DFIR Review

<!DOCTYPE html><html lang="en" data-reactroot=""><head><meta charSet="utf-8"/><link rel="alternate" type="application/rss+xml" title="DFIR Review RSS Feed" href="https://dfir.pubpub.org/rss.xml"/><title>DFIR Review</title><meta property="og:title" content="DFIR Review"/><meta name="twitter:title" content="DFIR Review"/><meta name="twitter:image:alt" content="DFIR Review"/><meta name="citation_title" content="DFIR Review"/><meta name="dc.title" content="DFIR Review"/><meta property="og:site_name" content="DFIR Review"/><meta name="citation_journal_title" content="DFIR Review"/><meta property="og:url" content="https://dfir.pubpub.org/"/><meta property="og:type" content="website"/><meta name="description" content="DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity."/><meta property="og:description" content="DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity."/><meta name="twitter:description" content="DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity."/><meta property="og:image" content="https://assets.pubpub.org/3ej3id6s/11553968629226.png"/><meta property="og:image:url" content="https://assets.pubpub.org/3ej3id6s/11553968629226.png"/><meta property="og:image:width" content="500"/><meta name="twitter:image" content="https://assets.pubpub.org/3ej3id6s/11553968629226.png"/><link rel="icon" type="image/png" sizes="256x256" href="https://assets.pubpub.org/c8g3oakn/41553968740088.png"/><meta property="fb:app_id" content="924988584221879"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@pubpub"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="google-site-verification" content="jmmJFnkSOeIEuS54adOzGMwc0kwpsa8wQ-L4GyPpPDg"/><link rel="stylesheet" type="text/css" href="/dist/main.8953e10b2e394e83bb73.css"/><link rel="search" type="application/opensearchdescription+xml" title="DFIR Review" href="/opensearch.xml"/></head><body class="layout-body-wrapper"><script>0</script><div id="root"><div id="app" class=""><style type="text/css">:root { --community-accent-dark: #2D2E2F; --community-accent-dark-faded-30: rgb(63, 63, 63); --community-accent-dark-faded: rgba(45, 46, 47, 0.050000000000000044); }</style><style> .accent-background { background-color: #2D2E2F; } .accent-color { color: #FFFFFF; } .accent-background.header-component, .accent-background.nav-bar-component, .accent-background.footer-component, .accent-background.nav-item-background, .accent-background.image-wrapper{ background-color: #2D2E2F; } .accent-color.header-component, .accent-color.nav-bar-component, .accent-color.footer-component, .accent-color.nav-item { color: #FFFFFF; } .bp3-button.bp3-intent-primary:not(.bp3-outlined) { background-color: rgba(45, 46, 47, 0.6); color: #FFFFFF; } .bp3-button.bp3-intent-primary:not(.bp3-outlined):hover:not(.bp3-disabled) { background-color: rgba(45, 46, 47, 0.8); color: #FFFFFF; } .bp3-button.bp3-intent-primary:not(.bp3-outlined):active:not(.bp3-disabled), .bp3-button.bp3-intent-primary.bp3-active:not(.bp3-disabled) { background-color: #2D2E2F; color: #FFFFFF; } .bp3-button.bp3-intent-primary.bp3-outlined { border-color: #2D2E2F; color: #2D2E2F; } .bp3-button.bp3-intent-primary.bp3-outlined:hover:not(.bp3-disabled) { background-color: rgba(45, 46, 47, 0.09999999999999998); color: #2D2E2F; } .bp3-button.bp3-intent-primary.bp3-outlined:active:not(.bp3-disabled), .bp3-button.bp3-intent-primary.bp3-active:not(.bp3-disabled) { background-color: rgba(45, 46, 47, 0.19999999999999996); color: #2D2E2F; } .bp3-tree-node.bp3-tree-node-selected > .bp3-tree-node-content { background-color: #2D2E2F; } .bp3-tag.bp3-intent-primary { background: #2D2E2F; color: #FFFFFF; } .bp3-tag.bp3-minimal.bp3-intent-primary { background-color: rgba(45, 46, 47, 0.09999999999999998); color: inherit; } .accent-color .bp3-button:not([class*="bp3-intent-primary"]), .accent-color .bp3-button:not([class*="bp3-intent-success"]), .accent-color .bp3-button:not([class*="bp3-intent-warning"]), .accent-color .bp3-button:not([class*="bp3-intent-danger"]), .accent-color .bp3-button[class*="bp3-icon"]::before { color: inherit; } .accent-color a, .accent-color a:hover { color: inherit; } .bp3-tab[aria-selected="true"], .bp3-tab:not([aria-selected="true"]):hover { box-shadow: inset 0 -3px 0 rgba(45, 46, 47, 0.09999999999999998); } .bp3-tab[aria-selected="true"] { box-shadow: inset 0 -3px 0 #2D2E2F; } .thread:hover:after { background-color: #2D2E2F; } .bp3-slider-progress.bp3-intent-primary, .bp3-dark .bp3-slider-progress.bp3-intent-primary { background: #2D2E2F; } .bp3-slider-handle .bp3-slider-label { background: #2D2E2F; color: #FFFFFF; } .highlight-dot-wrapper .highlight-dot { background-color: #2D2E2F; } .changelog-callout { background: rgba(45, 46, 47, 0.09999999999999998) !important; } .changelog-callout .release-label { color: #2D2E2F; border: 1px dashed #2D2E2F; } span.citation:hover { color: #2D2E2F; } .overflow-gradient { background: linear-gradient(90deg, rgba(45, 46, 47, 0) 0%, rgba(45, 46, 47, 0) 85%, #2D2E2F 100%); } </style><a href="#main-content" tabindex="0" class="skip-link-component tab-to-show-component">Skip to main content</a><header class="header-component accent-color" style="background-color:#0558b3"><div class="main"><div class="container "><div class="row"><div class="col-12 main-content"><div class="logo-wrapper"><a href="/" aria-label="DFIR Review"><img alt="" src="https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImhuZHdvMDAzLzYxNjc1Mzc0NjMxMDQ5LnBuZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJoZWlnaHQiOjUwLCJmaXQiOiJpbnNpZGUiLCJ3aXRob3V0RW5sYXJnZW1lbnQiOnRydWV9fX0="/></a></div><div class="global-controls-component"><a role="button" href="/search" aria-label="Search" class="bp3-button bp3-minimal mobile-aware-component__mobile" tabindex="0"><span icon="search" class="bp3-icon bp3-icon-search"><svg data-icon="search" width="16" height="16" viewBox="0 0 16 16"><path d="M15.55 13.43l-2.67-2.68a6.94 6.94 0 001.11-3.76c0-3.87-3.13-7-7-7s-7 3.13-7 7 3.13 7 7 7c1.39 0 2.68-.42 3.76-1.11l2.68 2.67a1.498 1.498 0 102.12-2.12zm-8.56-1.44c-2.76 0-5-2.24-5-5s2.24-5 5-5 5 2.24 5 5-2.24 5-5 5z" fill-rule="evenodd"></path></svg></span></a><a role="button" href="/search" aria-label="Search" class="bp3-button bp3-large bp3-minimal mobile-aware-component__desktop" tabindex="0"><span class="bp3-button-text">Search</span></a><button type="button" style="display:inline-flex;-webkit-appearance:unset" aria-expanded="false" aria-controls="id-2" aria-haspopup="menu" aria-label="Dashboard menu" class="bp3-button bp3-minimal mobile-aware-component__mobile"><span icon="settings" class="bp3-icon bp3-icon-settings"><svg data-icon="settings" width="16" height="16" viewBox="0 0 16 16"><path d="M3 1c0-.55-.45-1-1-1S1 .45 1 1v3h2V1zm0 4H1c-.55 0-1 .45-1 1v2c0 .55.45 1 1 1h2c.55 0 1-.45 1-1V6c0-.55-.45-1-1-1zm12-4c0-.55-.45-1-1-1s-1 .45-1 1v2h2V1zM9 1c0-.55-.45-1-1-1S7 .45 7 1v6h2V1zM1 15c0 .55.45 1 1 1s1-.45 1-1v-5H1v5zM15 4h-2c-.55 0-1 .45-1 1v2c0 .55.45 1 1 1h2c.55 0 1-.45 1-1V5c0-.55-.45-1-1-1zm-2 11c0 .55.45 1 1 1s1-.45 1-1V9h-2v6zM9 8H7c-.55 0-1 .45-1 1v2c0 .55.45 1 1 1h2c.55 0 1-.45 1-1V9c0-.55-.45-1-1-1zm-2 7c0 .55.45 1 1 1s1-.45 1-1v-2H7v2z" fill-rule="evenodd"></path></svg></span></button><button type="button" style="display:inline-flex;-webkit-appearance:unset" aria-expanded="false" aria-controls="id-2" aria-haspopup="menu" aria-label="Dashboard menu" class="bp3-button bp3-large bp3-minimal mobile-aware-component__desktop"><span class="bp3-button-text">Dashboard</span><span icon="caret-down" class="bp3-icon bp3-icon-caret-down"><svg data-icon="caret-down" width="16" height="16" viewBox="0 0 16 16"><desc>caret-down</desc><path d="M12 6.5c0-.28-.22-.5-.5-.5h-7a.495.495 0 00-.37.83l3.5 4c.09.1.22.17.37.17s.28-.07.37-.17l3.5-4c.08-.09.13-.2.13-.33z" fill-rule="evenodd"></path></svg></span></button><a role="button" href="/login?redirect=/" class="bp3-button bp3-minimal mobile-aware-component__mobile" tabindex="0"><span class="bp3-button-text">Login</span></a><a role="button" href="/login?redirect=/" class="bp3-button bp3-large bp3-minimal mobile-aware-component__desktop" tabindex="0"><span class="bp3-button-text">Login or Signup</span></a></div></div></div></div></div><div class="hero"><div class="container "><div class="row"><div class="col-12 hero-content"><div class="hero-copy"><div class="hero-title">DFIR Review</div><div class="hero-text">DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity</div><div class="hero-button"></div></div></div></div></div></div></header><nav class="nav-bar-component accent-background accent-color"><div class="container "><div class="row"><div class="col-12 "><div class="scrollable-nav"><ul class="nav-list"><li><a href="/"><span class="title">DFIR Review</span></a></li><li><a href="/blog"><span class="title">Stats</span></a></li><li><a href="/reviewers"><span class="title">Reviewers</span></a></li><li><a href="/submission-guidance"><span class="title">Submission Guidance</span></a></li><li><a href="/pub"><span class="title">Publications</span></a></li><li><a href="/about"><span class="title">Aims & Scope</span></a></li><li><a href="/review-guidance"><span class="title">Review Guidance</span></a></li><li><a href="/community"><span class="title">Community</span></a></li><li><a href="/dfrws"><span class="title">DFRWS.org</span></a></li></ul><div class="overflow-gradient"></div></div></div></div></div></nav><div id="main-content" tabindex="-1"><div id="" class="layout-component"><div class="layout-banner-component"><div class="block-content" style="background-color:#3275d8;min-height:60px;display:flex;align-items:center;max-width:none"><div class="container"><div class="row"><div class="col-12" style="text-align:center"><h2 style="color:#FFFFFF;line-height:1em;font-size:18px">We are actively seeking reviewers! Interested? Email us at <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="0763616e757562716e627047636175707429687560">[email protected]</a> </h2></div></div></div></div></div><div class="layout-banner-component"><div class="block-content" style="background-color:#3275d8;min-height:60px;display:flex;align-items:center;max-width:none"><div class="container"><div class="row"><div class="col-12" style="text-align:center"><h2 style="color:#FFFFFF;line-height:1em;font-size:18px">Submit topics of interest for research</h2><a role="button" class="bp3-button bp3-large" href="https://bit.ly/DFIRReviewRequests" tabindex="0"><span class="bp3-button-text">Research Request</span></a></div></div></div></div></div><div class="layout-pubs-block"><div class="block-content"><div class="container"><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/4fkeiv34" title="Location, Location, Location"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/4fkeiv34" title="Location, Location, Location"><h3 class="pub-title">Location, Location, Location</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Ian Whiffin</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InkzZzdkMDk1LzIxNTgwOTY2MDYyMDQ1LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Aug 29, 2024</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/5d08cdxl" title="How Did That Photo Get On That iPhone"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/5d08cdxl" title="How Did That Photo Get On That iPhone"><h3 class="pub-title">How Did That Photo Get On That iPhone</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Steve Bunting</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImdvMTczaWtuLzExNjgxMjM4Njk0ODkyLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Apr 04, 2024</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/6amsr72k" title="Peeking at User Notification Events in iOS 15"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/6amsr72k" title="Peeking at User Notification Events in iOS 15"><h3 class="pub-title">Peeking at User Notification Events in iOS 15</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Geraldine Blay</span> and <span>Alexis Brignoni</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>GB</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InFlYmN2OTluLzUxNTU0MTc0MzIzMzE0LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Aug 03, 2023</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/4sv4kxyh" title="iOS Location Services and System Services are they ON or OFF"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/4sv4kxyh" title="iOS Location Services and System Services are they ON or OFF"><h3 class="pub-title">iOS Location Services and System Services are they ON or OFF</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Scott Koenig</span> and <span>Ian Whiffin</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImYwODh1cjQ0LzAxNTk5NjAxNzIzNzIwLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InkzZzdkMDk1LzIxNTgwOTY2MDYyMDQ1LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Jul 11, 2022</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/xqvcn3hj" title="Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database"><div class="preview-image-component" style="background:linear-gradient(135deg, #cb2d3e, #ef973a)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/xqvcn3hj" title="Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database"><h3 class="pub-title">Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>James McGee</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>JM</div></div></div></span></span><div class="date-details"><span class="date">Published: Jan 05, 2023</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/xmjxofpd" title="Wipeout! Detecting Android Factory Resets"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/xmjxofpd" title="Wipeout! Detecting Android Factory Resets"><h3 class="pub-title">Wipeout! Detecting Android Factory Resets</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Joshua Hickman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InhrMmJ5OXkyLzYxNTU0MTQwOTQ1NzUxLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Nov 03, 2022</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/g2v1z97i" title="iOS KnowledgeC.db Notifications"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/g2v1z97i" title="iOS KnowledgeC.db Notifications"><h3 class="pub-title">iOS KnowledgeC.db Notifications</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Scott Koenig</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImYwODh1cjQ0LzAxNTk5NjAxNzIzNzIwLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Nov 03, 2022</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/yp6efc8q" title="An Alternate Location for Deleted SMS/iMessage Data in Apple Devices"><div class="preview-image-component" style="background:linear-gradient(135deg, #2c3e50, #4ca1af)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/yp6efc8q" title="An Alternate Location for Deleted SMS/iMessage Data in Apple Devices"><h3 class="pub-title">An Alternate Location for Deleted SMS/iMessage Data in Apple Devices</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>James McGee</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>JM</div></div></div></span></span><div class="date-details"><span class="date">Published: Nov 03, 2022</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/khnqi0ff" title="iOS Settings Display Auto-Lock & Require Passcode"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/khnqi0ff" title="iOS Settings Display Auto-Lock & Require Passcode"><h3 class="pub-title">iOS Settings Display Auto-Lock & Require Passcode</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Scott Koenig</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImYwODh1cjQ0LzAxNTk5NjAxNzIzNzIwLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Jun 02, 2022</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/4can3p40" title="Turbo Speed: Parsing Device Health Services from Google"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/4can3p40" title="Turbo Speed: Parsing Device Health Services from Google"><h3 class="pub-title">Turbo Speed: Parsing Device Health Services from Google</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Kevin Pagano</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>KP</div></div></div></span></span><div class="date-details"><span class="date">Published: Sep 28, 2022</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/z29xp2bu" title="Ain’t That a Kik in the Head: Kik Messenger iOS Analysis"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/z29xp2bu" title="Ain’t That a Kik in the Head: Kik Messenger iOS Analysis"><h3 class="pub-title">Ain’t That a Kik in the Head: Kik Messenger iOS Analysis</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Kevin Pagano</span> and <span>Alexis Brignoni</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>KP</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InFlYmN2OTluLzUxNTU0MTc0MzIzMzE0LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Apr 11, 2022</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/30nk59ar" title="Validation of X-Ways Forensics Evidence File Containers"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/30nk59ar" title="Validation of X-Ways Forensics Evidence File Containers"><h3 class="pub-title">Validation of X-Ways Forensics Evidence File