{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T08:54:28Z","timestamp":1780736068984,"version":"3.54.1"},"reference-count":24,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,5]]},"DOI":"10.23919\/mipro.2019.8756877","type":"proceedings-article","created":{"date-parts":[[2019,7,12]],"date-time":"2019-07-12T00:17:40Z","timestamp":1562890660000},"page":"1213-1218","source":"Crossref","is-referenced-by-count":14,"title":["Investigating file use and knowledge with Windows 10 artifacts"],"prefix":"10.23919","author":[{"given":"A.","family":"Duranec","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"D.","family":"Topolcic","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"K.","family":"Hausknecht","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"D.","family":"Delija","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","year":"2019","journal-title":"ShellBagsView v1 21"},{"key":"ref11","year":"2019","journal-title":"USN Journal"},{"key":"ref12","author":"oh","year":"2019","journal-title":"Advanced $UsnJrnl Forensics"},{"key":"ref13","year":"2017","journal-title":"Master File Table Basics"},{"key":"ref14","author":"oh","year":"2019","journal-title":"blueangel’s ForensicNote"},{"key":"ref15","year":"2018","journal-title":"USN_RECORD_V4 structure"},{"key":"ref16","year":"2018","journal-title":"File Attribute Constant"},{"key":"ref17","author":"metz","year":"2019","journal-title":"System Resource Usage Monitor (SRUM) database"},{"key":"ref18","author":"baggett","year":"2019","journal-title":"System Resource Utilization Monitor"},{"key":"ref19","year":"2019","journal-title":"ESEDatabaseView v1 62"},{"key":"ref4","year":"2019","journal-title":"Windows 10"},{"key":"ref3","year":"2019","journal-title":"List of microsoft windows versions"},{"key":"ref6","author":"zimmerman","year":"2019","journal-title":"Eric Zimmerman’s tools"},{"key":"ref5","author":"muchmore","year":"2019","journal-title":"MicroSoft Windows"},{"key":"ref8","author":"zimmerman","year":"2016","journal-title":"PECmd v0 6 0 0 released"},{"key":"ref7","author":"metz","year":"2017","journal-title":"Application Compatibility Cache Key"},{"key":"ref2","first-page":"3","author":"casey","year":"2011","journal-title":"Digital Evidence and Computer Crime"},{"key":"ref1","article-title":"Digital forensics","year":"2019","journal-title":"Retrieved from wikipedia"},{"key":"ref9","author":"ballenthin","year":"2019","journal-title":"Windows Shellbag Forensics"},{"key":"ref20","author":"chen","year":"2014","journal-title":"How do I convert a SID between binary and string forms?"},{"key":"ref22","author":"metz","year":"2019","journal-title":"Known Folder Identifiers"},{"key":"ref21","author":"metz","year":"2019","journal-title":"User Assist Key"},{"key":"ref24","author":"stevens","year":"2019","journal-title":"UserAssist"},{"key":"ref23","year":"2012","journal-title":"SANS Forensic Artifact 6"}],"event":{"name":"2019 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)","location":"Opatija, Croatia","start":{"date-parts":[[2019,5,20]]},"end":{"date-parts":[[2019,5,24]]}},"container-title":["2019 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8747288\/8756637\/08756877.pdf?arnumber=8756877","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,9,4]],"date-time":"2020-09-04T21:49:54Z","timestamp":1599256194000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8756877\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5]]},"references-count":24,"URL":"https:\/\/doi.org\/10.23919\/mipro.2019.8756877","relation":{},"subject":[],"published":{"date-parts":[[2019,5]]}}}