| no |
title |
author |
magazine |
year |
volume |
issue |
page(s) |
type |
| 1 |
Advanced evidence collection and analysis of web browser activity
|
Oh, Junghoon
|
|
2011
|
8 |
S |
p. S62-S70
9 p.
|
article
|
| 2 |
An evaluation of forensic similarity hashes
|
Roussev, Vassil
|
|
2011
|
8 |
S |
p. S34-S41
8 p.
|
article
|
| 3 |
A system for the proactive, continuous, and efficient collection of digital forensic evidence
|
Shields, Clay
|
|
2011
|
8 |
S |
p. S3-S13
11 p.
|
article
|
| 4 |
Augmenting password recovery with online profiling
|
Al-Wehaibi, Khawla
|
|
2011
|
8 |
S |
p. S25-S33
9 p.
|
article
|
| 5 |
CAT Detect (Computer Activity Timeline Detection): A tool for detecting inconsistency in computer activity timelines
|
Marrington, Andrew
|
|
2011
|
8 |
S |
p. S52-S61
10 p.
|
article
|
| 6 |
Detecting data theft using stochastic forensics
|
Grier, Jonathan
|
|
2011
|
8 |
S |
p. S71-S77
7 p.
|
article
|
| 7 |
Distributed forensics and incident response in the enterprise
|
Cohen, M.I.
|
|
2011
|
8 |
S |
p. S101-S110
10 p.
|
article
|
| 8 |
Eleventh Annual DFRWS Conference
|
Venema, Wietse
|
|
2011
|
8 |
S |
p. S1-S2
2 p.
|
article
|
| 9 |
Empirical analysis of solid state disk data retention when used with contemporary operating systems
|
King, Christopher
|
|
2011
|
8 |
S |
p. S111-S117
7 p.
|
article
|
| 10 |
Extracting the windows clipboard from physical memory
|
Okolica, James
|
|
2011
|
8 |
S |
p. S118-S124
7 p.
|
article
|
| 11 |
Forensic carving of network packets and associated data structures
|
Beverly, Robert
|
|
2011
|
8 |
S |
p. S78-S89
12 p.
|
article
|
| 12 |
Prelim i - Editorial Board
|
|
|
2011
|
8 |
S |
p. i-
1 p.
|
article
|
| 13 |
Privacy-preserving network flow recording
|
Shebaro, Bilal
|
|
2011
|
8 |
S |
p. S90-S100
11 p.
|
article
|
| 14 |
Reconstructing corrupt DEFLATEd files
|
Brown, Ralf D.
|
|
2011
|
8 |
S |
p. S125-S131
7 p.
|
article
|
| 15 |
Toward a general collection methodology for Android devices
|
Vidas, Timothy
|
|
2011
|
8 |
S |
p. S14-S24
11 p.
|
article
|
| 16 |
Visualization in testing a volatile memory forensic tool
|
Inoue, Hajime
|
|
2011
|
8 |
S |
p. S42-S51
10 p.
|
article
|
Journal description