Containers</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Larry Jones</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>LJ</div></div></div></span></span><div class="date-details"><span class="date">Published: Dec 29, 2021</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/h78di10n" title="USB Forensics – Recover more Volume Serial Numbers (VSNs) with the Windows 10 Partition/Diagnostic Event Log"><div class="preview-image-component" style="background:linear-gradient(135deg, #cb2d3e, #ef973a)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/h78di10n" title="USB Forensics – Recover more Volume Serial Numbers (VSNs) with the Windows 10 Partition/Diagnostic Event Log"><h3 class="pub-title">USB Forensics – Recover more Volume Serial Numbers (VSNs) with the Windows 10 Partition/Diagnostic Event Log</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Alexandros Vasilaras</span>, <span>Evangelos Dragonas</span>, and <span>Dimitrios Katsoulis</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>AV</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px"><div>ED</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-2;border-radius:50%;margin-right:-9.9px"><div>DK</div></div></div></span></span><div class="date-details"><span class="date">Published: May 26, 2021</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/33vkc2ul" title="Missing SQLite Records Analysis"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/33vkc2ul" title="Missing SQLite Records Analysis"><h3 class="pub-title">Missing SQLite Records Analysis</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Shafik Punja</span> and <span>Ian Whiffin</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>SP</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InkzZzdkMDk1LzIxNTgwOTY2MDYyMDQ1LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Jul 29, 2021</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/h6vyh33u" title="Case Study: Forensic Analysis of TikTok on iOS"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/h6vyh33u" title="Case Study: Forensic Analysis of TikTok on iOS"><h3 class="pub-title">Case Study: Forensic Analysis of TikTok on iOS</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Dr. Graeme Horsman</span> and <span>Linda Shou</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>DH</div></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px"><div>LS</div></div></div></span></span><div class="date-details"><span class="date">Published: Apr 11, 2022</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/6i7d593n" title="Upgrade From NULL—Detecting iOS Wipe Artifacts"><div class="preview-image-component" style="background:linear-gradient(135deg, #2c3e50, #4ca1af)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/6i7d593n" title="Upgrade From NULL—Detecting iOS Wipe Artifacts"><h3 class="pub-title">Upgrade From NULL—Detecting iOS Wipe Artifacts</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Heather Mahalik</span> and <span>Ian Whiffin</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InE5MG9iYnd3LzIxNTU0MjkzMTE2Nzk2LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InkzZzdkMDk1LzIxNTgwOTY2MDYyMDQ1LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Jun 24, 2021</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/gqqxl93l" title="Extracting and Decrypting iOS Keychain: Physical, Logical and Cloud Options Explored"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/gqqxl93l" title="Extracting and Decrypting iOS Keychain: Physical, Logical and Cloud Options Explored"><h3 class="pub-title">Extracting and Decrypting iOS Keychain: Physical, Logical and Cloud Options Explored</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Vladimir Katalov</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>VK</div></div></div></span></span><div class="date-details"><span class="date">Published: Feb 04, 2021</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/v19rksyf" title="Using Photos.sqlite to Show the Relationships Between Photos and the Application they were Created with?"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/v19rksyf" title="Using Photos.sqlite to Show the Relationships Between Photos and the Application they were Created with?"><h3 class="pub-title">Using Photos.sqlite to Show the Relationships Between Photos and the Application they were Created with?</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Scott Koenig</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6ImYwODh1cjQ0LzAxNTk5NjAxNzIzNzIwLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Feb 04, 2021</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/nm5b39ae" title="Can You Track Processes Accessing the Camera and Microphone on Windows 10?"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/nm5b39ae" title="Can You Track Processes Accessing the Camera and Microphone on Windows 10?"><h3 class="pub-title">Can You Track Processes Accessing the Camera and Microphone on Windows 10?</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Zachary Stanford</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>ZS</div></div></div></span></span><div class="date-details"><span class="date">Published: Nov 19, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/frknihlg" title="How to Use iOS Bluetooth Connections to Solve Crimes Faster"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/frknihlg" title="How to Use iOS Bluetooth Connections to Solve Crimes Faster"><h3 class="pub-title">How to Use iOS Bluetooth Connections to Solve Crimes Faster</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Heather Mahalik</span> and <span>Matt Goeckel</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InE5MG9iYnd3LzIxNTU0MjkzMTE2Nzk2LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:-1;border-radius:50%;margin-right:-9.9px"><div>MG</div></div></div></span></span><div class="date-details"><span class="date">Published: Nov 16, 2020</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/d39u7lg1" title="Can Google Takeout Location Data Be Trusted?"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/d39u7lg1" title="Can Google Takeout Location Data Be Trusted?"><h3 class="pub-title">Can Google Takeout Location Data Be Trusted?</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Ross Donnelly</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>RD</div></div></div></span></span><div class="date-details"><span class="date">Published: Nov 02, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/6ysxvhvc" title="How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/6ysxvhvc" title="How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident"><h3 class="pub-title">How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Heather Mahalik</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InE5MG9iYnd3LzIxNTU0MjkzMTE2Nzk2LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Nov 05, 2020</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/9llea7yp" title="Tinkering with TikTok Timestamps"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/9llea7yp" title="Tinkering with TikTok Timestamps"><h3 class="pub-title">Tinkering with TikTok Timestamps</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Ryan Benson</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>RB</div></div></div></span></span><div class="date-details"><span class="date">Published: Sep 25, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/wfuxlu9v" title="Windows 10 Jump List and Link File Artifacts - Saved, Copied and Moved"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/wfuxlu9v" title="Windows 10 Jump List and Link File Artifacts - Saved, Copied and Moved"><h3 class="pub-title">Windows 10 Jump List and Link File Artifacts - Saved, Copied and Moved</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Larry Jones</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>LJ</div></div></div></span></span><div class="date-details"><span class="date">Published: Sep 25, 2020</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/xbvsrjt5" title="Parsing Google’s Now Playing History on Pixel Devices"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/xbvsrjt5" title="Parsing Google’s Now Playing History on Pixel Devices"><h3 class="pub-title">Parsing Google’s Now Playing History on Pixel Devices</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Kevin Pagano</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>KP</div></div></div></span></span><div class="date-details"><span class="date">Published: Aug 31, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/inkjsqrh" title="Chromebook Forensic Acquisition"><div class="preview-image-component" style="background:linear-gradient(135deg, #cb2d3e, #ef973a)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/inkjsqrh" title="Chromebook Forensic Acquisition"><h3 class="pub-title">Chromebook Forensic Acquisition</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Daniel Dickerman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px"><div>DD</div></div></div></span></span><div class="date-details"><span class="date">Published: May 26, 2020</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/jxjn4j8a" title="OK Computer...er...Google. Dissecting Google Assistant (Part Deux)"><div class="preview-image-component" style="background:linear-gradient(-45deg, #ad5389, #3c1053)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/jxjn4j8a" title="OK Computer...er...Google. Dissecting Google Assistant (Part Deux)"><h3 class="pub-title">OK Computer...er...Google. Dissecting Google Assistant (Part Deux)</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Joshua Hickman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InhrMmJ5OXkyLzYxNTU0MTQwOTQ1NzUxLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: May 26, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/eivkytr1" title="OK Computer...er...Google. Dissecting Google Assistant (Part 1)"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/eivkytr1" title="OK Computer...er...Google. Dissecting Google Assistant (Part 1)"><h3 class="pub-title">OK Computer...er...Google. Dissecting Google Assistant (Part 1)</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Joshua Hickman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InhrMmJ5OXkyLzYxNTU0MTQwOTQ1NzUxLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: May 26, 2020</span></div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/wpbdig8l" title="Google Search Bar & Search Term History - Are You Finding Everything?"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/wpbdig8l" title="Google Search Bar & Search Term History - Are You Finding Everything?"><h3 class="pub-title">Google Search Bar & Search Term History - Are You Finding Everything?</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Joshua Hickman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InhrMmJ5OXkyLzYxNTU0MTQwOTQ1NzUxLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: May 26, 2020</span></div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/716tlra7" title="Ka-Chow!!! Driving Android Auto"><div class="preview-image-component" style="background:linear-gradient(135deg, #2c3e50, #4ca1af)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/716tlra7" title="Ka-Chow!!! Driving Android Auto"><h3 class="pub-title">Ka-Chow!!! Driving Android Auto</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Joshua Hickman</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InhrMmJ5OXkyLzYxNTU0MTQwOTQ1NzUxLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Mar 31, 2019</span></div><div class="description">What information is recoverable from an Android device that is connected to a vehicle with using the Android Auto app?</div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/httnwst7" title="What was my IP? Ask DoSvc on Windows 10"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/httnwst7" title="What was my IP? Ask DoSvc on Windows 10"><h3 class="pub-title">What was my IP? Ask DoSvc on Windows 10</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Gabriele Zambelli</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6IjFxZHM1OGduLzAxNTU0MjI0NzcxNjQwLmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Mar 31, 2019</span></div><div class="description">What was the public IP address of a Windows 10 device?</div></div></div></div></div><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/e5xlbw88" title="iOS Mobile Installation Logs"><div class="preview-image-component" style="background:linear-gradient(-45deg, #00bf8f, #001510)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/e5xlbw88" title="iOS Mobile Installation Logs"><h3 class="pub-title">iOS Mobile Installation Logs</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Alexis Brignoni</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InFlYmN2OTluLzUxNTU0MTc0MzIzMzE0LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Mar 31, 2019</span></div><div class="description">What applications were installed on an iOS device and when?</div></div></div></div></div></div><div class="row"><div class="col-6"><div class="pub-preview-component medium-preview"><div class="preview-image-wrapper"><a href="https://dfir.pubpub.org/pub/2q177smo" title="How was an iPhone set up?"><div class="preview-image-component" style="background:linear-gradient(135deg, #000046, #1cb5e0)"></div></a></div><div class="content-wrapper"><div class="content"><div class="title-wrapper"><a href="https://dfir.pubpub.org/pub/2q177smo" title="How was an iPhone set up?"><h3 class="pub-title">How was an iPhone set up?</h3></a></div><div class="authors"><div class="byline-component"><span class="text-wrapper"><span>by </span><span>Heather Mahalik</span></span></div></div><span class="bp3-popover-wrapper"><span class="bp3-popover-target"><div class="avatars-component contributor-avatars"><div class="avatar-component" style="width:22px;min-width:22px;height:22px;border-color:#eee;border-width:2px;font-size:8px;background-color:#2D2E2F;z-index:0;border-radius:50%;margin-right:-9.9px;background-image:url("https://resize-v3.pubpub.org/eyJidWNrZXQiOiJhc3NldHMucHVicHViLm9yZyIsImtleSI6InE5MG9iYnd3LzIxNTU0MjkzMTE2Nzk2LmpwZyIsImVkaXRzIjp7InJlc2l6ZSI6eyJ3aWR0aCI6NTAsImhlaWdodCI6NTAsImZpdCI6ImNvdmVyIiwid2l0aG91dEVubGFyZ2VtZW50Ijp0cnVlfX19")"></div></div></span></span><div class="date-details"><span class="date">Published: Mar 31, 2019</span></div><div class="description">Was an iPhone restored from iCloud, iTunes backup or started from scratch?</div></div></div></div></div></div></div></div></div><div class="layout-pubs-block"><div class="block-content"><div class="container"><div class="row"><div class="col-12"><h1>Featured Posts</h1></div></div></div></div></div></div></div><div class="footer-component accent-background accent-color"><div class="container "><div class="row"><div class="col-12 "><div class="left"></div><div class="right"><div class="footer-title"><a href="/">DFIR Review</a></div><ul class="separated"><li><a class="link" href="/rss.xml">RSS</a></li><li><a class="link" href="/legal">Legal</a></li></ul></div></div></div></div><div class="built-on"><a href="https://www.pubpub.org">Published with<img class="logo" src="/static/logoWhite.svg" alt="PubPub logo"/></a></div></div></div></div><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script crossorigin="anonymous" src="https://polyfill-fastly.io/v3/polyfill.min.js?features=default,fetch,HTMLCanvasElement.prototype.toBlob,Node.prototype.contains,Array.prototype.find,Array.from,Number.isNaN,Object.assign,Object.entries,Object.values,Promise,requestIdleCallback,String.prototype.includes,URL,URLSearchParams"></script><script id="initial-data" type="text/plain" data-json="{"communityData":{"id":"b0ac9c28-479a-496c-884c-7ae8fc26e385","subdomain":"dfir","domain":null,"title":"DFIR Review","citeAs":null,"publishAs":null,"description":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","avatar":"https://assets.pubpub.org/3yqqvtl4/71553968763873.png","favicon":"https://assets.pubpub.org/c8g3oakn/41553968740088.png","accentColorLight":"#FFFFFF","accentColorDark":"#2D2E2F","hideCreatePubButton":true,"headerLogo":"https://assets.pubpub.org/hndwo003/61675374631049.png","headerLinks":null,"headerColorType":"dark","useHeaderTextAccent":false,"hideHero":false,"hideHeaderLogo":false,"heroLogo":null,"heroBackgroundImage":null,"heroBackgroundColor":"#0558b3","heroTextColor":null,"useHeaderGradient":true,"heroImage":null,"heroTitle":"DFIR