{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T01:46:16Z","timestamp":1740102376713,"version":"3.37.3"},"reference-count":23,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,10,12]],"date-time":"2023-10-12T00:00:00Z","timestamp":1697068800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,10,12]],"date-time":"2023-10-12T00:00:00Z","timestamp":1697068800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,10,12]]},"DOI":"10.1109\/uemcon59035.2023.10315968","type":"proceedings-article","created":{"date-parts":[[2023,11,17]],"date-time":"2023-11-17T18:54:18Z","timestamp":1700247258000},"page":"171-181","source":"Crossref","is-referenced-by-count":1,"title":["User Profiling Attack Using Windows Registry Data"],"prefix":"10.1109","author":[{"given":"Edward L.","family":"Amoruso","sequence":"first","affiliation":[{"name":"University of Central Florida,Department of Electrical and Computer Engineering,Orlando,FL,US,32816"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cliff C.","family":"Zou","sequence":"additional","affiliation":[{"name":"University of Central Florida,Department of Computer Science,Orlando,FL,US,32816"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Richard","family":"Leinecker","sequence":"additional","affiliation":[{"name":"University of Central Florida,Department of Computer Science,Orlando,FL,US,32816"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","first-page":"128","article-title":"Windows 10 IT Pro Essentials Top 10 Tools","author":"Bott","year":"2016"},{"key":"ref2","article-title":"Investigating powershell attacks","author":"Kazanciyan","year":"2023","journal-title":"Mandiant"},{"key":"ref3","article-title":"Why Malicious Actors Love PowerShell Attacks and How to Defend Them","author":"Munroe","year":"2023","journal-title":"Rangeforce.com"},{"key":"ref4","article-title":"Hunting and Gathering with PowerShell","author":"Wojewoda","year":"2019","journal-title":"SANS Institute"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2009.06.009"},{"key":"ref6","article-title":"Behavior of Shellbags in windows 10","volume-title":"Ph.D. dissertation, Utica College","author":"Mize","year":"2018"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.23919\/mipro.2019.8756877"},{"journal-title":"Cybersecurity and Infrastructure Security Agency CISA","article-title":"Publicly Available Tools Seen in Cyber Incidents Worldwide","year":"2023","key":"ref8"},{"key":"ref9","article-title":"Entering a Covenant:.NET Command and Control","author":"Cobb","year":"2023","journal-title":"Specterops.io"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ccc.2016.18"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/isdfs49300.2020.9116258"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1080\/00450618.2018.1551421"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2009.06.009"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/spw.2013.38"},{"year":"2023","key":"ref15","article-title":"Windows Registry Cheat Sheet"},{"key":"ref16","article-title":"Windows Artifacts - Fahri Korkmaz - Medium","author":"Korkmaz","year":"2022","journal-title":"Medium"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/2094\/3\/032003"},{"key":"ref18","article-title":"Stealing Data By \u2018Living Off The Land,\u2019","author":"Yasin","year":"2015","journal-title":"Dark Reading"},{"journal-title":"Enlyft.com","article-title":"Companies using Microsoft Office 365","year":"2023","key":"ref19"},{"journal-title":"Microsoft Learn","article-title":"How to reset user options and registry settings in Word-Microsoft 365 Apps","year":"2022","key":"ref20"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.3390\/fi12100168"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-6193-4_10"},{"article-title":"NirSoft","year":"2023","author":"BrowsingHistoryView","key":"ref23"}],"event":{"name":"2023 IEEE 14th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","start":{"date-parts":[[2023,10,12]]},"location":"New York, NY, USA","end":{"date-parts":[[2023,10,14]]}},"container-title":["2023 IEEE 14th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10315953\/10315721\/10315968.pdf?arnumber=10315968","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,2]],"date-time":"2024-03-02T18:07:15Z","timestamp":1709402835000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10315968\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,12]]},"references-count":23,"URL":"https:\/\/doi.org\/10.1109\/uemcon59035.2023.10315968","relation":{},"subject":[],"published":{"date-parts":[[2023,10,12]]}}}