{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T11:04:22Z","timestamp":1778151862456,"version":"3.51.4"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2025]]},"DOI":"10.1109\/access.2025.3585096","type":"journal-article","created":{"date-parts":[[2025,7,2]],"date-time":"2025-07-02T13:45:39Z","timestamp":1751463939000},"page":"134189-134211","source":"Crossref","is-referenced-by-count":1,"title":["Emulator Forensics Investigation Model (EFIM)"],"prefix":"10.1109","volume":"13","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6322-5483","authenticated-orcid":false,"given":"Sedat","family":"\u015een","sequence":"first","affiliation":[{"name":"Department of Forensic Sciences, Institute of Science, Hacettepe University, Ankara, Türkiye"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6044-379X","authenticated-orcid":false,"given":"Harun","family":"Artuner","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Faculty of Engineering, Hacettepe University, Ankara, Türkiye"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"What are Emulators in Fraud-How Do They Work? | SEON","year":"2024"},{"key":"ref2","volume-title":"Hackers Use Mobile Emulators To Steal Millions: IBM-Attackers Target Mobile Banking Customers in U.S., Europe","author":"Asokan","year":"2025"},{"key":"ref3","volume-title":"Mobile Emulator Farms: What are They and How They Work","author":"Belding","year":"2025"},{"issue":"3","key":"ref4","first-page":"1","article-title":"An examination of digital forensic models","volume":"1","author":"Reith","year":"2002","journal-title":"Int. J. Digit. Evidence Fall"},{"key":"ref5","article-title":"An event-based digital forensic investigation framework","author":"Carrier","year":"2003"},{"issue":"2","key":"ref6","first-page":"1","article-title":"Getting physical with the digital investigation process","volume":"2","author":"Carrier","year":"2003","journal-title":"Int. J. Digit. Evidence Fall"},{"key":"ref7","volume-title":"Securityintelligence","author":"Shachar","year":"2025"},{"key":"ref8","volume-title":"Forensic Investigation Process Model for Windows Mobile Devices","author":"Ramabhadran","year":"2007"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.3014615"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.bushor.2016.08.001"},{"key":"ref11","first-page":"487","article-title":"Computer forensics: An approach to evidence in cyberspace","volume-title":"Proc. Nat. Inf. Syst. Secur. Conf.","author":"Pollitt"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/icocics58778.2023.10276752"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/isdfs60797.2024.10527263"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/icaibd49809.2020.9137498"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/calcon49167.2020.9106500"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ntms49979.2021.9432658"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1002\/wfs2.1432"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.3390\/info14070374"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.3390\/app12189077"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3041008.3041010"},{"key":"ref21","first-page":"660","article-title":"Digital forensic analysis of Facebook app in virtual environment","volume-title":"Proc. 6th Int. Conf. Comput. Sustain. Global Develop. (INDIACom)","author":"Agrawal"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/compcomm.2018.8781056"},{"issue":"2","key":"ref23","first-page":"1","article-title":"Virtual machine forensic analysis and recovery method for recovery and analysis digital evidence","volume":"16","author":"Wahyudi","year":"2018","journal-title":"Int. J. Comput. Sci. Inf. Secur."},{"key":"ref24","article-title":"A study on common android emulators and anti-forensic message-hiding applications","author":"Teng","year":"2017"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ieeeconf64992.2025.10963229"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-71025-4_12"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102613"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3590777.3590793"},{"key":"ref29","volume-title":"Using Emulated Linux Environments As an Anti-Forensics Technique","author":"Allam","year":"2025"},{"key":"ref30","volume-title":"Anti-Forensics: An Overview of Evasion Tactics-Cyber","author":"Cortado","year":"2025"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3343360"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3402623"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2946978"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2930345"},{"key":"ref35","volume-title":"Mevzuat Bilgi Sistemi","year":"2024"},{"key":"ref36","volume-title":"StPO","year":"2024"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.2307\/2674643"},{"key":"ref38","volume-title":"Police and Criminal Evidence Act 1984","year":"2024"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.2307\/1335416"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1111\/1556-4029.15499"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2021.301133"},{"key":"ref42","volume-title":"Directory Size Browser-CodeProject","year":"2023"},{"key":"ref43","volume-title":"DiscUtils\/DiscUtils: Utility Libraries to Interact With Discs, Filesystem Formats and More","year":"2023"},{"key":"ref44","volume-title":"4pawan\/WPF.SQLite","year":"2023"},{"key":"ref45","volume-title":"Rooting an Android Emulator for Mobile Security Testing-8kSec","year":"2025"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1111\/1556-4029.13164"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1111\/1556-4029.13267"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-016-3718-2"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2024.3409083"},{"key":"ref50","volume-title":"IPhone and IOS Forensics: Investigation, Analysis and Mobile Security for Apple IPhone, IPad and IOS Devices","author":"Hoog","year":"2011"},{"key":"ref51","article-title":"Machine learning in digital forensics: A systematic literature review","author":"Nayerifard","year":"2023","journal-title":"arXiv:2306.04965"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3675888.3676067"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/10820123\/11062911.pdf?arnumber=11062911","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,4]],"date-time":"2025-08-04T18:46:58Z","timestamp":1754333218000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11062911\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/access.2025.3585096","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]}}}