Review","heroText":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","heroPrimaryButton":{},"heroSecondaryButton":{},"heroAlign":"left","navigation":[{"id":"0f373a2c-c88d-4615-901f-9f3007392c8a","type":"page"},{"id":"b4ba8d5a-2328-4d86-ad66-f8c2c76a506f","type":"page"},{"id":"a8a6a998-952b-45ac-9dde-1e1fef976417","type":"page"},{"id":"6a7dd0ce-1852-4aa8-b858-dd9e4fcc23e7","type":"page"},{"id":"c9d33e1b-70ca-4f00-935e-8b048a2db8aa","type":"page"},{"id":"b1a5d079-3ee0-4434-a65f-c1b0cc624b45","type":"page"},{"id":"2bd22226-03c8-4300-b555-73eb1d6a582d","type":"page"},{"id":"9a0a763a-139f-4380-8620-47bf9e307106","type":"page"},{"id":"a7126096-fe0b-49af-a377-e69d372934d0","type":"page"}],"hideNav":false,"navLinks":null,"footerLinks":null,"footerLogoLink":null,"footerTitle":null,"footerImage":null,"website":"","facebook":"","twitter":"","instagram":null,"mastodon":null,"linkedin":null,"bluesky":null,"github":null,"email":"","socialLinksLocation":null,"issn":null,"isFeatured":null,"viewHash":"qz0cilrt","editHash":"bqi37oih","premiumLicenseFlag":false,"defaultPubCollections":[],"analyticsSettings":null,"spamTagId":"16a43a5f-d437-4a0a-9721-4781fc993f4e","organizationId":null,"scopeSummaryId":"aa45c5c8-46a9-480c-912b-0ace04e252d4","createdAt":"2019-03-23T18:09:32.984Z","updatedAt":"2023-02-02T21:50:33.149Z","scopeSummary":{"id":"aa45c5c8-46a9-480c-912b-0ace04e252d4","collections":1,"pubs":41,"discussions":8,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:49:17.482Z","updatedAt":"2025-03-18T02:21:15.927Z"},"spamTag":{"id":"16a43a5f-d437-4a0a-9721-4781fc993f4e","status":"unreviewed","statusUpdatedAt":null,"fields":{},"spamScore":0,"spamScoreComputedAt":"2023-02-02T21:50:33.162Z","spamScoreVersion":1,"createdAt":"2022-12-07T19:10:59.508Z","updatedAt":"2023-02-02T21:50:33.162Z"},"pages":[{"id":"b1a5d079-3ee0-4434-a65f-c1b0cc624b45","title":"Aims & Scope","slug":"about","description":"DFIR Review Aims & Scope","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"e8ydkitt","layout":[{"id":"wpmh8voe","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"heading","attrs":{"id":"dfir-review---aims-scope","rtl":null,"level":1,"fixedId":"","textAlign":null},"content":[{"text":"DFIR Review - Aims & Scope","type":"text"}]},{"type":"paragraph","attrs":{"id":"nk8u9egeeah","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Rapid review and dissemination of up-to-date results of applied research and testing is necessary to keep pace with changes in technology and cybercrime. The Internet-of-Things (IoT) and smartphone applications are prime examples of the unprecedented proliferation of new devices and digital traces. New versions of operating systems can also have data structures that contain valuable information from a forensic perspective. When a new type of digital trace is found to be relevant to a legal matter, it may be the first time it has been studied from a forensic perspective. New approaches to analysing digital traces can help develop insights in an investigation. Often this type of material is shared via blogs by active practitioners who are the first to tackle new devices, uncover new digital traces, and encounter new forms of criminal activity. Currently, these posts do not undergo community review or vetting, and are not presented or published in a formalized forum for long term reference. The faster this knowledge can be produced, reviewed, and shared among the DFIR community, the better able we will be to deal with new devices, digital traces, and criminal activities. DFIR Review aims to take the up-to-date rapid content created by practitioners and distributed regularly via blogs and provide review such that the findings can be cited and stored in a referenceable format so that it may be used by others including for reference in legal and other matters while crediting the originating source such as a practitioner blog.","type":"text"}]},{"type":"paragraph","attrs":{"id":"n3ng0n83wot","rtl":null,"class":null,"textAlign":null}},{"type":"heading","attrs":{"id":"review","rtl":null,"level":3,"fixedId":"","textAlign":null},"content":[{"text":"Review","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"nljdv0w59dg","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Submissions to DFIR Review will be reviewed rapidly by a panel of qualified members of the community to include practitioners, researchers, graduate students and others working in the digital forensics field. Submissions will be accepted or rejected on the basis of reviewer responses following these criteria:","type":"text"}]},{"type":"paragraph","attrs":{"id":"nxkaguaiv0n","rtl":null,"class":"rtecenter","textAlign":null},"content":[{"text":"Reviewer Guidance","type":"text","marks":[{"type":"link","attrs":{"href":"review-guidance","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"ne057aizup3","rtl":null,"class":null,"textAlign":null},"content":[{"text":"For accepted submissions, reviewers will provide a detailed response including comments, further research concepts that may not have been explored, as well as validation and/or verification of initial research. The intent is that this response material will be presented along with the submission on DFIR Review.","type":"text"}]},{"type":"paragraph","attrs":{"id":"nj7lk5w62hk","rtl":null,"class":null,"textAlign":null}},{"type":"heading","attrs":{"id":"presentation","rtl":null,"level":3,"fixedId":"","textAlign":null},"content":[{"text":"Presentation","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"nmlms51diln","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Accepted submissions will be made available on the DFRWS website open access under the CC BY-NC-ND license (http://creativecommons.org/licenses/by-nc-nd/4.0/). Accepted submissions will be organized along with reviewer response materials. Although authors can revise accepted materials on the basis of reviewer feedback, this is not a requirement for publication, taking into account that practitioners may not have time to rework a submission or perform additional research. Authors can post their work on their personal website or blog with a reference to the publication in DFIR Review. In this way, DFIR Review is the system of record for the work, and authors can disseminate their work with a reference to the publication in DFIR Review.","type":"text"}]},{"type":"paragraph","attrs":{"id":"naicemtgxdg","rtl":null,"class":null,"textAlign":null}},{"type":"heading","attrs":{"id":"submissions","rtl":null,"level":3,"fixedId":"","textAlign":null},"content":[{"text":"Submissions","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"n5ghelqimur","rtl":null,"class":null,"textAlign":null},"content":[{"text":"DFIR Review welcomes submissions that provide up-to-date knowledge in digital forensics and incident response, as well as test results that validate or update prior studies. The DFIR Review community will actively encourage authors to submit their work, and will assist authors throughout the submission process as needed. Topics of interest include:","type":"text"}]},{"type":"bullet_list","attrs":{"id":"n8yhzvlmrlq","rtl":null},"content":[{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"nn3ihqrnag2","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Forensic treatment of new devices, including Internet-of-Things","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"nedidix8y5q","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Forensic analysis of new smartphone apps or updated versions (inclusion of open source tools encouraged)","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"nlt1vg7bgka","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Forensic analysis of new data structures on operating systems","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"nhoxhzvfab7","rtl":null,"class":null,"textAlign":null},"content":[{"text":"New methods of analysing digital traces to find patterns, links and other insights","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"n4emu4f3xwp","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Insights into new ways that criminals are using technology, emphasizing technical elements and potential solutions","type":"text"}]}]},{"type":"list_item","content":[{"type":"paragraph","attrs":{"id":"nvo51ty1z6o","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Validation and testing of new forensic tool features (inclusion of test data preferred)","type":"text"}]}]}]},{"type":"paragraph","attrs":{"id":"ny6tg2u0pg2","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Submit via EasyChair: ","type":"text"},{"text":"https://easychair.org/conferences/?conf=dfirr2023","type":"text","marks":[{"type":"link","attrs":{"href":"https://easychair.org/conferences/?conf=dfirr2023","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"n09z0jhp5vv","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Submission implies that the work will not have been published elsewhere (except in as an abstract, academic thesis, preprint or personal blog), and publication in a virtual proceedings is approved by all authors and tacitly or explicitly by the responsible authorities where the work was carried out. Authors of high impact work will be encouraged to further develop their work and submit it to DFRWS conferences and other DFIR community events and publications.","type":"text"}]},{"type":"paragraph","attrs":{"id":"ncgh3dca42r","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Inquiries can be directed to DFIR@dfrws.org","type":"text"}]},{"type":"paragraph","attrs":{"id":"nwbwbuygrva","rtl":null,"class":null,"textAlign":null}},{"type":"heading","attrs":{"id":"copyright-and-rights","rtl":null,"level":3,"fixedId":"","textAlign":null},"content":[{"text":"Copyright and Rights","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"n1kp4gmi6mu","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Authors will retain copyright of their work in DFIR Review. Authors will grant DFRWS the non-exclusive right to include the material in any form throughout the world, in all languages, for all time, effective when and if the work is accepted for publication.","type":"text"}]}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-30T17:21:31.710Z"},{"id":"a7126096-fe0b-49af-a377-e69d372934d0","title":"DFRWS.org","slug":"dfrws","description":"DFRWS community support and activities.","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"m6xca1m0","layout":[{"id":"jcfro4os","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"heading","attrs":{"id":"dfrws","level":1},"content":[{"text":"DFRWS","type":"text","currIndex":0}],"currIndex":0},{"type":"paragraph","attrs":{"class":null},"content":[{"text":"DFIR Review is part of DFRWS, a non-profit, volunteer organization dedicated to bringing together everyone with a legitimate interest in digital forensics to address the emerging challenges of our field. DFRWS organizes digital forensic conferences, challenges, and international collaboration to help drive the direction of research and development.","type":"text","currIndex":0}],"currIndex":1},{"type":"paragraph","attrs":{"class":null},"currIndex":2},{"type":"paragraph","attrs":{"class":null},"content":[{"text":"Additional information about DFRWS conferences and publications: ","type":"text","currIndex":0},{"text":"www.DFRWS.org","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.dfrws.org","title":null,"target":null}}],"currIndex":1}],"currIndex":3}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-31T06:36:38.964Z"},{"id":"c9d33e1b-70ca-4f00-935e-8b048a2db8aa","title":"Publications","slug":"pub","description":"Published work and reviews.","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"54wh5ywg","layout":[{"id":"amkwtrbk","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"heading","attrs":{"id":"dfir-review---publications","level":1},"content":[{"text":"DFIR Review - Publications","type":"text","currIndex":0}],"currIndex":0},{"type":"paragraph","attrs":{"class":null},"content":[{"text":"Reviewed and accepted work addressing emerging challenges in digital forensics, incident response, and cyber-investigation. ","type":"text","currIndex":0}],"currIndex":1}]},"align":"left"}},{"id":"gruw36cv","type":"pubs","content":{"size":"medium","limit":0,"title":"","pubIds":[],"pubPreviewType":"medium"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-31T06:32:20.073Z"},{"id":"a8a6a998-952b-45ac-9dde-1e1fef976417","title":"Reviewers","slug":"reviewers","description":"Thank you page acknowledging our reviewers","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"aj895cs6","layout":[{"id":"n102ug0t","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"fta2auwwsi","class":null},"content":[{"text":"Thank you to all of the volunteer reviewers who contribute their time to conduct thorough reviews of DFIR Review. Please see the bios of selected reviewers below.","type":"text"}]},{"type":"paragraph","attrs":{"id":"0pl4vgpemk","class":null}},{"type":"paragraph","attrs":{"id":"3rcmkxfsl1","class":null},"content":[{"text":"Addisu Afework","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"efzsdtbd9a","class":null},"content":[{"text":"Addisu Afework is a Digital Forensics researcher in a governmental agency. Since 2017, he has been performing digital forensics research on smart home IoT devices. Before studying his MSc in Legal Informatics and Digital Forensics Science, he was working in the cybersecurity field since 2009 as a cybersecurity engineer. Currently, he is working on developing tools and procedures in the digital forensics investigation area. Addisu is interested in researching and developing tools and methods to assist digital forensic investigators to easily and efficiently conduct investigations. ","type":"text"}]},{"type":"paragraph","attrs":{"id":"p0ks0nrivq","class":null}},{"type":"paragraph","attrs":{"id":"ms99wbnrut","class":null},"content":[{"text":"Timothy Bollé","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"uld75x0t2x","class":null},"content":[{"text":"Timothy Bollé is a PhD Student in Digital Forensic and Investigation at the University of Lausanne, under the supervision of Dr. Eoghan Casey. He received his BSc and MSc in forensic science, from the School of Criminal Sciences at the University of Lausanne. During his master, he performed research and development in collaboration with Swiss police to detect repetitions in online fraud. His area of expertise includes research and development in digital forensic science, specializing in machine learning. His PhD research focuses on effective use of machine learning to support forensic analysis of digital evidence. Alongside his PhD and teaching activities, he performed practical case work through the forensic science laboratory that is part the School of Criminal Sciences. When he is not in front of his computer, he enjoys to look at the various astronomical objects through his telescope. He his currently working on his thesis and on developing correlation systems to find links across different cases for a European project. You can reach him at timothy.bolle@unil.ch.","type":"text"}]},{"type":"paragraph","attrs":{"id":"maarbjqhfa","class":null}},{"type":"paragraph","attrs":{"id":"0kxc8cughk","class":null},"content":[{"text":"Ali Hadi","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"sl2qlnesfh","class":null},"content":[{"text":"Ali Hadi is a Senior Cybersecurity Specialist with 14+ years of industrial experience in Information Technology (IT), currently working as a full time professor and researcher for the Computer & Digital Forensics Dept. at Champlain College, USA. He provides consulting in several areas of Cybersecurity including digital forensics and incident response, malware analysis, cyber threat hunting, and penetration testing. He is also an author, speaker, and freelance instructor. His research interests include digital forensics, incident response, cyber threat hunting, and malware analysis.","type":"text"}]},{"type":"paragraph","attrs":{"id":"unbzsbrrog","class":null}},{"type":"paragraph","attrs":{"id":"1dwltx7xjj","class":null},"content":[{"text":"Jessica Hyde","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"vavo0ol12x","class":null},"content":[{"text":"Jessica Hyde is an experienced forensic examiner in both the commercial and government sectors. She is currently the Director of Forensics at Magnet Forensics and an Adjunct Professor teaching Mobile Forensics in the graduate program at George Mason University, where she achieved an MS in Computer Forensics. Jessica is the host of Cache Up, a weekly podcast where she interviews digital forensics practitioners. She is also involved in several community efforts including as Chair of DFIR Review, 1st Vice President of the New York Metro High Tech Crime International Association Chapter, advisory board for Cyber Sleuths Lab, and a member of the Editorial Board for the Forensic Science International: Digital Investigations Journal. Her previous roles included performing forensic examinations as a Sr. Mobile Exploitation Analyst for Basis Technology, Senior at EY, and Senior Electrical Engineer at American Systems. Jessica is also proud to be a veteran of the United States Marine Corps.","type":"text"}]},{"type":"paragraph","attrs":{"id":"4r8m1leg9d","class":null}},{"type":"paragraph","attrs":{"id":"cnx7uh53hc","class":null},"content":[{"text":"Alex O. Ogbole","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"w1olaw9uge","class":null},"content":[{"text":"He is an Investigator and Digital Forensic Analyst with the Economic and Financial Crimes Commission (EFCC) Nigeria. He has over a decade’s experience in digital forensics, evidence management, and investigation of financial and cyber-related criminal cases. He holds a bachelor’s degree in computer sciences and a master’s degree (in-view) in Legal Informatics and Forensic Science from Hallym University Chuncheon, South