{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T00:28:57Z","timestamp":1781656137237,"version":"3.54.5"},"reference-count":153,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100004681","name":"Higher Education Commission of Pakistan under the National Center for Cyber Security Project Grant","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004681","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/access.2022.3142508","type":"journal-article","created":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T05:25:38Z","timestamp":1643174738000},"page":"11065-11089","source":"Crossref","is-referenced-by-count":123,"title":["A Comprehensive Survey on Computer Forensics: State-of-the-Art, Tools, Techniques, Challenges, and Future Directions"],"prefix":"10.1109","volume":"10","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0570-1813","authenticated-orcid":false,"given":"Abdul Rehman","family":"Javed","sequence":"first","affiliation":[{"name":"Department of Cyber Security, Air University, Islamabad, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3809-1089","authenticated-orcid":false,"given":"Waqas","family":"Ahmed","sequence":"additional","affiliation":[{"name":"Department of Cyber Security, Air University, Islamabad, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1928-3704","authenticated-orcid":false,"given":"Mamoun","family":"Alazab","sequence":"additional","affiliation":[{"name":"College of Engineering, IT and Environment, Charles Darwin University, Casuarina, NT, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2531-2564","authenticated-orcid":false,"given":"Zunera","family":"Jalil","sequence":"additional","affiliation":[{"name":"Department of Cyber Security, Air University, Islamabad, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kashif","family":"Kifayat","sequence":"additional","affiliation":[{"name":"Department of Cyber Security, Air University, Islamabad, Pakistan"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0097-801X","authenticated-orcid":false,"given":"Thippa Reddy","family":"Gadekallu","sequence":"additional","affiliation":[{"name":"School of Information Technology and Engineering, Vellore Institute of Technology, Vellore, Tamil Nadu, India"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS49979.2021.9432677"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2988160"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s12652-020-01770-0"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4088"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.3390\/fi11070162"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2020.100233"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2017.07.001"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.12.003"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3095730"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3025875"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.05.002"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2021.3103547"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1166\/jctn.2020.8916"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2021.104456"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2010.05.009"},{"key":"ref16","volume-title":"File System Forensic Analysis","author":"Carrier","year":"2005"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.9790\/3021-0203392398"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.06.010"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-6351-1_15"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1480-7_20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1504\/IJAIP.2020.106040"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-020-07102-x"},{"issue":"2","key":"ref23","first-page":"1","article-title":"Survey on real time security mechanisms in network forensics","volume":"151","author":"Salazar","year":"2016","journal-title":"Int. J. Comput. Appl."},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s11831-021-09575-w"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/I-SMAC49090.2020.9243428"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-47131-6_8"},{"issue":"1","key":"ref27","first-page":"1","article-title":"A survey on cyber forensics for securing cloud logs","volume":"3","author":"Sawant","year":"2020","journal-title":"Int. J. Sci. Res. Eng. Develop."},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-9647-6_97"},{"issue":"1","key":"ref29","first-page":"1","article-title":"Survey collection mobile hacking app and detection method","volume":"7","author":"Indhumathi","year":"2020","journal-title":"IEICE Trans. Inf. Syst."},{"issue":"1","key":"ref30","first-page":"1","article-title":"Survey on digital forensics investigation and their evidences","volume":"10","author":"Pawar","year":"2020","journal-title":"Int. J. Adv. Res. Sci., Commun. Technol."},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCMC48092.2020.ICCMC-00024"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.12.004"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2010.05.010"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-007-0070-0"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/PASSAT\/SocialCom.2011.68"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.01.010"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2011.10.003"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2894643"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2017.8228692"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/s41870-018-0263-4"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232810"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-7561-3_6"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10772-020-09747-2"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2019.102061"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-33-4443-3_30"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC51732.2021.9376133"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.5772\/intechopen.82013"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/UBMK50275.2020.9219416"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(20)30030-0"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2020920815"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICCA49400.2020.9022838"},{"issue":"3","key":"ref52","first-page":"1","article-title":"Analysis of virtual machine in digital forensics","volume":"7","author":"Mathews","year":"2020","journal-title":"Int. Res. J. Eng. Technol."},{"key":"ref53","first-page":"1","article-title":"A comprehensive perspective on mobile forensics: Process, tools, and future trends","volume-title":"Confluence of AI, Machine, and Deep Learning in Cyber Forensics","author":"Aju","year":"2021"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpa.2021.100068"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1648\/3\/032025"},{"issue":"4","key":"ref56","first-page":"291","article-title":"Computer forensics and cyber crime handling","volume":"15","author":"Akay","year":"2020","journal-title":"Jurnal Teknik Informatika"},{"key":"ref57","article-title":"Legal issues in computer forensics and digital evidence admissibility","author":"Otieno","year":"2020","journal-title":"Int. J. Comput. Sci. Mobile Comput."},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.3390\/s18020492"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.09.058"},{"issue":"8","key":"ref60","first-page":"152","article-title":"Privacy issues in cloud computing for computer forensics: An analysis","volume":"10","author":"Kumar","year":"2018","journal-title":"Netw. Commun. Eng."},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59824-2_1"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-1580-0_67"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2019.12.017"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2020.300917"},{"key":"ref65","article-title":"An event-based digital forensic investigation framework","author":"Carrier","year":"2004","journal-title":"Digit. Invest."