Matches in SemOpenAlex for { <https://semopenalex.org/work/W2081989812> ?p ?o ?g. }
Showing items 1 to 59 of
59
with 100 items per page.
- W2081989812 endingPage "S63" @default.
- W2081989812 startingPage "S57" @default.
- W2081989812 abstract "Current memory forensic tools concentrate mainly on system-related information like processes and sockets. There is a need for more memory forensic techniques to extract user-entered data retained in various Microsoft Windows applications such as the Windows command prompt. The command history is a prime source of evidence in many intrusions and other computer crimes, revealing important details about an offender’s activities on the subject system. This paper dissects the data structures of the command prompt history and gives forensic practitioners a tool for reconstructing the Windows command history from a Windows XP memory capture. At the same time, this paper demonstrates a methodology that can be generalized to extract user-entered data on other versions of Windows." @default.
- W2081989812 created "2016-06-24" @default.
- W2081989812 creator A5013979006 @default.
- W2081989812 creator A5062284123 @default.
- W2081989812 date "2010-08-01" @default.
- W2081989812 modified "2023-10-18" @default.
- W2081989812 title "Extracting Windows command line details from physical memory" @default.
- W2081989812 cites W2040527645 @default.
- W2081989812 cites W2083065619 @default.
- W2081989812 doi "https://doi.org/10.1016/j.diin.2010.05.008" @default.
- W2081989812 hasPublicationYear "2010" @default.
- W2081989812 type Work @default.
- W2081989812 sameAs 2081989812 @default.
- W2081989812 citedByCount "30" @default.
- W2081989812 countsByYear W20819898122012 @default.
- W2081989812 countsByYear W20819898122013 @default.
- W2081989812 countsByYear W20819898122014 @default.
- W2081989812 countsByYear W20819898122015 @default.
- W2081989812 countsByYear W20819898122016 @default.
- W2081989812 countsByYear W20819898122017 @default.
- W2081989812 countsByYear W20819898122018 @default.
- W2081989812 countsByYear W20819898122019 @default.
- W2081989812 countsByYear W20819898122020 @default.
- W2081989812 crossrefType "journal-article" @default.
- W2081989812 hasAuthorship W2081989812A5013979006 @default.
- W2081989812 hasAuthorship W2081989812A5062284123 @default.
- W2081989812 hasBestOaLocation W20819898121 @default.
- W2081989812 hasConcept C111919701 @default.
- W2081989812 hasConcept C2777904410 @default.
- W2081989812 hasConcept C41008148 @default.
- W2081989812 hasConcept C508378895 @default.
- W2081989812 hasConcept C556601545 @default.
- W2081989812 hasConcept C84418412 @default.
- W2081989812 hasConceptScore W2081989812C111919701 @default.
- W2081989812 hasConceptScore W2081989812C2777904410 @default.
- W2081989812 hasConceptScore W2081989812C41008148 @default.
- W2081989812 hasConceptScore W2081989812C508378895 @default.
- W2081989812 hasConceptScore W2081989812C556601545 @default.
- W2081989812 hasConceptScore W2081989812C84418412 @default.
- W2081989812 hasLocation W20819898121 @default.
- W2081989812 hasOpenAccess W2081989812 @default.
- W2081989812 hasPrimaryLocation W20819898121 @default.
- W2081989812 hasRelatedWork W1929436232 @default.
- W2081989812 hasRelatedWork W2119011851 @default.
- W2081989812 hasRelatedWork W2354060507 @default.
- W2081989812 hasRelatedWork W2361499900 @default.
- W2081989812 hasRelatedWork W2371792015 @default.
- W2081989812 hasRelatedWork W2382986841 @default.
- W2081989812 hasRelatedWork W2504308523 @default.
- W2081989812 hasRelatedWork W25917909 @default.
- W2081989812 hasRelatedWork W2937484179 @default.
- W2081989812 hasRelatedWork W4256444941 @default.
- W2081989812 hasVolume "7" @default.
- W2081989812 isParatext "false" @default.
- W2081989812 isRetracted "false" @default.
- W2081989812 magId "2081989812" @default.
- W2081989812 workType "article" @default.