Korea. ","type":"text"}]},{"type":"paragraph","attrs":{"id":"rny1zjjden","class":null}},{"type":"paragraph","attrs":{"id":"ev024rb2ea","class":null},"content":[{"text":"Elénore Ryser","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"f9j3x9kxtz","class":null},"content":[{"text":"Elénore Ryser has a MSc in Forensic Science and is a PhD student at the University of Lausanne. Her main areas of research cover a typology of digital traces, the evaluation of digital traces and communication of digital forensic results as well as geo-localisation evidences. In 2019, she received a grant from the Société Académique Vaudoise to support her PhD research.","type":"text"}]},{"type":"paragraph","attrs":{"id":"nv29rz80i96","class":null}},{"type":"paragraph","attrs":{"id":"n4f1d0jonc3","class":null},"content":[{"text":"Brett Shavers","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"nblu5btvwzi","class":null},"content":[{"text":"Brett Shavers is a digital forensics examiner whose experience spans a law enforcement career investigating cybercrime and serving as a consultant, expert witness, and special master in civil litigation cases. Brett has well over 1,000 hours of formal digital forensics training from a variety of U.S. federal agencies and forensic software companies. He has provided private consultation to government agencies and law firms in sensitive legal matters ranging from internal employee matters to class action litigation. Brett has also taught digital forensics and investigative techniques to dozens of law enforcement agencies internationally and at graduate-level educational programs. He is an award-winning author of several respected digital forensics books such as Placing the Suspect Behind the Keyboard, Hiding Behind the Keyboard, and the X-Ways Forensics Practitioner’s Guide. Brett also manages the DFIR Training website, www.dfir.training as a free resource for the DFIR community. You can find Brett at www.dfir.training and ","type":"text"},{"text":"www.brettshavers.com","type":"text","marks":[{"type":"link","attrs":{"href":"http://www.brettshavers.com/","title":null,"target":"_blank"}}]},{"text":".","type":"text"}]},{"type":"paragraph","attrs":{"id":"niceabdzcj5","class":null}},{"type":"paragraph","attrs":{"id":"wjfgouj9bd","class":null},"content":[{"text":"Hannes Spichiger","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"0tgf0rrgvw","class":null},"content":[{"text":"Hannes Spichiger is a PhD Student at the University of Lausanne interested in questions of reliability and uncertainty related to digital evidence. His thesis is focused on the localisation of persons based on mobile phone traces. In addition to his research activity, he works part time as a specialist for digital investigation at the Neuchâtel Police force in Switzerland. His technical specialisation is mostly centred around the analysis of mobile phones.","type":"text"}]},{"type":"paragraph","attrs":{"id":"x1d7u0dcoo","class":null}},{"type":"paragraph","attrs":{"id":"dgm9r38f2u","class":null},"content":[{"text":"Joe Walsh","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"u7n29eiqth","class":null},"content":[{"text":"Joe Walsh teaches digital forensics and computer security courses at DeSales University. Prior to accepting this position, he worked as a senior security consultant for a computer security firm where he was responsible for performing security assessments, conducting penetration testing, and responding to computer security incidents. He has been a police officer for thirteen years. Joe is a former member of the Internet Crimes Against Children (ICAC) task force and the FBI Child Exploitation Task Force, where he was responsible for conducting online undercover investigations and forensic examinations of digital evidence. He has been recognized in court as an expert in computer crime and digital forensics. Joe has a bachelor’s degree in Computer Information Systems and earned his master’s degree in Criminal Justice with a concentration in Digital Forensics at DeSales University. He recently completed his second master's degree in Information Systems with a concentration in Cybersecurity and is currently pursuing a Ph.D. in Information Systems with a specialization in Information Systems Cyber Security.","type":"text"}]},{"type":"paragraph","attrs":{"id":"316deb0ade","class":null}}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2021-01-07T20:03:12.970Z"},{"id":"9a0a763a-139f-4380-8620-47bf9e307106","title":"Community","slug":"community","description":"Organizers, reviewers and other community members","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"faat8dm3","layout":[{"id":"0orzouf3","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{},"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"heading","attrs":{"id":"dfir-review---community","rtl":null,"level":1,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"DFIR Review - Community","type":"text"}]},{"type":"paragraph","attrs":{"id":"njvmqvwrc72","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"The DFIR Review community is part of the Digital Forensic Research Conference (","type":"text"},{"text":"DFRWS.org","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.dfrws.org","title":null,"target":null,"pubEdgeId":null}}]},{"text":"). The following individuals are involved with the coordination of DFIR Review and performing reviews of submitted work.","type":"text"}]},{"type":"paragraph","attrs":{"id":"nmhcg32xrcr","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"heading","attrs":{"id":"organizing-committee","rtl":null,"level":3,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Organizing Committee","type":"text"}]},{"type":"table","attrs":{"id":"nl858e11jp1","size":null,"align":null,"hideLabel":false,"smallerFont":false,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nob2cd5m6pw","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Chair","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nluano1hjzi","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Jessica Hyde (George Mason University & Hexordia)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nevuw0krmqk","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Vice Chair","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"n9rt66lkf8r","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Eoghan Casey (University of Lausanne & Digital Forensics Solutions)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ncp0cp7e75w","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Program Chair","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"njo8hz6z3fc","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Elénore Ryser (University of Lausanne)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"n9qm9vvhvke","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Program Vice Chairs","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nm0e0289thf","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Holger Morgenstern (Albstadt-Sigmaringen University)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nfwuwcdtt5p","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Publication Co-Chairs","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"n3xjynkt6hp","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Joseph Walsh (DeSales University)","type":"text"}]},{"type":"paragraph","attrs":{"id":"nyue3ejt816","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Johannn Polewczyk (University of Lausanne)","type":"text"},{"type":"hard_break","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"text":"Stephen Boyce (Marymount University & Magnet Forensics)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"n3z0ooxd4e9","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Industry Practitioner Liaisons","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nl0vizkjnsc","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Brett Shavers (DFIR Training)","type":"text"},{"type":"hard_break","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"text":"Tony Knutson (SANS Institute, Kroll)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nn4f52e3b48","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Government Practitioner Liaison","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nsqzhip8skn","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Open","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"n7d817t277l","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Communications Chair","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nlweyvguct0","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Prashanth Kumar Reddy Malise (George Mason University)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nb3g91k5nvm","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Academia Liaison","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nvyh6n6hw1i","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Mark McKinnon (Davenport University)","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[281],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nb8y6poo5ut","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"DFRWS Liaison","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nxdbp7wyl5g","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Daryl Pfeif (Digital Forensics Solutions)","type":"text"}]}]}]}]},{"type":"paragraph","attrs":{"id":"nqeycm08v59","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"heading","attrs":{"id":"gold-reviewers","rtl":null,"level":3,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Gold Reviewers","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"n8i5812w1z4","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Addisu Afework Birhanu","type":"text"}]},{"type":"paragraph","attrs":{"id":"n1kh4iysins","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Jessica Hyde","type":"text"}]},{"type":"heading","attrs":{"id":"silver-reviewers","rtl":null,"level":3,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Silver Reviewers","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"n6fdc4jxn5f","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Timothy Bollé","type":"text"}]},{"type":"paragraph","attrs":{"id":"n7o01htwz3d","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Yohannes Yemane Brhan","type":"text"}]},{"type":"paragraph","attrs":{"id":"nj5kt6d91wk","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Lisa Brown","type":"text"}]},{"type":"paragraph","attrs":{"id":"nrc1291xnwq","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Eric Eppley","type":"text"}]},{"type":"paragraph","attrs":{"id":"nzkiahta6tk","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Ali Hadi","type":"text"}]},{"type":"paragraph","attrs":{"id":"n8zwsae7fd4","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Anthony Knutson","type":"text"}]},{"type":"paragraph","attrs":{"id":"ndqp4i8u6ib","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Nickolas Ligman","type":"text"}]},{"type":"paragraph","attrs":{"id":"nebcnn9kssg","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Johann Polewczyk","type":"text"}]},{"type":"paragraph","attrs":{"id":"neui5xdpmvn","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Francesco Servida","type":"text"}]},{"type":"paragraph","attrs":{"id":"nk4y4uj79rp","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Linda Shou","type":"text"}]},{"type":"heading","attrs":{"id":"reviewers","rtl":null,"level":3,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviewers","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"n9s3lh9ajpy","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Zheng Jie Chan","type":"text"}]},{"type":"paragraph","attrs":{"id":"n8elkug24sb","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Amanda Chung","type":"text"}]},{"type":"paragraph","attrs":{"id":"n2aabge5wje","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Manon Fischer","type":"text"}]},{"type":"paragraph","attrs":{"id":"npnfnj8l2wd","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Joshua I. James","type":"text"}]},{"type":"paragraph","attrs":{"id":"no912s063do","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Selena Ley","type":"text"}]},{"type":"paragraph","attrs":{"id":"njxapqpjwad","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Prashanth Malise","type":"text"}]},{"type":"paragraph","attrs":{"id":"nwsmf4uk2w9","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Doug Metz","type":"text"}]},{"type":"paragraph","attrs":{"id":"nxnafg3l6oq","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Sungmi Park","type":"text"}]},{"type":"paragraph","attrs":{"id":"n0g52jkbwup","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Elénore Ryser","type":"text"}]},{"type":"paragraph","attrs":{"id":"nggzzzcdghx","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Bradley Schatz","type":"text"}]},{"type":"paragraph","attrs":{"id":"n3f48kee4la","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Aurèle Scoundrianos","type":"text"}]},{"type":"paragraph","attrs":{"id":"nxfzzfjv0bj","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Brett Shavers","type":"text"}]},{"type":"paragraph","attrs":{"id":"nhm88qaxmrz","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Hannes Spichiger","type":"text"}]},{"type":"paragraph","attrs":{"id":"nit2iq3d23w","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Adrien Vincart","type":"text"}]},{"type":"paragraph","attrs":{"id":"n4k32e401lj","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Ryan Wesley","type":"text"}]},{"type":"paragraph","attrs":{"id":"nqk71vxqngp","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Mike Williamson","type":"text"}]},{"type":"paragraph","attrs":{"id":"nsa2fmswdj9","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Sara Pierce","type":"text"}]},{"type":"paragraph","attrs":{"id":"nq1yf68ueg1","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Rishitha Reddy Munugala","type":"text"}]},{"type":"paragraph","attrs":{"id":"nbu3tm23f7c","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Saarthik Tannan","type":"text"}]},{"type":"paragraph","attrs":{"id":"nrp61pupf81","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Madison Brumbelow ","type":"text"}]},{"type":"paragraph","attrs":{"id":"ni74qzjo8sp","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Utta Von Nuremburg","type":"text"}]},{"type":"paragraph","attrs":{"id":"npl1u0vkavz","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Kristin Ibanez","type":"text"}]},{"type":"paragraph","attrs":{"id":"n9qfsttvt14","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Charina Marrion","type":"text"}]},{"type":"paragraph","attrs":{"id":"nud0ag5mn1t","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Jad Saliba","type":"text"}]},{"type":"paragraph","attrs":{"id":"nao5nk4co3i","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Alexander Brunner","type":"text"}]},{"type":"paragraph","attrs":{"id":"nyr4o65w4ru","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Rishi Krishnan","type":"text"}]},{"type":"paragraph","attrs":{"id":"n108kjc0y31","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"paragraph","attrs":{"id":"ndtssgtyvl1","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-30T18:15:15.380Z"},{"id":"2bd22226-03c8-4300-b555-73eb1d6a582d","title":"Review Guidance","slug":"review-guidance","description":"Criteria and guidelines for evaluating DFIR Review submissions.","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"pbpqub3l","layout":[{"id":"d93kbyyg","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{},"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"heading","attrs":{"id":"dfir-review---guidance","rtl":null,"level":1,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"DFIR Review - Guidance","type":"text"}]},{"type":"paragraph","attrs":{"id":"ic90m4lbu1","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"The following guidance is intended for reviewers to use in both assessing and drafting their review. Please be cognizant that comments will be included in the publication of the submission. If upon assignment you recognize that you are not suited to perform the review (i.e. schedule conflicts, not an area of expertise, etc.), please send an email to the TPC as soon as possible so that another reviewer may be assigned.","type":"text"}]},{"type":"paragraph","attrs":{"id":"x3lj85fcgz","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"heading","attrs":{"id":"categories-of-review","rtl":null,"level":4,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Categories of Review","type":"text","marks":[{"type":"strong"}]}]},{"type":"table","attrs":{"id":"4ru0p1lqtj","size":null,"align":null,"hideLabel":false,"smallerFont":false,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"h48sq7n1wm","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Methodology Review","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[369],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ipmaixvsto","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"This review is a read through and verification that the concepts and methods expressed in the submission are sound. This is the lowest level review. This method should only be used when it is the only available method to the reviewer or the content is not suitable for a higher level review.