},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407064"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/ICCWS48432.2020.9292387"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.3390\/app10124231"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1080\/19361610.2020.1796162"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-62582-5_5"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.9734\/ajrcos\/2021\/v7i430189"},{"key":"ref72","article-title":"A review on: The rise in cyber forensics & innovations","author":"Panigrahi","year":"2021"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/UYMS50627.2020.9247055"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301115"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0043-x"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2019.200892"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102092"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2020.301012"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/MIPRO.2015.7160488"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/COMSNETS51098.2021.9352935"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.18517\/ijaseit.10.3.9363"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.5121\/ijnsa.2020.12203"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/COINS51742.2021.9524269"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470029"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-23547-5_12"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2020.300943"},{"issue":"9","key":"ref87","first-page":"123","article-title":"Forensic investigation of user\u2019s web activity on Google Chrome using various forensic tools","volume":"16","author":"Shafqat","year":"2016","journal-title":"Int. J. Comput. Sci. Netw. Secur."},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.51584\/IJRIAS.2021.6506"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3624617"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.52922\/ti141072"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-13057-2"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-7998-1558-7.ch010"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3059881"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC51323.2021.9498743"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-05152-9_2"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1108\/IJWIS-06-2020-0038"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-010-0620-1"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ICME46284.2020.9102783"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.101675"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.06.003"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2020.3002101"},{"key":"ref102","article-title":"Digital cues in multimedia forensics","author":"Mullan","year":"2021"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-021-00117-2"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-020-08881-y"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301190"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/ICCIT-144147971.2020.9213739"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.10.008"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.3390\/info12050181"},{"key":"ref109","first-page":"8887","article-title":"Comparative study and simulation of digital forensic tools","volume":"975","author":"Sanap","year":"2015","journal-title":"Int. J. Comput. Appl."},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.3390\/su12104087"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1016\/j.scijus.2020.10.002"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS49979.2021.9432641"},{"key":"ref113","article-title":"Towards a feature rich model for predicting spam emails containing malicious attachments and URLs","author":"Tran","year":"2014"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2021.01.022"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-8061-1_24"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-38954-3_19"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1088\/1757-899X\/834\/1\/012034"},{"key":"ref118","volume-title":"Windows Forensics Cookbook","author":"Skulkin","year":"2017"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/c2009-0-62460-0"},{"key":"ref120","article-title":"Distributed file system digital forensic triage integration","author":"Harshany","year":"2020"},{"issue":"3","key":"ref121","first-page":"1","article-title":"An examination of digital forensic models","volume":"1","author":"Reith","year":"2002","journal-title":"Int. J. Digit. Evidence"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity49315.2020.9138853"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.5120\/ijca2016912276"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.14257\/ijhit.2015.8.2.35"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/HealthCom.2015.7454484"},{"issue":"2","key":"ref126","article-title":"Network forensics for detecting flooding attack on web server","volume":"15","author":"Mualfah","year":"2017","journal-title":"Int. J. Comput. Sci. Inf. Secur."},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/UBMK.2017.8093559"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/WARTIA.2014.6976367"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2019.106229"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2018.8355378"},{"key":"ref131","first-page":"16","article-title":"Tracing e-mail headers","volume-title":"Proc. Austral. Comput., Netw. Inf. Forensics Conf","author":"Al-Zarouni"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.5121\/ijnsa.2011.3617"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/TGCN.2021.3067885"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.03.005"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC51732.2021.9376042"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1002\/ett.3997"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9020219"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.05.048"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1145\/3427477.3429987"},{"issue":"33","key":"ref140","first-page":"1","article-title":"Computer network forensics assistance methodology focused on denial of service attacks","volume":"177","author":"Cantanhede","year":"2020","journal-title":"Int. J. Comput. Appl."},{"key":"ref141","first-page":"2234","article-title":"Network forensics: Today and tomorrow","volume-title":"Proc. 3rd Int. Conf. Comput. Sustain. Global Develop. (INDIACom)","author":"Shrivastava"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3076264"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.23919\/ICITST.2017.8356429"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1145\/3448614"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1145\/3460392"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-021-09587-8"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3102040"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3105450"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.5772\/intechopen.90233"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1109\/UBMK.2017.8093505"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3049564"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-020-00733-2"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/ICCWS48432.2020.9292395"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9668973\/09678340.pdf?arnumber=9678340","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,13]],"date-time":"2024-01-13T22:55:23Z","timestamp":1705186523000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9678340\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":153,"URL":"https:\/\/doi.org\/10.1109\/access.2022.3142508","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}