| no |
title |
author |
magazine |
year |
volume |
issue |
page(s) |
type |
| 1 |
Android anti-forensics through a local paradigm
|
Distefano, Alessandro
|
|
2010
|
7 |
S |
p. S83-S94
12 p.
|
article
|
| 2 |
Automated mapping of large binary objects using primitive fragment type classification
|
Conti, Gregory
|
|
2010
|
7 |
S |
p. S3-S12
10 p.
|
article
|
| 3 |
Different interpretations of ISO9660 file systems
|
Carrier, Brian D.
|
|
2010
|
7 |
S |
p. S129-S134
6 p.
|
article
|
| 4 |
Digital forensics research: The next 10 years
|
Garfinkel, Simson L.
|
|
2010
|
7 |
S |
p. S64-S73
10 p.
|
article
|
| 5 |
Dynamic recreation of kernel data structures for live forensics
|
Case, Andrew
|
|
2010
|
7 |
S |
p. S32-S40
9 p.
|
article
|
| 6 |
Extracting Windows command line details from physical memory
|
Stevens, Richard M.
|
|
2010
|
7 |
S |
p. S57-S63
7 p.
|
article
|
| 7 |
Forensic investigation of peer-to-peer file sharing networks
|
Liberatore, Marc
|
|
2010
|
7 |
S |
p. S95-S103
9 p.
|
article
|
| 8 |
Hash based disk imaging using AFF4
|
Cohen, Michael
|
|
2010
|
7 |
S |
p. S121-S128
8 p.
|
article
|
| 9 |
If error rate is such a simple concept, why don’t I have one for my forensic tool yet?
|
Lyle, James R.
|
|
2010
|
7 |
S |
p. S135-S139
5 p.
|
article
|
| 10 |
Leaving timing-channel fingerprints in hidden service log files
|
Shebaro, Bilal
|
|
2010
|
7 |
S |
p. S104-S113
10 p.
|
article
|
| 11 |
Live memory forensics of mobile phones
|
Thing, Vrizlynn L.L.
|
|
2010
|
7 |
S |
p. S74-S82
9 p.
|
article
|
| 12 |
Prelim i - Editorial Board
|
|
|
2010
|
7 |
S |
p. i-
1 p.
|
article
|
| 13 |
Secure USB bypassing tool
|
Bang, Jewan
|
|
2010
|
7 |
S |
p. S114-S120
7 p.
|
article
|
| 14 |
Tenth annual DFRWS conference
|
|
|
2010
|
7 |
S |
p. S1-S2
2 p.
|
article
|
| 15 |
The Normalised Compression Distance as a file fragment classifier
|
Axelsson, Stefan
|
|
2010
|
7 |
S |
p. S24-S31
8 p.
|
article
|
| 16 |
Treasure and tragedy in kmem_cache mining for live forensics investigation
|
Case, Andrew
|
|
2010
|
7 |
S |
p. S41-S47
7 p.
|
article
|
| 17 |
Using purpose-built functions and block hashes to enable small block and sub-file forensics
|
Garfinkel, Simson
|
|
2010
|
7 |
S |
p. S13-S23
11 p.
|
article
|
| 18 |
Windows operating systems agnostic memory analysis
|
Okolica, James
|
|
2010
|
7 |
S |
p. S48-S56
9 p.
|
article
|
Journal description