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"image","attrs":{"id":"qcaisrdf1j","url":"https://assets.pubpub.org/0osmcztc/31554327656996.png","href":null,"size":49,"align":"center","altText":"","caption":"","hideLabel":false,"suggestionId":null,"fullResolution":false,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"w1yn0ety3k","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Verified Review using Author Provided Datasets","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[369],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"wh4ugfxa51","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"This review requires verifying the technical details of the submission with a set of data provided by the author. It is expected that this review category is the minimum requirement when data is provided by the author.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"image","attrs":{"id":"6h80l2c4aj","url":"https://assets.pubpub.org/n6fvj3o0/71554327672214.png","href":null,"size":49,"align":"center","altText":"","caption":"","hideLabel":false,"suggestionId":null,"fullResolution":false,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[183],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"3hzixhujhp","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Validated Review using Reviewer Generated Datasets","type":"text","marks":[{"type":"em"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[369],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"32ay6jab2m","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"This is the “gold standard” for DFIR Review. When possible, this is the preferred method of review. When conducting this type of review, please ensure you include the OS/app/HW versions you are validating with in your review. It is completely acceptable to extend beyond the initial review with your learnings.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"image","attrs":{"id":"phzkvuu9h9","url":"https://assets.pubpub.org/3q7iw5tx/21554327684657.png","href":null,"size":49,"align":"center","altText":"","caption":"","hideLabel":false,"suggestionId":null,"fullResolution":false,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}}]}]}]},{"type":"heading","attrs":{"id":"reviewer-confidence","rtl":null,"level":4,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviewer Confidence","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"nf351r1fcb","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"This is where the reviewer states their confidence with the material under review and their ability to provide a review. If you feel that you are a 1 or a 2, it is suggested that you email the Technical Program Committee and inform them that you are not comfortable performing the review so someone with more experience in that area of forensics can be assigned the review.","type":"text"}]},{"type":"paragraph","attrs":{"id":"sldjxeoggf","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"heading","attrs":{"id":"review-guidelines","rtl":null,"level":4,"fixedId":"","textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Review Guidelines","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"w6q8pl05jo","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews will be published along with the accepted article in addition to the name of the reviewer and the category or review performed.","type":"text"}]},{"type":"bullet_list","attrs":{"id":"gcirgi18cz","rtl":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"7bgjwn9p5u","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should be comprehensive and should highlight the reviewer's knowledge of the subject matter in the article.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"zv1bwwy5vu","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should provide practitioners, lawyers, and judges with assurance that the article is reliable and complete.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"89jgh2k4o2","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews can state how the article can be useful in a digital investigation, and any associated limitations or risks.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"eghi9j8xnu","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should state if an article is trivial or not useful for addressing questions in a digital investigation.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"t5p53ll9u1","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should state if the article misses important details.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"5ekmydmqjo","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should explain the basis of the review (testing performed, prior knowledge from a case, etc.) including details regarding verification/validation via use of the author provided data sets or creation of data sets by the reviewer. When validating with reviewer generated data, please provide details as to OS, app, hardware used for the testing as applicable.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"z6ky625z73","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should highlight related questions that could be explored in future research.","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"7lh03rosl2","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should describe technical details of any testing performed, such as:","type":"text"}]}]}]},{"type":"paragraph","attrs":{"id":"swk3tzi33s","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"\"","type":"text"},{"text":"Using Autopsy version 4.10, I confirmed that the digital trace described in this article was present on Windows 10. In addition, I confirmed that the trace was compatible with the activity/interpretation presented in this article.","type":"text","marks":[{"type":"em"}]},{"text":"\"","type":"text"}]},{"type":"paragraph","attrs":{"id":"udcf2whdll","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}},{"type":"paragraph","attrs":{"id":"iqbm1mbg29","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"If we cannot repeat the steps that are presented in the article, we should state this, such as:","type":"text"}]},{"type":"paragraph","attrs":{"id":"4dh6aj6gdw","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"\"","type":"text"},{"text":"After performing the specified action in the article on a Windows 10 system, I examined the XYZ.dat file using a hex viewer but did not find the digital traces described in this article. However, I did not observe the digital traces described in this article. The traces I observed showed that the specified action occurred, but did not include additional details presented in the article (consider providing a screenshot of observed trace).","type":"text","marks":[{"type":"em"}]},{"text":"\"","type":"text"}]},{"type":"paragraph","attrs":{"id":"1kc9evklwj","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"OR","type":"text"}]},{"type":"paragraph","attrs":{"id":"psxmh1n0vy","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"\"","type":"text"},{"text":"Although it was not possible to perform testing on the same type of system (vehicle), I tested the XYZ application independently on an Android ABC device and obtained results that were compatible with those presented in this article","type":"text","marks":[{"type":"em"}]},{"text":"\"","type":"text"}]},{"type":"bullet_list","attrs":{"id":"m8ullauqum","rtl":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ce971rvguk","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reviews should highlight related questions that could be explored in future research.","type":"text"}]}]}]},{"type":"paragraph","attrs":{"id":"s0guqkqk5o","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"An explanation video covering reviewer guidance and process is available here: ","type":"text"},{"text":"https://bit.ly/DFIRReviewGuidance","type":"text","marks":[{"type":"link","attrs":{"href":"https://bit.ly/DFIRReviewGuidance","title":null,"target":null,"pubEdgeId":null}}]}]},{"type":"paragraph","attrs":{"id":"fjuk3m4tav","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Review Rubric","type":"text","marks":[{"type":"strong"}]}]},{"type":"table","attrs":{"id":"qnvm4c1qr7","size":null,"align":null,"hideLabel":false,"smallerFont":false,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"cbj5z74dxf","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Criteria","type":"text","marks":[{"type":"em"},{"type":"strong"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"cs0j5hsmz9","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Reject","type":"text","marks":[{"type":"em"},{"type":"strong"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"nw5poar7ge","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Revise","type":"text","marks":[{"type":"em"},{"type":"strong"}]}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"qx7lgaafyc","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Accept","type":"text","marks":[{"type":"em"},{"type":"strong"}]}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"wluzvqh811","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Content and Organization ","type":"text","marks":[{"type":"strong"}]},{"type":"hard_break","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"marks":[{"type":"strong"}]},{"text":"(Weight 60%)","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"0ega3gnx7y","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Substantial omission of details. Serious factual errors. Poorly organized.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"avvu5uu7a0","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Omission of minor pertinent details. Small factual errors. Overall organization good, but individual sections lack coherence/ depth or good content presented in a disorganized fashion. Excessive information not pertinent to subject.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"yfqnghf4xm","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Follows the submission guidelines, providing all pertinent details. No factual errors. Well organized in pursuit of a clearly defined objectives.","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"1rss3h1sxg","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Use of Sources* ","type":"text","marks":[{"type":"strong"}]},{"type":"hard_break","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"marks":[{"type":"strong"}]},{"text":"(Weight 30%)","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"991l6a92jl","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Little use of supporting sources, mostly generalities. Overuse of links to or quotations from other texts/websites.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"yudc6vs551","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Scanty use of supporting sources. Minor misuse of sources, or selection of inappropriate sources. Incomplete details.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"d6vk3vkb08","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Drawing on several details from sources (rather than general concepts) and/or multiple sources. Appropriate use and choice of sources.","type":"text"}]}]}]},{"type":"table_row","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":[127],"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"4kgfimc5z6","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Grammar and Language ","type":"text","marks":[{"type":"strong"}]},{"type":"hard_break","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"marks":[{"type":"strong"}]},{"text":"(Weight 10%)","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ou57jqf397","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Substantial grammar and/or typographical errors that confuse clarity and sense. Misuse of vocabulary; excessive repetition in expression.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"c4txjy47gu","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Some grammatical/ typographical errors, but without effect on sense. Repetitious use of vocabulary or expression.","type":"text"}]}]},{"type":"table_cell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"x6tw7j8ey8","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Few to no grammatical errors or typos.","type":"text"}]}]}]}]},{"type":"paragraph","attrs":{"id":"4sabm68tbt","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"* Submissions should contain sufficient details to repeat the process and determine whether or not the results are compatible with those described in the submission. All testing or other sources should be described in the review. Sources includes not just citations but testing that is thoroughly described. Author created testing is a source.","type":"text"}]},{"type":"paragraph","attrs":{"id":"38b1mux24u","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Review Timelines","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"y4f99cyjje","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Submissions are accepted on a per month basis and reviewed in the next month. For example submissions between Feb 1st and 28th will be assigned in early March for review completion by mid-March. If you are unable to provide a timely review, please notify the Program Chair(s) as quickly as possible so the review may be re-assigned. ","type":"text"}]},{"type":"paragraph","attrs":{"id":"1nzt6o5m4i","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Format for text block of review","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"mk4xniq6no","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Please format your comments such that you indicate the type(s) of reviews followed by comments in 3 categories.","type":"text"}]},{"type":"paragraph","attrs":{"id":"whauqposzg","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Type of Review: ","type":"text","marks":[{"type":"em"}]},{"text":"Methodology Review and Verified Review using Author Provided Datasets (Please indicate if this is a Methodology Review, Verified Review using Author Provided Datasets, or Validated using Reviewer Generated Datasets).","type":"text"}]},{"type":"paragraph","attrs":{"id":"sh8nj7v7jg","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Omissions and Questions about the work:","type":"text","marks":[{"type":"em"}]}]},{"type":"ordered_list","attrs":{"id":"wi04ywbezr","rtl":null,"order":1,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"xf0lyd67r1","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"What is meant by x?","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ks3ok21n17","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Was y tested?","type":"text"}]}]}]},{"type":"paragraph","attrs":{"id":"6xmhxxtf0m","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Future work:","type":"text","marks":[{"type":"em"}]}]},{"type":"ordered_list","attrs":{"id":"x9fzln9kcl","rtl":null,"order":1,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"m1r3g3hsla","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Future work could include validation on z platform","type":"text"}]}]}]},{"type":"paragraph","attrs":{"id":"a0v8xdv8ll","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Formatting suggestions and typographical errors:","type":"text","marks":[{"type":"em"}]}]},{"type":"ordered_list","attrs":{"id":"e48yaa32ms","rtl":null,"order":1,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"ad5eow1jiq","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Figure 3 is labeled incorrectly as Figure 4","type":"text"}]}]},{"type":"list_item","attrs":{"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"type":"paragraph","attrs":{"id":"bve6ohp2en","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"community is misspelled on page 3","type":"text"}]},{"type":"paragraph","attrs":{"id":"2d4e4d9mo2","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null}}]}]},{"type":"paragraph","attrs":{"id":"t3gknsknon","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Questions?","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"xvrj74tpko","rtl":null,"class":null,"textAlign":null,"suggestionId":null,"suggestionKind":null,"suggestionUserId":null,"suggestionTimestamp":null,"suggestionDiscussionId":null,"suggestionOriginalAttrs":null},"content":[{"text":"Contact us at dfirreview@dfrws.org","type":"text"}]}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-30T17:24:56.535Z"},{"id":"b4ba8d5a-2328-4d86-ad66-f8c2c76a506f","title":"Stats","slug":"blog","description":"Blog post with stats for DFIR Review","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"fnjtgcsg","layout":[{"id":"xpwsx1ff","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"n3uvj3mojvp","class":null},"content":[{"text":"DFIR Review – Year in Review 2020 Statistics","type":"text","marks":[{"type":"strong"}]},{"text":" (cross-posted from https://www.dfir.training/dfir-blog/dfir-review-year-in-review)","type":"text"}]},{"type":"paragraph","attrs":{"id":"n6juf9nhy7l","class":null},"content":[{"text":"Feb 7, 2021","type":"text"}]},{"type":"paragraph","attrs":{"id":"nylv7n651m3","class":"MsoNormal"},"content":[{"text":"Hi! We at