{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,10,30]],"date-time":"2024-10-30T08:21:19Z","timestamp":1730276479230,"version":"3.28.0"},"reference-count":20,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2013,8]]},"DOI":"10.1109\/issa.2013.6641056","type":"proceedings-article","created":{"date-parts":[[2013,10,29]],"date-time":"2013-10-29T19:20:04Z","timestamp":1383074404000},"page":"1-7","source":"Crossref","is-referenced-by-count":0,"title":["Forensic entropy analysis of microsoft windows storage volumes"],"prefix":"10.1109","author":[{"given":"Peter","family":"Weston","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stephen D.","family":"Wolthusen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.10.005"},{"key":"17","article-title":"DEFLATE compressed data format specification version 1. 3","author":"deutsch","year":"1996","journal-title":"IETF Network Working Group Request for Comments RFC 1951"},{"journal-title":"How NTFS Reserves Space for Its Master File Table (MFT)","year":"2012","key":"18"},{"journal-title":"ENT A Pseudorandom Number Sequence Test Program","year":"2012","author":"walker","key":"15"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1977.1055714"},{"journal-title":"Getting Started with VMware Fusion","year":"2012","key":"13"},{"journal-title":"File System Forensic Analysis","year":"2005","author":"carrier","key":"14"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2008.05.005"},{"key":"12","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2009.21"},{"journal-title":"Cluster-Slack Retention Characteristics A Study of the NTFS File System","year":"2010","author":"blacher","key":"3"},{"key":"20","first-page":"304","article-title":"Forensic artifacts of microsoft windows vista system","volume":"5075","author":"purcell","year":"2008","journal-title":"Intelligence and Security Informatics Proceedings of the IEEE ISI 2008 International Workshops PAISI PACCF and SOCO 2008 Ser Lecture Notes in Computer Science"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/IWSCN.2010.5497996"},{"journal-title":"Regulation of Investigatory Powers Act 2000","year":"2000","author":"government","key":"1"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2012.6181079"},{"key":"7","article-title":"Local shannon entropy measure with statistical tests for image randomness","author":"wu","year":"2012","journal-title":"Journal of Information Sciences"},{"key":"6","first-page":"1","article-title":"Forensic relative strength scoring: Ascii and entropy scoring","volume":"2","author":"shannon","year":"2004","journal-title":"International Journal of Digital Evidence"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02620-1_4"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1109\/IMF.2011.14"},{"key":"9","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.48"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1109\/IAS.2007.75"}],"event":{"name":"2013 Information Security for South Africa","start":{"date-parts":[[2013,8,14]]},"location":"Johannesburg, South Africa","end":{"date-parts":[[2013,8,16]]}},"container-title":["2013 Information Security for South Africa"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6621627\/6641027\/06641056.pdf?arnumber=6641056","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,22]],"date-time":"2017-03-22T22:30:14Z","timestamp":1490221814000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6641056\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,8]]},"references-count":20,"URL":"https:\/\/doi.org\/10.1109\/issa.2013.6641056","relation":{},"subject":[],"published":{"date-parts":[[2013,8]]}}}