{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T14:53:56Z","timestamp":1781103236425,"version":"3.54.1"},"reference-count":20,"publisher":"IGI Global Scientific Publishing","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,1]]},"abstract":"<jats:p>In this article, the authors successfully created two new plugins one for Autopsy Forensic Tool, and the other for Volatility Framework. Both plugins are useful for encoding digital evidences in Forensic Lucid which is the goal of this work. The first plugin was integrated in Autopsy to generate a report for the case of a Brute Force Authentication attack by looking for evidence in server logs based on a key search. On the other hand, the second plugin named ForensicLucidDeviceTree aims to find whether a device stack has been infected by a root-kit or not expression is implied by the previous statement. The results of both plugins are shown in Forensic Lucid Format and were successfully compiled using GIPC compiler.<\/jats:p>","DOI":"10.4018\/ijdcf.2020010104","type":"journal-article","created":{"date-parts":[[2019,10,22]],"date-time":"2019-10-22T12:03:55Z","timestamp":1571745835000},"page":"58-89","source":"Crossref","is-referenced-by-count":1,"title":["Evaluation of Autopsy and Volatility for Cybercrime Investigation"],"prefix":"10.4018","volume":"12","author":[{"given":"Ahmed","family":"Almutairi","sequence":"first","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Behzad Shoarian","family":"Satari","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Carlos","family":"Rivas","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Cristian Florin","family":"Stanciu","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mozhdeh","family":"Yamani","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zahra","family":"Zohoorsaadat","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Serguei A.","family":"Mokhov","sequence":"additional","affiliation":[{"name":"Concordia University, Quebec, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"IJDCF.2020010104-0","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2007.06.010"},{"key":"IJDCF.2020010104-1","unstructured":"Carrier, B. D. (n.d.). Autopsy forensic browser. Sleuth Kit. Retrieved from http:\/\/www.sleuthkit.org\/autopsy\/"},{"key":"IJDCF.2020010104-2","unstructured":"Carrier, B. D. (n.d.). The Sleuth Kit. Sleuth Kit. Retrieved from Error! Hyperlink reference not valid.http:\/\/www.sleuthkit.org\/sleuthkit\/"},{"key":"IJDCF.2020010104-3","unstructured":"Ding, Y. (2004). Automated translation between graphical and textual representations of intentional programs in the GIPSY [Master\u2019s thesis]. Department of Computer Science and Software Engineering, Concordia University, Montreal, Canada. Retrieved from http:\/\/newton.cs.concordia.ca\/\u02dcpaquet\/filetransfer\/publications\/theses\/DingYiminMSc2004.pdf"},{"key":"IJDCF.2020010104-4","doi-asserted-by":"publisher","DOI":"10.1145\/3127041.3127055"},{"key":"IJDCF.2020010104-5","unstructured":"Han, B. (2010). Towards a multi-tier runtime system for GIPSY [Master\u2019s thesis]. Department of Computer Science and Software Engineering, Concordia University, Montreal, Canada."},{"key":"IJDCF.2020010104-6","unstructured":"Honeynet Project. (n.d.). Honeynet forensics project scans. Retrieved from http:\/\/old.honeynet.org\/scans)"},{"key":"IJDCF.2020010104-7","author":"Y.Ji","year":"2011","journal-title":"Scalability evaluation of the GIPSY runtime system (Master\u2019s thesis)"},{"key":"IJDCF.2020010104-8","author":"M. H.Ligh","year":"2014","journal-title":"The art of memory forensics: detecting malware and threats in Windows, Linux, and Mac memory"},{"key":"IJDCF.2020010104-9","author":"S. A.Mokhov","year":"2013","journal-title":"Intensional cyberforensics[PhD thesis].Department of Computer Science and Software Engineering, Concordia University"},{"key":"IJDCF.2020010104-10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-17040-4_11"},{"key":"IJDCF.2020010104-11","unstructured":"Palmer, G. (Ed.). (2001). A road map for digital forensic research, report from first digital forensic research workshop. DFRWS."},{"key":"IJDCF.2020010104-12","doi-asserted-by":"publisher","DOI":"10.1109\/ COMPSAC.2009.137"},{"key":"IJDCF.2020010104-13","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45111-0_17"},{"key":"IJDCF.2020010104-14","author":"A. H.Pourteymour","year":"2008","journal-title":"Comparative study of Demand Migration Framework implementation using JMS and Jini[Master\u2019s thesis]"},{"key":"IJDCF.2020010104-15","author":"L.Tao","year":"2004","journal-title":"Intensional value warehouse and garbage collection in the GIPSY[Master\u2019s thesis]"},{"key":"IJDCF.2020010104-16","author":"X.Tong","year":"2008","journal-title":"Design and implementation of context calculus in the GIPSY[Master\u2019s thesis]"},{"key":"IJDCF.2020010104-17","doi-asserted-by":"publisher","DOI":"10.1109\/EASe.2008.9"},{"key":"IJDCF.2020010104-18","author":"E. I.Vassev","year":"2005","journal-title":"General architecture for demand migration in the GIPSY demand-driven execution engine[Master\u2019s thesis]"},{"key":"IJDCF.2020010104-19","author":"A. H.Wu","year":"2009","journal-title":"OO-IP hybrid language design and a framework approach to the GIPC[PhD thesis]"}],"container-title":["International Journal of Digital Crime and Forensics"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=240651","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,5]],"date-time":"2022-05-05T19:55:52Z","timestamp":1651780552000},"score":1,"resource":{"primary":{"URL":"http:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/IJDCF.2020010104"}},"subtitle":["A Forensic Lucid Case Study"],"short-title":[],"issued":{"date-parts":[[2020,1]]},"references-count":20,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.4018\/ijdcf.2020010104","relation":{},"ISSN":["1941-6210","1941-6229"],"issn-type":[{"value":"1941-6210","type":"print"},{"value":"1941-6229","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,1]]}}}