DFIR Review wanted to take a moment to share some of the great things all the volunteers at DFIR Review have been doing over the last year and all the great peer-reviewed posts available at ","type":"text"},{"text":"dfir.pubpub.org","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/","title":null,"target":null}}]},{"text":".","type":"text"}]},{"type":"paragraph","attrs":{"id":"nq2vfwvfnix","class":"MsoNormal"},"content":[{"text":"For those who are unfamiliar, DFIR Review is a project under ","type":"text"},{"text":"DFRWS","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfrws.org/","title":null,"target":null}}]},{"text":" that conducts peer review of content and blogs, regardless of if they have already been posted. The goal of this project is to provide verification, validation, and review of digital forensics content that is rapidly shared by practitioners. This allows for the review process to take place while the content is still available to the community.","type":"text"}]},{"type":"paragraph","attrs":{"id":"n630v13lo3j","class":"MsoNormal"},"content":[{"text":"In 2020, DFIR Review published 11 pieces including the following:","type":"text"}]},{"type":"paragraph","attrs":{"id":"njquwnpvnyq","class":"MsoListParagraphCxSpFirst"},"content":[{"text":"· ","type":"text"},{"text":"Google Search Bar & Search Term History – Are You Finding Everything by Joshua Hickman","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/wpbdig8l","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nw3nmuneafp","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"OK Computer…er…Google. Dissecting Google Assistant (Part 1) by Joshua Hickman","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/eivkytr1","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nuqku8khss8","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"OK Computer…er…Google. Dissecting Google Assistant (Part Deux) by Joshua Hickman","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/eivkytr1","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"np1z3kyai28","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"Chromebook Forensic Acquisition by Daniel Dickerman","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/inkjsqrh","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"na2dtd9t866","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"Parsing Google’s Now Playing History on Pixel Devices by Kevin Pagano","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/xbvsrjt5","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"n827jpi13ne","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"Windows 10 Jump List and Link File Artifacts – Saved, Copied, and Moved by Larry Jones","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/wfuxlu9v","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nmw1m3fbfx8","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"Tinkering with TikTok Timestamps by Ryan Benson","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/9llea7yp","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nzabtw21n2t","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident by Heather Mahalik","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/6ysxvhvc","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nty3qc3v9ab","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"Can Google Takeout Location Data Be Trusted? By Ross Donnelly","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/d39u7lg1","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nyi40hf6d43","class":"MsoListParagraphCxSpMiddle"},"content":[{"text":"· ","type":"text"},{"text":"How to Use iOS Bluetooth Connections to Solve Crimes Faster by Heather Mahalik and Matt Goeckel","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/frknihlg","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"njuk6qfjsy8","class":"MsoListParagraphCxSpLast"},"content":[{"text":"· ","type":"text"},{"text":"Can You Track Processes Accessing the Camera and Microphone on Windows 10? By Zachary Stanford","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/pub/nm5b39ae","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"ng9zp1lfo6h","class":"MsoNormal"},"content":[{"text":"The magic behind this cadre of publications is the ","type":"text"},{"text":"DFIR Review Community","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/community","title":null,"target":null}}]},{"text":" and ","type":"text"},{"text":"reviewers","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/reviewers","title":null,"target":null}}]},{"text":". We have a community of over 30 reviewers who have completed 100 reviews. Our community is truly global with contributions from 15 countries across 4 continents!","type":"text"}]},{"type":"paragraph","attrs":{"id":"noi6sl2ie5l","class":"MsoNormal"}},{"type":"paragraph","attrs":{"id":"ngkvtiqievw","class":"MsoNormal"},"content":[{"text":"Thank you to everyone who has contributed be it as an author, reviewer, or organizing committee. We hope to be able to share even more throughout 2021. Have content you want to submit to DFIR Review? Check out our ","type":"text"},{"text":"submission guidance","type":"text","marks":[{"type":"link","attrs":{"href":"https://dfir.pubpub.org/submission-guidance","title":null,"target":null}}]},{"text":". If you are interested in being a reviewer, please feel free to email us at ","type":"text"},{"text":"dfirreview@dfrws.org","type":"text","marks":[{"type":"link","attrs":{"href":"mailto:dfirreview@dfrws.org","title":null,"target":null}}]}]},{"type":"paragraph","attrs":{"id":"nm5w5cylpe4","class":null}},{"type":"paragraph","attrs":{"id":"nply4zgf0ih","class":null},"content":[{"text":"Slide-deck of the stats","type":"text","marks":[{"type":"link","attrs":{"href":"https://www.dfir.training/dfir-review-year-in-review-2020/file","title":null,"target":null}}]}]}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2021-02-07T19:35:12.262Z"},{"id":"6a7dd0ce-1852-4aa8-b858-dd9e4fcc23e7","title":"Submission Guidance","slug":"submission-guidance","description":"","avatar":null,"isPublic":true,"isNarrowWidth":null,"viewHash":"2o9h9at6","layout":[{"id":"zd5ru333","type":"text","content":{"text":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"heading","attrs":{"id":"dfir-review---submission-guidance","rtl":null,"level":1,"fixedId":"","textAlign":null},"content":[{"text":"DFIR Review - Submission Guidance","type":"text"}]},{"type":"paragraph","attrs":{"id":"mpox5nedvm","rtl":null,"class":null,"textAlign":null}},{"type":"paragraph","attrs":{"id":"333wqr8yd8","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Thank you for your interest in submitting to DFIRReview. Please submit via ","type":"text"},{"text":"https://easychair.org/conferences/?conf=dfirr2023","type":"text","marks":[{"type":"link","attrs":{"href":"https://easychair.org/conferences/?conf=dfirr2023","title":null,"target":null}}]},{"text":" ","type":"text"}]},{"type":"paragraph","attrs":{"id":"ni3c4l2wcr","rtl":null,"class":null,"textAlign":null},"content":[{"text":"The following guidance is intended for submitters to utilize in formatting their files submitted to DFIR Review. As DFIR Review is designed for the review of already relieved works, it is suggested that articles be posted in advance as blogs. Author names are not blind to reviewers as submissions for this project are typically already in the public view.","type":"text"}]},{"type":"paragraph","attrs":{"id":"34xpelqcy8","rtl":null,"class":null,"textAlign":null},"content":[{"text":"DFIRReview accepts submissions for an entire month at a time. At the beginning of the next month those papers are assigned for a review period. For example, Reviews submitted between Jan 1 and Jan 31 will be reviewed in February with a decision to the author expected by the end of February","type":"text"}]},{"type":"paragraph","attrs":{"id":"e6jc08o2jj","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Please add the following headers to your blog post with the content filled in and submit your attachment as a .docx file. This will help ensure the best possible publication of your content:","type":"text"}]},{"type":"paragraph","attrs":{"id":"t9p2x2zcx4","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Synopsis:","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"ljaq43noa3","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Forensics Question: ","type":"text","marks":[{"type":"strong"}]},{"text":"What is the goal of your paper? What are you trying to answer?","type":"text"}]},{"type":"paragraph","attrs":{"id":"alb8fp1l75","rtl":null,"class":null,"textAlign":null},"content":[{"text":"OS Version:","type":"text","marks":[{"type":"strong"}]},{"text":" Include the applicable Operating System and/or Application versions applies to your content","type":"text"}]},{"type":"paragraph","attrs":{"id":"8l222dkh42","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Tools:","type":"text","marks":[{"type":"strong"}]},{"text":" Please list any and all tools used to create, test, and/or validate your content.","type":"text"}]},{"type":"paragraph","attrs":{"id":"gk0ulcc0n9","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Thank you!","type":"text"}]},{"type":"paragraph","attrs":{"id":"lr8118ce91","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Questions?","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","attrs":{"id":"z50oi5bfgm","rtl":null,"class":null,"textAlign":null},"content":[{"text":"Contact us at dfirreview@dfrws.org","type":"text"}]}]},"align":"left"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2020-05-28T21:59:19.835Z"},{"id":"0f373a2c-c88d-4615-901f-9f3007392c8a","title":"DFIR Review","slug":"","description":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity.","avatar":"https://assets.pubpub.org/3ej3id6s/11553968629226.png","isPublic":true,"isNarrowWidth":null,"viewHash":"dfgao2b3","layout":[{"id":"yjymbe9d","type":"banner","content":{"text":"We are actively seeking reviewers! Interested? Email us at dfirreview@dfrws.org ","align":"center","buttonUrl":"","buttonText":"","buttonType":"none","showButton":false,"backgroundSize":"full","backgroundColor":"#3275d8","backgroundImage":"","backgroundHeight":"narrow","defaultCollectionIds":[]}},{"id":"kqa6nus3","type":"banner","content":{"text":"Submit topics of interest for research","align":"center","buttonUrl":"https://bit.ly/DFIRReviewRequests","buttonText":"Research Request","buttonType":"link","showButton":true,"backgroundSize":"full","backgroundColor":"#3275d8","backgroundImage":"","backgroundHeight":"narrow","defaultCollectionIds":[]}},{"id":"bzmjons3","type":"pubs","content":{"sort":"creation-date","limit":0,"title":"","pubIds":[],"collectionIds":[],"pubPreviewType":"medium"}},{"id":"xw3itri0","type":"pubs","content":{"limit":8,"title":"Featured Posts","pubIds":[],"collectionIds":[],"pubPreviewType":"medium"}}],"layoutAllowsDuplicatePubs":false,"createdAt":"2019-03-23T18:09:32.990Z"}],"collections":[{"id":"4d6cbcc5-a3fc-459d-820d-1d4a5f7362d7","title":"Papers","slug":"dsthj493","avatar":null,"isRestricted":true,"isPublic":true,"viewHash":"w3mlztuf","editHash":"k7ll8o5q","metadata":null,"kind":"tag","doi":null,"readNextPreviewSize":"choose-best","layout":{"blocks":[{"id":"m5nt3cew","type":"collection-header","content":{}},{"id":"82wrvv3v","type":"pubs","content":{"sort":"collection-rank","pubPreviewType":"medium"}}],"isNarrow":false},"layoutAllowsDuplicatePubs":false,"pageId":"0f373a2c-c88d-4615-901f-9f3007392c8a","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","scopeSummaryId":"1db60c83-a461-4697-a639-fb7d951333bb","crossrefDepositRecordId":null,"createdAt":"2019-03-30T17:19:53.991Z","updatedAt":"2021-04-26T16:48:52.977Z","members":[]}]},"loginData":{"id":null},"locationData":{"hostname":"dfir.pubpub.org","path":"/","params":{},"query":{},"queryString":"?","isDashboard":false,"isBasePubPub":false,"isProd":true,"isDuqDuq":false,"isQubQub":false,"appCommit":"6d87aaeef578ba6bd8c8ce36fb866b505dd22469"},"scopeData":{"elements":{"activeTargetType":"community","activeTargetName":"Community","activeTarget":{"id":"b0ac9c28-479a-496c-884c-7ae8fc26e385","subdomain":"dfir","domain":null,"title":"DFIR Review","citeAs":null,"publishAs":null,"description":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","avatar":"https://assets.pubpub.org/3yqqvtl4/71553968763873.png","favicon":"https://assets.pubpub.org/c8g3oakn/41553968740088.png","accentColorLight":"#FFFFFF","accentColorDark":"#2D2E2F","hideCreatePubButton":true,"headerLogo":"https://assets.pubpub.org/hndwo003/61675374631049.png","headerLinks":null,"headerColorType":"dark","useHeaderTextAccent":false,"hideHero":false,"hideHeaderLogo":false,"heroLogo":null,"heroBackgroundImage":null,"heroBackgroundColor":"#0558b3","heroTextColor":null,"useHeaderGradient":true,"heroImage":null,"heroTitle":"DFIR Review","heroText":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","heroPrimaryButton":{},"heroSecondaryButton":{},"heroAlign":"left","navigation":[{"id":"0f373a2c-c88d-4615-901f-9f3007392c8a","type":"page"},{"id":"b4ba8d5a-2328-4d86-ad66-f8c2c76a506f","type":"page"},{"id":"a8a6a998-952b-45ac-9dde-1e1fef976417","type":"page"},{"id":"6a7dd0ce-1852-4aa8-b858-dd9e4fcc23e7","type":"page"},{"id":"c9d33e1b-70ca-4f00-935e-8b048a2db8aa","type":"page"},{"id":"b1a5d079-3ee0-4434-a65f-c1b0cc624b45","type":"page"},{"id":"2bd22226-03c8-4300-b555-73eb1d6a582d","type":"page"},{"id":"9a0a763a-139f-4380-8620-47bf9e307106","type":"page"},{"id":"a7126096-fe0b-49af-a377-e69d372934d0","type":"page"}],"hideNav":false,"navLinks":null,"footerLinks":null,"footerLogoLink":null,"footerTitle":null,"footerImage":null,"website":"","facebook":"","twitter":"","instagram":null,"mastodon":null,"linkedin":null,"bluesky":null,"github":null,"email":"","socialLinksLocation":null,"issn":null,"isFeatured":null,"viewHash":"qz0cilrt","editHash":"bqi37oih","premiumLicenseFlag":false,"defaultPubCollections":[],"analyticsSettings":null,"spamTagId":"16a43a5f-d437-4a0a-9721-4781fc993f4e","organizationId":null,"scopeSummaryId":"aa45c5c8-46a9-480c-912b-0ace04e252d4","createdAt":"2019-03-23T18:09:32.984Z","updatedAt":"2023-02-02T21:50:33.149Z"},"activePub":null,"activeCollection":null,"activeIds":{"pubId":null,"collectionId":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385"},"inactiveCollections":[],"activeCommunity":{"id":"b0ac9c28-479a-496c-884c-7ae8fc26e385","subdomain":"dfir","domain":null,"title":"DFIR Review","citeAs":null,"publishAs":null,"description":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","avatar":"https://assets.pubpub.org/3yqqvtl4/71553968763873.png","favicon":"https://assets.pubpub.org/c8g3oakn/41553968740088.png","accentColorLight":"#FFFFFF","accentColorDark":"#2D2E2F","hideCreatePubButton":true,"headerLogo":"https://assets.pubpub.org/hndwo003/61675374631049.png","headerLinks":null,"headerColorType":"dark","useHeaderTextAccent":false,"hideHero":false,"hideHeaderLogo":false,"heroLogo":null,"heroBackgroundImage":null,"heroBackgroundColor":"#0558b3","heroTextColor":null,"useHeaderGradient":true,"heroImage":null,"heroTitle":"DFIR Review","heroText":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity","heroPrimaryButton":{},"heroSecondaryButton":{},"heroAlign":"left","navigation":[{"id":"0f373a2c-c88d-4615-901f-9f3007392c8a","type":"page"},{"id":"b4ba8d5a-2328-4d86-ad66-f8c2c76a506f","type":"page"},{"id":"a8a6a998-952b-45ac-9dde-1e1fef976417","type":"page"},{"id":"6a7dd0ce-1852-4aa8-b858-dd9e4fcc23e7","type":"page"},{"id":"c9d33e1b-70ca-4f00-935e-8b048a2db8aa","type":"page"},{"id":"b1a5d079-3ee0-4434-a65f-c1b0cc624b45","type":"page"},{"id":"2bd22226-03c8-4300-b555-73eb1d6a582d","type":"page"},{"id":"9a0a763a-139f-4380-8620-47bf9e307106","type":"page"},{"id":"a7126096-fe0b-49af-a377-e69d372934d0","type":"page"}],"hideNav":false,"navLinks":null,"footerLinks":null,"footerLogoLink":null,"footerTitle":null,"footerImage":null,"website":"","facebook":"","twitter":"","instagram":null,"mastodon":null,"linkedin":null,"bluesky":null,"github":null,"email":"","socialLinksLocation":null,"issn":null,"isFeatured":null,"viewHash":"qz0cilrt","editHash":"bqi37oih","premiumLicenseFlag":false,"defaultPubCollections":[],"analyticsSettings":null,"spamTagId":"16a43a5f-d437-4a0a-9721-4781fc993f4e","organizationId":null,"scopeSummaryId":"aa45c5c8-46a9-480c-912b-0ace04e252d4","createdAt":"2019-03-23T18:09:32.984Z","updatedAt":"2023-02-02T21:50:33.149Z"}},"memberData":[],"activePermissions":{"activePermission":null,"canView":false,"canEdit":false,"canManage":false,"canAdmin":false,"canAdminCommunity":false,"canManageCommunity":false,"canViewCommunity":false,"canEditCommunity":false,"isSuperAdmin":false,"canCreateReviews":false,"canCreateDiscussions":true,"canViewDraft":false,"canEditDraft":false},"activeCounts":{"reviews":0,"submissions":0},"scope":{"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385"}},"featureFlags":{"releaseDiscussionsDialog":false,"activityDigestSubscribeToggle":true,"notifications":true,"submissions":true,"surveySummer22":false,"reviews":false,"comments":false,"htmlPubHeaderValues":false,"minimal-header":false,"minimal-footer":false,"customScripts":false,"collapsible-header":false,"two-column-footer":false,"suggestedEdits":false,"collapsible-header-bpc":false,"customAnalyticsProvider":false,"newAnalytics":true,"bodyContributors":false,"noCookieBanner":false},"initialNotificationsData":{"hasNotifications":false,"hasUnreadNotifications":false},"dismissedUserDismissables":{}}"></script><script