{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T15:43:33Z","timestamp":1783784613137,"version":"3.55.0"},"reference-count":37,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2018,10,1]],"date-time":"2018-10-01T00:00:00Z","timestamp":1538352000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Des. Test"],"published-print":{"date-parts":[[2018,10]]},"DOI":"10.1109\/mdat.2018.2862366","type":"journal-article","created":{"date-parts":[[2018,8,1]],"date-time":"2018-08-01T18:33:56Z","timestamp":1533148436000},"page":"63-74","source":"Crossref","is-referenced-by-count":11,"title":["Advances in Forensic Data Acquisition"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8279-8401","authenticated-orcid":false,"given":"Felix","family":"Freiling","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Grob","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tobias","family":"Latzo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tilo","family":"Muller","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ralph","family":"Palutke","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.08.002"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2017.10"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.01.009"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2014.03.014"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.06.012"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.01.004"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15512-3_16"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/CIT.2012.119"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2011.06.002"},{"key":"ref11","year":"2018","journal-title":"Volatility foundation (homepage)"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2015.01.009"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1506409.1506429"},{"key":"ref14","article-title":"Data remanence in semiconductor devices","author":"gutmann","year":"2001","journal-title":"10th USENIX Security Symp"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/11545262_25"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.52"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2017.10.003"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523661"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2369041"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.01.003"},{"key":"ref4","author":"carrier","year":"2005","journal-title":"File System Forensic Analysis"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2013.06.004"},{"key":"ref3","article-title":"Searching and seizing computers and obtaining electronic evidence in criminal investigations","year":"2009"},{"key":"ref6","first-page":"103","article-title":"A forensic analysis and comparison of solid state drive data retention with trim enabled file systems","author":"nisbet","year":"0","journal-title":"Proc 11th Aust Digital Forensics Conf"},{"key":"ref29","author":"cohen","year":"2014","journal-title":"Rekall - Memory Forensics Analysis framework"},{"key":"ref5","author":"casey","year":"2011","journal-title":"Digital Evidence and Computer Crime—Forensic Science Computers and the Internet"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1080\/15567280701418171"},{"key":"ref7","article-title":"Embedded multi-media card (emmc), electrical standard (5.1)","year":"2015"},{"key":"ref2","article-title":"Electronic crime scene investigation: A guide to first responders","year":"2008"},{"key":"ref9","article-title":"The evolution of the fileless click-fraud malare Poweliks","author":"o\u2019murchu","year":"2015","journal-title":"Symantec Corp"},{"key":"ref1","article-title":"Tim Cook says Apple’s refusal to unlock iPhone for FBI is a ‘civil liberties’ issue","author":"holpuch","year":"2016","journal-title":"The Guardian"},{"key":"ref20","article-title":"(Un)Sicherheit Hardware-basierter Festplattenverschl üsselung","author":"m\u00fcller","year":"2012","journal-title":"29th Chaos Communication Congress (29C3)"},{"key":"ref22","article-title":"The feds can now (probably) unlock every iphone model in existence—Updated","author":"fox-brewster","year":"2018","journal-title":"Forbes"},{"key":"ref21","first-page":"1","author":"m\u00fcller","year":"2012","journal-title":"“Self-Encrypting Disks pose Self-Decrypting Risks How to Break Hardware-based Full Disk Encryption ”"},{"key":"ref24","first-page":"84","article-title":"Analysing android’s full disk encryption feature","volume":"5","author":"g\u00f6tzfried","year":"2014","journal-title":"J Wireless Mobile Netw Ubiquitous Comput Dependable Appl"},{"key":"ref23","article-title":"Mysterious $15,000 ‘GrayKey’ promises to unlock iPhone X for the feds","author":"fox-brewster","year":"2018","journal-title":"Forbes"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2012.04.005"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38980-1_23"}],"container-title":["IEEE Design & Test"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221038\/8472272\/08424163.pdf?arnumber=8424163","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:09:53Z","timestamp":1642003793000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8424163\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10]]},"references-count":37,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/mdat.2018.2862366","relation":{},"ISSN":["2168-2356","2168-2364"],"issn-type":[{"value":"2168-2356","type":"print"},{"value":"2168-2364","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,10]]}}}