumber=6514969","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:24:34Z","timestamp":1642004674000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6514969\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013]]},"references-count":72,"URL":"https:\/\/doi.org\/10.1109\/access.2013.2260817","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013]]}}}