id="view-data" type="text/plain" data-json="{"pageData":{"id":"0f373a2c-c88d-4615-901f-9f3007392c8a","title":"DFIR Review","slug":"","description":"DFIR Review responds to the need for a focal point for up-to-date community-reviewed applied research and testing in digital forensics and incident response. DFIR Review concentrates on targeted studies of specific devices, digital traces, analysis methods, and criminal activity.","avatar":"https://assets.pubpub.org/3ej3id6s/11553968629226.png","isPublic":true,"isNarrowWidth":null,"viewHash":"dfgao2b3","layout":[{"id":"yjymbe9d","type":"banner","content":{"text":"We are actively seeking reviewers! Interested? Email us at dfirreview@dfrws.org ","align":"center","buttonUrl":"","buttonText":"","buttonType":"none","showButton":false,"backgroundSize":"full","backgroundColor":"#3275d8","backgroundImage":"","backgroundHeight":"narrow","defaultCollectionIds":[]}},{"id":"kqa6nus3","type":"banner","content":{"text":"Submit topics of interest for research","align":"center","buttonUrl":"https://bit.ly/DFIRReviewRequests","buttonText":"Research Request","buttonType":"link","showButton":true,"backgroundSize":"full","backgroundColor":"#3275d8","backgroundImage":"","backgroundHeight":"narrow","defaultCollectionIds":[]}},{"id":"bzmjons3","type":"pubs","content":{"sort":"creation-date","limit":0,"title":"","pubIds":[],"collectionIds":[],"pubPreviewType":"medium"}},{"id":"xw3itri0","type":"pubs","content":{"limit":8,"title":"Featured Posts","pubIds":[],"collectionIds":[],"pubPreviewType":"medium"}}],"layoutAllowsDuplicatePubs":false,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","createdAt":"2019-03-23T18:09:32.990Z","updatedAt":"2025-03-06T22:08:56.594Z","layoutPubsByBlock":{"pubIdsByBlockId":{"bzmjons3":["9cb2c39d-42aa-4017-84cb-455bdf979472","9ff458e0-3aec-429d-88a2-e425f691889f","34c0a8b3-c769-43fb-8854-ff280c185ea0","9031561b-4582-4ddb-a7c9-f1de5b78baf2","3ddcdc5b-980d-4a85-835f-3c41ee00b0f8","ad189205-eeca-4775-839c-f7755062670c","5ff1934f-4fff-409e-a1d6-139d7a827ed6","cf869f01-82b9-4e10-862b-7d81807d07b8","54241fb9-6b7b-4aab-b988-53c1f1dec488","94143b3d-387e-4dee-944b-a520a9d0abb9","f7390d55-8690-4b52-a794-bc54c2a58fbd","904f02b2-9d49-45d7-ba30-2a41ec6ed89a","24a2cc13-7be0-40ee-8ea4-cc854b81488a","b2d0adf2-a290-4094-804c-c9eac7297bc9","48deed43-befa-4cbc-b159-8f4498417d8b","9cb45d00-07ba-491a-a579-a59bd8481990","245fd6c6-fd4e-48f9-898f-a2da62c2ba64","9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","3f8f511e-54e7-4271-9eca-7fa0d232c66a","ead45058-14b1-4572-95dc-f4f9e133c39b","de3816b0-c20b-4e36-9114-29cceedfc970","9d986d1f-6692-47ea-95e7-64475e5928a5","f750a1dd-811d-44a9-ba62-f5cb5fa94755","9fc29261-ba7f-47d1-8e8e-795cfcd031c5","0336a13d-f5f0-4229-bdba-c3bcc03c8ec3","7ab640d0-f71d-4bec-af45-e0a2c6b005d5","4350222a-3f34-4b22-b133-3ae70e5e4d8b","a5994a5f-7f28-458c-a2bc-38face718a0d","8b7c261a-6c15-481b-b6ae-e578e39754b5","056d3cf2-eb71-422c-b295-ee4e401e13fe","fcc2b9c2-da0a-4e06-ad78-615d4d492736","92ca3973-ba8a-465f-9e59-39e91897d140","8b3978af-85d6-4527-98cf-9f6294df76f1","3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","4203ab16-ac19-47f1-b612-b15feb137a8c","d955f342-1de7-49e9-ab7b-3c9bf6e8b70d","98a33939-bf39-42c2-a26c-fd6165a6105e","482a8d7a-ba78-4f29-b7d0-6935e708fc04","3296d349-123a-4b00-924b-5a4066fd4e2a","9106d7d3-5d5f-482e-8cb3-44e2f00094c4","103135b6-e47d-44ab-9aaa-de82517e353b"],"xw3itri0":[]},"pubsById":{"9031561b-4582-4ddb-a7c9-f1de5b78baf2":{"id":"9031561b-4582-4ddb-a7c9-f1de5b78baf2","slug":"4fkeiv34","title":"Location, Location, Location","htmlTitle":"Location, Location, Location","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2024-04-04T12:03:12.597Z","updatedAt":"2024-04-04T12:06:19.026Z","members":[{"id":"bba8fd1c-5afb-4d8a-87c9-3f0ce6e6c2f3","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"9031561b-4582-4ddb-a7c9-f1de5b78baf2","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2024-04-04T12:03:12.736Z","updatedAt":"2024-04-04T12:03:12.736Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"120b6b9c-9d88-48f9-acef-c2a0d6f7ef44","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2024-04-04T12:03:12.614Z","updatedAt":"2024-04-04T12:03:12.614Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"7cd96f4e-10e5-495c-a420-3c5c3be7e221","noteContent":null,"noteText":null,"pubId":"9031561b-4582-4ddb-a7c9-f1de5b78baf2","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"4cef4b91-c7bd-42ca-aad4-965ccfa33de0","historyKey":1195,"historyKeyMissing":false,"createdAt":"2024-08-29T01:40:00.516Z","updatedAt":"2024-08-29T01:40:00.516Z"}],"attributions":[{"id":"0ba65354-0b0d-401b-8c22-d7f04cb1716f","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":[],"affiliation":null,"orcid":null,"userId":"44f7be84-6aed-45c4-ac7a-5458357d14f5","pubId":"9031561b-4582-4ddb-a7c9-f1de5b78baf2","createdAt":"2024-04-04T12:06:35.854Z","updatedAt":"2024-04-04T12:06:35.854Z","user":{"id":"44f7be84-6aed-45c4-ac7a-5458357d14f5","firstName":"Ian","lastName":"Whiffin","fullName":"Ian Whiffin","avatar":"https://assets.pubpub.org/y3g7d095/21580966062045.jpg","slug":"ian-whiffin","initials":"IW","title":"DoubleBlak","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"54241fb9-6b7b-4aab-b988-53c1f1dec488":{"id":"54241fb9-6b7b-4aab-b988-53c1f1dec488","slug":"5d08cdxl","title":"How Did That Photo Get On That iPhone","htmlTitle":"How Did That Photo Get On That iPhone","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2023-10-05T13:55:51.306Z","updatedAt":"2023-10-05T14:10:13.661Z","members":[{"id":"dfe4f748-5dbb-411d-b816-8c11f6dac07b","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"54241fb9-6b7b-4aab-b988-53c1f1dec488","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2023-10-05T13:55:51.410Z","updatedAt":"2023-10-05T13:55:51.410Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"a6e36cb6-585c-4fe7-b319-73f0d92773c1","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2023-10-05T13:55:51.350Z","updatedAt":"2023-10-05T13:55:51.350Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"a08c8333-45c9-43ca-a8d3-30ddb8e0b8f3","noteContent":null,"noteText":null,"pubId":"54241fb9-6b7b-4aab-b988-53c1f1dec488","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"c17909f1-bde4-4dc7-96fc-1c9be87ceb75","historyKey":1977,"historyKeyMissing":false,"createdAt":"2024-04-04T12:43:06.268Z","updatedAt":"2024-04-04T12:43:06.268Z"}],"attributions":[{"id":"a9342269-7ef5-4a6c-b94a-a320599b08da","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":[],"affiliation":null,"orcid":null,"userId":"ee14f662-33fa-42bc-9cd2-f1c3da427f48","pubId":"54241fb9-6b7b-4aab-b988-53c1f1dec488","createdAt":"2023-10-05T14:10:25.881Z","updatedAt":"2023-10-05T14:10:25.881Z","user":{"id":"ee14f662-33fa-42bc-9cd2-f1c3da427f48","firstName":"Steve","lastName":"Bunting","fullName":"Steve Bunting","avatar":"https://assets.pubpub.org/go173ikn/11681238694892.jpg","slug":"steve-bunting","initials":"SB","title":"CEO Bunting Digital Forensics, LLC / Senior Forensic Consultant","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"94143b3d-387e-4dee-944b-a520a9d0abb9":{"id":"94143b3d-387e-4dee-944b-a520a9d0abb9","slug":"6amsr72k","title":"Peeking at User Notification Events in iOS 15","htmlTitle":"Peeking at User Notification Events in iOS 15","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2023-02-02T21:09:08.068Z","updatedAt":"2023-02-02T21:11:14.046Z","members":[{"id":"5bebb9ae-9c8e-40f0-abd0-7f2668996f16","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"94143b3d-387e-4dee-944b-a520a9d0abb9","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2023-02-02T21:09:08.117Z","updatedAt":"2023-02-02T21:09:08.117Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"d01ecb91-0c07-4ca9-8c8b-b1b5ef157b90","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2023-02-02T21:09:08.083Z","updatedAt":"2024-02-14T00:17:32.607Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"37ae8f7c-0081-45fe-bed3-b42ac7bc1de8","noteContent":null,"noteText":null,"pubId":"94143b3d-387e-4dee-944b-a520a9d0abb9","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"eb12eb9a-4823-49cb-a35d-e6592e60c384","historyKey":1760,"historyKeyMissing":false,"createdAt":"2023-08-03T10:38:21.349Z","updatedAt":"2023-08-03T10:38:21.349Z"}],"attributions":[{"id":"55b56e84-1288-4c3f-bacd-9bc2cf1faacb","name":"Geraldine Blay","avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"94143b3d-387e-4dee-944b-a520a9d0abb9","createdAt":"2023-02-02T21:11:55.556Z","updatedAt":"2023-02-02T21:11:55.556Z","user":{"isShadowUser":true,"id":"55b56e84-1288-4c3f-bacd-9bc2cf1faacb","initials":"GB","fullName":"Geraldine Blay","firstName":"Geraldine","lastName":"Blay","avatar":null,"title":null,"orcid":null}},{"id":"0d878bb9-a013-483d-a1b0-187243f61589","name":null,"avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","pubId":"94143b3d-387e-4dee-944b-a520a9d0abb9","createdAt":"2023-02-02T21:12:05.264Z","updatedAt":"2023-02-02T21:12:05.264Z","user":{"id":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","firstName":"Alexis","lastName":"Brignoni","fullName":"Alexis Brignoni","avatar":"https://assets.pubpub.org/qebcv99n/51554174323314.jpg","slug":"alexis-brignoni","initials":"AB","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"f7390d55-8690-4b52-a794-bc54c2a58fbd":{"id":"f7390d55-8690-4b52-a794-bc54c2a58fbd","slug":"4sv4kxyh","title":"iOS Location Services and System Services are they ON or OFF","htmlTitle":"iOS Location Services and System Services are they ON or OFF","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-07-11T15:45:30.510Z","updatedAt":"2022-11-17T22:38:07.392Z","members":[{"id":"0fee2f6f-ca15-41f1-9b3a-6a30dcb2c878","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"f7390d55-8690-4b52-a794-bc54c2a58fbd","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-07-11T15:45:30.560Z","updatedAt":"2022-07-11T15:45:30.560Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"c09ac78f-f388-4a88-baa4-c78e6571ad1a","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2022-07-11T15:45:30.523Z","updatedAt":"2022-07-11T15:45:30.523Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"4fcda3b3-c2e1-44e9-ac8d-190c6ec984e4","noteContent":null,"noteText":null,"pubId":"f7390d55-8690-4b52-a794-bc54c2a58fbd","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"338338b6-c28a-4624-8284-d5ffa1ccaa27","historyKey":1317,"historyKeyMissing":false,"createdAt":"2022-07-11T20:09:51.017Z","updatedAt":"2022-07-11T20:09:51.017Z"},{"id":"b9a132f0-0994-41b1-a5a0-a560bb1946e2","noteContent":null,"noteText":null,"pubId":"f7390d55-8690-4b52-a794-bc54c2a58fbd","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"f0696656-7300-4a07-9635-04239020913f","historyKey":1346,"historyKeyMissing":false,"createdAt":"2022-07-11T20:17:56.650Z","updatedAt":"2022-07-11T20:17:56.650Z"}],"attributions":[{"id":"0104d455-7fe8-45bd-919e-cf16a344dcbb","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"2b028128-c5e1-47da-8c59-af7b26d83970","pubId":"f7390d55-8690-4b52-a794-bc54c2a58fbd","createdAt":"2022-07-11T15:47:58.446Z","updatedAt":"2022-07-11T15:47:58.446Z","user":{"id":"2b028128-c5e1-47da-8c59-af7b26d83970","firstName":"Scott","lastName":"Koenig","fullName":"Scott Koenig","avatar":"https://assets.pubpub.org/f088ur44/01599601723720.jpg","slug":"scott-koenig","initials":"SK","title":"DFIR Examiner","orcid":""}},{"id":"6b1e759b-8f9d-40a9-8ed7-3a4c0adf7289","name":null,"avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"44f7be84-6aed-45c4-ac7a-5458357d14f5","pubId":"f7390d55-8690-4b52-a794-bc54c2a58fbd","createdAt":"2022-07-11T15:48:06.291Z","updatedAt":"2022-07-11T15:48:06.291Z","user":{"id":"44f7be84-6aed-45c4-ac7a-5458357d14f5","firstName":"Ian","lastName":"Whiffin","fullName":"Ian Whiffin","avatar":"https://assets.pubpub.org/y3g7d095/21580966062045.jpg","slug":"ian-whiffin","initials":"IW","title":"DoubleBlak","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":2},"904f02b2-9d49-45d7-ba30-2a41ec6ed89a":{"id":"904f02b2-9d49-45d7-ba30-2a41ec6ed89a","slug":"xqvcn3hj","title":"Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database","htmlTitle":"Enriching Investigations with Apple Watch Data Through the healthdb_secure.sqlite Database","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-06-02T20:23:36.439Z","updatedAt":"2022-11-17T22:39:47.252Z","members":[{"id":"f79024d8-d5f7-4f9f-8448-97012f5b307c","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"904f02b2-9d49-45d7-ba30-2a41ec6ed89a","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-06-02T20:23:36.506Z","updatedAt":"2022-06-02T20:23:36.506Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"be949586-7da2-4d0d-aaa2-cbed2387ec20","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2022-06-02T20:23:36.453Z","updatedAt":"2024-02-14T00:18:55.136Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"512e2c56-3740-4b40-9fa1-ef2cd3a88f0e","noteContent":null,"noteText":null,"pubId":"904f02b2-9d49-45d7-ba30-2a41ec6ed89a","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"0c8f60f9-be81-4281-9886-65ebb8ca3ea4","historyKey":1804,"historyKeyMissing":false,"createdAt":"2023-01-05T20:28:33.777Z","updatedAt":"2023-01-05T20:28:33.777Z"}],"attributions":[{"id":"5f5e530d-f502-4a03-afde-0d0593fc10fd","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"101458aa-c5de-44d6-abb8-04e3cb90d51b","pubId":"904f02b2-9d49-45d7-ba30-2a41ec6ed89a","createdAt":"2022-11-03T13:19:04.235Z","updatedAt":"2022-11-03T13:19:04.235Z","user":{"id":"101458aa-c5de-44d6-abb8-04e3cb90d51b","firstName":"James","lastName":"McGee","fullName":"James McGee","avatar":null,"slug":"james-mcgee","initials":"JM","title":"Digital Forensic Examiner","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"24a2cc13-7be0-40ee-8ea4-cc854b81488a":{"id":"24a2cc13-7be0-40ee-8ea4-cc854b81488a","slug":"xmjxofpd","title":"Wipeout! Detecting Android Factory Resets","htmlTitle":"Wipeout! Detecting Android Factory Resets","description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-06-02T20:22:11.629Z","updatedAt":"2022-11-17T22:39:47.493Z","members":[{"id":"bd918714-a34c-4df5-ab8d-6bc8f47fbc35","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"24a2cc13-7be0-40ee-8ea4-cc854b81488a","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-06-02T20:22:11.694Z","updatedAt":"2022-06-02T20:22:11.694Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"94b81514-1439-4c71-aefa-49399ce24294","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2022-06-02T20:22:11.649Z","updatedAt":"2022-06-02T20:22:11.649Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"1b07d928-1580-45a6-8244-f39f335489cf","noteContent":null,"noteText":null,"pubId":"24a2cc13-7be0-40ee-8ea4-cc854b81488a","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"44956bd7-1aeb-47d1-8c18-246712c03e14","historyKey":402,"historyKeyMissing":false,"createdAt":"2022-11-03T11:55:30.800Z","updatedAt":"2022-11-03T11:55:30.800Z"}],"attributions":[{"id":"38496a84-b108-46dc-9f7b-bcd69b24434b","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"24a2cc13-7be0-40ee-8ea4-cc854b81488a","createdAt":"2022-11-03T11:45:07.869Z","updatedAt":"2022-11-03T11:45:07.869Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}},{"id":"da5369f7-d112-46ab-aadb-7aeb3545da08","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"24a2cc13-7be0-40ee-8ea4-cc854b81488a","createdAt":"2022-11-03T11:45:27.118Z","updatedAt":"2022-11-03T11:45:27.118Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"b2d0adf2-a290-4094-804c-c9eac7297bc9":{"id":"b2d0adf2-a290-4094-804c-c9eac7297bc9","slug":"g2v1z97i","title":"iOS KnowledgeC.db Notifications","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-04-11T17:27:40.839Z","updatedAt":"2022-11-17T22:41:03.381Z","members":[{"id":"176a3ecf-b9d6-48d2-b1f9-9c88d01bbd13","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"adb58dcd-f040-4ef1-98de-ba664b2246fa","pubId":"b2d0adf2-a290-4094-804c-c9eac7297bc9","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-04-11T17:27:40.883Z","updatedAt":"2022-04-11T17:27:40.883Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"80404ffd-e950-4360-9a02-44679dacf8c6","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2022-04-11T17:27:40.853Z","updatedAt":"2022-04-11T17:27:40.853Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"c4147c98-309b-462c-ada4-9b70ff4b4e85","noteContent":null,"noteText":null,"pubId":"b2d0adf2-a290-4094-804c-c9eac7297bc9","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"c4e95f31-2a68-49e0-bec4-5ea5b72bc8d4","historyKey":1415,"historyKeyMissing":false,"createdAt":"2022-11-03T11:43:49.132Z","updatedAt":"2022-11-03T11:43:49.132Z"}],"attributions":[{"id":"c7cdbdf9-6d0f-4ce6-b83b-3fbd75ecebb1","name":null,"avatar":null,"title":null,"order":0.5,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"2b028128-c5e1-47da-8c59-af7b26d83970","pubId":"b2d0adf2-a290-4094-804c-c9eac7297bc9","createdAt":"2022-04-11T17:29:37.997Z","updatedAt":"2022-04-11T17:29:37.997Z","user":{"id":"2b028128-c5e1-47da-8c59-af7b26d83970","firstName":"Scott","lastName":"Koenig","fullName":"Scott Koenig","avatar":"https://assets.pubpub.org/f088ur44/01599601723720.jpg","slug":"scott-koenig","initials":"SK","title":"DFIR Examiner","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"48deed43-befa-4cbc-b159-8f4498417d8b":{"id":"48deed43-befa-4cbc-b159-8f4498417d8b","slug":"yp6efc8q","title":"An Alternate Location for Deleted SMS/iMessage Data in Apple Devices","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-04-11T17:07:55.535Z","updatedAt":"2022-11-17T22:41:03.383Z","members":[{"id":"b7aae998-fa72-4125-ad45-6ad7e79dd860","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"48deed43-befa-4cbc-b159-8f4498417d8b","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-04-11T17:07:55.669Z","updatedAt":"2022-04-11T17:07:55.669Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"bd51e65b-5df8-4f2f-9d54-81847eb08e92","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2022-04-11T17:07:55.549Z","updatedAt":"2023-06-22T23:10:37.597Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"0408ab14-c669-4785-940e-e87385ba8c70","noteContent":null,"noteText":null,"pubId":"48deed43-befa-4cbc-b159-8f4498417d8b","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"4e72941c-99d0-4bcd-a00f-9bd7558f3200","historyKey":643,"historyKeyMissing":false,"createdAt":"2022-11-03T11:44:23.761Z","updatedAt":"2022-11-03T11:44:23.761Z"}],"attributions":[{"id":"a36a9467-c30f-4375-b45e-a196af73c6b9","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"101458aa-c5de-44d6-abb8-04e3cb90d51b","pubId":"48deed43-befa-4cbc-b159-8f4498417d8b","createdAt":"2022-04-11T17:08:44.540Z","updatedAt":"2022-04-11T17:08:44.540Z","user":{"id":"101458aa-c5de-44d6-abb8-04e3cb90d51b","firstName":"James","lastName":"McGee","fullName":"James McGee","avatar":null,"slug":"james-mcgee","initials":"JM","title":"Digital Forensic Examiner","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"9cb45d00-07ba-491a-a579-a59bd8481990":{"id":"9cb45d00-07ba-491a-a579-a59bd8481990","slug":"khnqi0ff","title":"iOS Settings Display Auto-Lock & Require Passcode","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-04-07T14:00:29.463Z","updatedAt":"2022-11-17T22:41:05.202Z","members":[{"id":"f777bffb-6a08-400c-a57c-6c52c967bea9","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"9cb45d00-07ba-491a-a579-a59bd8481990","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-04-07T14:00:29.515Z","updatedAt":"2022-04-07T14:00:29.515Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"f1b0aae4-10e9-4895-8c46-24366d77d9be","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2022-04-07T14:00:29.481Z","updatedAt":"2022-04-07T14:00:29.481Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"a7e60a4e-d6c2-4208-98ad-f6484adf3080","noteContent":null,"noteText":null,"pubId":"9cb45d00-07ba-491a-a579-a59bd8481990","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"d2613db5-8f52-4d0b-80a0-72f1bf9ca9a5","historyKey":1074,"historyKeyMissing":false,"createdAt":"2022-06-02T21:43:02.509Z","updatedAt":"2022-06-02T21:43:02.509Z"}],"attributions":[{"id":"e966d0a2-f83d-4532-857b-96ea2a70ea77","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"2b028128-c5e1-47da-8c59-af7b26d83970","pubId":"9cb45d00-07ba-491a-a579-a59bd8481990","createdAt":"2022-04-07T14:01:13.636Z","updatedAt":"2022-04-07T14:01:13.636Z","user":{"id":"2b028128-c5e1-47da-8c59-af7b26d83970","firstName":"Scott","lastName":"Koenig","fullName":"Scott Koenig","avatar":"https://assets.pubpub.org/f088ur44/01599601723720.jpg","slug":"scott-koenig","initials":"SK","title":"DFIR Examiner","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"245fd6c6-fd4e-48f9-898f-a2da62c2ba64":{"id":"245fd6c6-fd4e-48f9-898f-a2da62c2ba64","slug":"4can3p40","title":"Turbo Speed: Parsing Device Health Services from Google","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-01-21T20:22:41.849Z","updatedAt":"2022-11-17T22:42:31.241Z","members":[{"id":"c8ad2b5a-5ef5-49b1-b26f-84148cbf793d","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"adb58dcd-f040-4ef1-98de-ba664b2246fa","pubId":"245fd6c6-fd4e-48f9-898f-a2da62c2ba64","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-01-21T20:22:41.903Z","updatedAt":"2022-01-21T20:22:41.903Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"78aa4e07-9c45-4aa4-bbec-94049e967be1","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2022-01-21T20:22:41.868Z","updatedAt":"2024-02-14T00:11:22.862Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"6bdf7b1c-a736-4128-b15d-3a81de37e328","noteContent":null,"noteText":null,"pubId":"245fd6c6-fd4e-48f9-898f-a2da62c2ba64","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"b951e97c-367f-4735-8fa8-9701deff9362","historyKey":1073,"historyKeyMissing":false,"createdAt":"2022-09-28T12:26:34.832Z","updatedAt":"2022-09-28T12:26:34.832Z"}],"attributions":[{"id":"7edb86c0-4628-4c7b-b66c-ce42289d3ed2","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"63f32bb7-2f0c-458e-ac4a-f75ebad24c58","pubId":"245fd6c6-fd4e-48f9-898f-a2da62c2ba64","createdAt":"2022-01-28T15:20:53.305Z","updatedAt":"2022-01-28T15:20:53.305Z","user":{"id":"63f32bb7-2f0c-458e-ac4a-f75ebad24c58","firstName":"Kevin","lastName":"Pagano","fullName":"Kevin Pagano","avatar":null,"slug":"kevin-pagano","initials":"KP","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc":{"id":"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","slug":"z29xp2bu","title":"Ain’t That a Kik in the Head: Kik Messenger iOS Analysis","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2022-01-21T20:03:41.536Z","updatedAt":"2022-11-17T22:42:31.306Z","members":[{"id":"1988d7ef-f181-4b19-9ed0-fbef4a784b9a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2022-01-21T20:03:41.622Z","updatedAt":"2022-01-21T20:03:41.622Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"82f9ed6d-0ddc-4db3-b69c-36c39c3da674","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2022-01-21T20:03:41.568Z","updatedAt":"2022-01-21T20:03:41.568Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"96b49b14-f61e-4acd-99f1-802932949d51","noteContent":null,"noteText":null,"pubId":"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"f52cf343-e244-4a77-8946-005ad6fe7c66","historyKey":504,"historyKeyMissing":false,"createdAt":"2022-04-11T21:11:34.689Z","updatedAt":"2022-04-11T21:11:34.689Z"}],"attributions":[{"id":"168e4b43-7ce9-4d12-a7d3-629c3b74746f","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"63f32bb7-2f0c-458e-ac4a-f75ebad24c58","pubId":"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","createdAt":"2022-01-21T20:04:32.143Z","updatedAt":"2022-01-21T20:04:32.143Z","user":{"id":"63f32bb7-2f0c-458e-ac4a-f75ebad24c58","firstName":"Kevin","lastName":"Pagano","fullName":"Kevin Pagano","avatar":null,"slug":"kevin-pagano","initials":"KP","title":"","orcid":""}},{"id":"f37b76e5-0015-43e3-a884-afcd5b81dc95","name":null,"avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","pubId":"9adbbf2e-e40b-43b4-ac62-4b0c3a9e62bc","createdAt":"2022-01-21T20:04:41.670Z","updatedAt":"2022-01-21T20:04:41.670Z","user":{"id":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","firstName":"Alexis","lastName":"Brignoni","fullName":"Alexis Brignoni","avatar":"https://assets.pubpub.org/qebcv99n/51554174323314.jpg","slug":"alexis-brignoni","initials":"AB","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"ead45058-14b1-4572-95dc-f4f9e133c39b":{"id":"ead45058-14b1-4572-95dc-f4f9e133c39b","slug":"30nk59ar","title":"Validation of X-Ways Forensics Evidence File Containers","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-09-30T10:50:38.747Z","updatedAt":"2022-11-17T22:47:18.506Z","members":[{"id":"14b294ca-50ff-4785-a2bf-28a64f3d079a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"ead45058-14b1-4572-95dc-f4f9e133c39b","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-09-30T10:50:38.804Z","updatedAt":"2021-09-30T10:50:38.804Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"58e3591e-0e8a-43c9-976f-010a71d29698","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-09-30T10:50:38.764Z","updatedAt":"2021-09-30T10:50:38.764Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"f011cb29-fa5c-4f7f-9a1c-f1300a6e32c1","noteContent":null,"noteText":null,"pubId":"ead45058-14b1-4572-95dc-f4f9e133c39b","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"6d0ca21c-d00e-48d5-98ac-2b5ec48ba275","historyKey":624,"historyKeyMissing":false,"createdAt":"2021-12-29T18:52:11.860Z","updatedAt":"2021-12-29T18:52:11.860Z"}],"attributions":[{"id":"870d89bd-8072-4342-9690-2c1d6900562a","name":null,"avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"7c3c62b8-06cf-4afe-98bf-5ae0e0685cf0","pubId":"ead45058-14b1-4572-95dc-f4f9e133c39b","createdAt":"2021-09-30T10:51:23.214Z","updatedAt":"2021-09-30T10:51:23.214Z","user":{"id":"7c3c62b8-06cf-4afe-98bf-5ae0e0685cf0","firstName":"Larry","lastName":"Jones","fullName":"Larry Jones","avatar":null,"slug":"larry-jones","initials":"LJ","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"de3816b0-c20b-4e36-9114-29cceedfc970":{"id":"de3816b0-c20b-4e36-9114-29cceedfc970","slug":"h78di10n","title":"USB Forensics – Recover more Volume Serial Numbers (VSNs) with the Windows 10 Partition/Diagnostic Event Log","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-04-13T15:56:54.269Z","updatedAt":"2022-11-17T22:50:09.856Z","members":[{"id":"6ef028fc-1ce8-47b6-840a-a9a3061f827a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-04-13T15:56:54.276Z","updatedAt":"2021-04-13T15:56:54.276Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"ee265cb8-3369-4725-86f6-a4cf89906c1a","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:47.726Z","updatedAt":"2021-04-26T16:48:47.726Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"b6c14b6c-506a-4684-a2c1-dc6aed66d111","noteContent":null,"noteText":null,"pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"3139873d-7e57-47a9-96d2-1947ffc3a5e3","historyKey":2641,"historyKeyMissing":false,"createdAt":"2021-05-26T14:58:04.151Z","updatedAt":"2021-05-26T14:58:04.151Z"},{"id":"dd2e1106-866d-4bbf-b9cf-ee4b3775a4b2","noteContent":null,"noteText":null,"pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"821db49a-d841-4194-a5fa-78c32d3ed9d3","historyKey":2718,"historyKeyMissing":false,"createdAt":"2021-07-28T13:06:20.754Z","updatedAt":"2021-07-28T13:06:20.754Z"}],"attributions":[{"id":"985acb97-653e-4430-9b54-0ff6efc8f6f9","name":"Alexandros Vasilaras","avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","createdAt":"2021-05-26T13:56:26.157Z","updatedAt":"2021-05-26T13:56:26.157Z","user":{"isShadowUser":true,"id":"985acb97-653e-4430-9b54-0ff6efc8f6f9","initials":"AV","fullName":"Alexandros Vasilaras","firstName":"Alexandros","lastName":"Vasilaras","avatar":null,"title":null,"orcid":null}},{"id":"031d58bd-8f38-44c7-ac00-fe83a9f6250f","name":"Evangelos Dragonas","avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","createdAt":"2021-05-26T13:56:36.862Z","updatedAt":"2021-05-26T13:56:36.862Z","user":{"isShadowUser":true,"id":"031d58bd-8f38-44c7-ac00-fe83a9f6250f","initials":"ED","fullName":"Evangelos Dragonas","firstName":"Evangelos","lastName":"Dragonas","avatar":null,"title":null,"orcid":null}},{"id":"4f9923b8-8430-496a-9907-967b92dab9fb","name":"Dimitrios Katsoulis","avatar":null,"title":null,"order":0.9375,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"de3816b0-c20b-4e36-9114-29cceedfc970","createdAt":"2021-05-26T13:56:44.372Z","updatedAt":"2021-05-26T13:56:44.372Z","user":{"isShadowUser":true,"id":"4f9923b8-8430-496a-9907-967b92dab9fb","initials":"DK","fullName":"Dimitrios Katsoulis","firstName":"Dimitrios","lastName":"Katsoulis","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":2},"9d986d1f-6692-47ea-95e7-64475e5928a5":{"id":"9d986d1f-6692-47ea-95e7-64475e5928a5","slug":"33vkc2ul","title":"Missing SQLite Records Analysis","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-03-25T18:15:24.014Z","updatedAt":"2022-11-17T22:50:54.389Z","members":[{"id":"635eb7b7-ec34-4654-a2a7-4632085f30c1","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"9d986d1f-6692-47ea-95e7-64475e5928a5","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-03-25T18:15:24.020Z","updatedAt":"2021-03-25T18:15:24.020Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"64006507-7e56-4e69-b97b-80a0f2adb9a1","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:42.515Z","updatedAt":"2021-04-26T16:48:42.515Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"55134358-9aa4-4598-9658-a37b6c5fb0f4","noteContent":null,"noteText":null,"pubId":"9d986d1f-6692-47ea-95e7-64475e5928a5","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"71f555c1-0f1f-4375-955f-602e07b846bd","historyKey":2179,"historyKeyMissing":false,"createdAt":"2021-07-29T13:12:57.515Z","updatedAt":"2021-07-29T13:12:57.515Z"}],"attributions":[{"id":"b99db04c-bd7b-4880-9e79-b171c5de9b44","name":null,"avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"44f7be84-6aed-45c4-ac7a-5458357d14f5","pubId":"9d986d1f-6692-47ea-95e7-64475e5928a5","createdAt":"2021-06-24T12:40:24.298Z","updatedAt":"2021-06-24T12:40:24.298Z","user":{"id":"44f7be84-6aed-45c4-ac7a-5458357d14f5","firstName":"Ian","lastName":"Whiffin","fullName":"Ian Whiffin","avatar":"https://assets.pubpub.org/y3g7d095/21580966062045.jpg","slug":"ian-whiffin","initials":"IW","title":"DoubleBlak","orcid":""}},{"id":"8697c307-402e-4a24-89ee-7ff3cf7f1a2e","name":"Shafik Punja","avatar":null,"title":null,"order":0.4375,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"9d986d1f-6692-47ea-95e7-64475e5928a5","createdAt":"2021-07-29T12:51:23.409Z","updatedAt":"2021-07-29T12:51:31.349Z","user":{"isShadowUser":true,"id":"8697c307-402e-4a24-89ee-7ff3cf7f1a2e","initials":"SP","fullName":"Shafik Punja","firstName":"Shafik","lastName":"Punja","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"f750a1dd-811d-44a9-ba62-f5cb5fa94755":{"id":"f750a1dd-811d-44a9-ba62-f5cb5fa94755","slug":"h6vyh33u","title":"Case Study: Forensic Analysis of TikTok on iOS","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-03-25T18:14:57.918Z","updatedAt":"2022-11-17T22:50:54.389Z","members":[{"id":"4fe3c42a-676f-4df1-889e-e2c48452713a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"f750a1dd-811d-44a9-ba62-f5cb5fa94755","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-03-25T18:14:57.927Z","updatedAt":"2021-03-25T18:14:57.927Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"fa87220b-4994-4ba6-89b8-2433034bf21f","collections":0,"pubs":0,"discussions":2,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:42.511Z","updatedAt":"2024-02-14T00:15:12.174Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"d761d83e-2250-4087-b96b-006ddb56571b","noteContent":null,"noteText":null,"pubId":"f750a1dd-811d-44a9-ba62-f5cb5fa94755","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"54dcb080-6d47-4894-b8eb-264be0df3088","historyKey":1054,"historyKeyMissing":false,"createdAt":"2022-04-11T19:47:44.726Z","updatedAt":"2022-04-11T19:47:44.726Z"}],"attributions":[{"id":"9acba1b8-3391-484e-80ff-61b56b2ae4f9","name":"Dr. Graeme Horsman","avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"f750a1dd-811d-44a9-ba62-f5cb5fa94755","createdAt":"2021-05-27T19:51:59.589Z","updatedAt":"2021-05-27T19:51:59.589Z","user":{"isShadowUser":true,"id":"9acba1b8-3391-484e-80ff-61b56b2ae4f9","initials":"DH","fullName":"Dr. Graeme Horsman","firstName":"Dr. Graeme","lastName":"Horsman","avatar":null,"title":null,"orcid":null}},{"id":"b1b4623a-a4b9-42f2-bb7f-36d55c81ec10","name":"Linda Shou","avatar":null,"title":null,"order":0.875,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"f750a1dd-811d-44a9-ba62-f5cb5fa94755","createdAt":"2021-05-27T19:52:06.242Z","updatedAt":"2021-05-27T19:52:06.242Z","user":{"isShadowUser":true,"id":"b1b4623a-a4b9-42f2-bb7f-36d55c81ec10","initials":"LS","fullName":"Linda Shou","firstName":"Linda","lastName":"Shou","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"9fc29261-ba7f-47d1-8e8e-795cfcd031c5":{"id":"9fc29261-ba7f-47d1-8e8e-795cfcd031c5","slug":"6i7d593n","title":"Upgrade From NULL—Detecting iOS Wipe Artifacts","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":"10.21428/b0ac9c28.9fc29261","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-02-25T19:46:23.837Z","updatedAt":"2022-11-17T22:51:40.696Z","members":[{"id":"175be763-793a-4c65-91bf-700c59f4a0db","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"9fc29261-ba7f-47d1-8e8e-795cfcd031c5","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-02-25T19:46:23.844Z","updatedAt":"2021-02-25T19:46:23.844Z"}],"draft":null,"crossrefDepositRecord":{"id":"23c15072-f50b-47de-8686-10c736776260","depositJson":{"dois":{"pub":"10.21428/b0ac9c28.9fc29261","community":"10.21428/b0ac9c28"},"deposit":{"doi_batch":{"body":{"journal":{"journal_article":{"titles":{"title":"Upgrade From NULL—Detecting iOS Wipe Artifacts"},"doi_data":{"doi":"10.21428/b0ac9c28.9fc29261","resource":{"#text":"https://dfir.pubpub.org/pub/6i7d593n","@content_version":"vor"},"timestamp":1627560797184},"@xmlns:rel":"http://www.crossref.org/relations.xsd","contributors":{"person_name":[{"surname":"Mahalik","@sequence":"first","given_name":"Heather","@contributor_role":"author"},{"surname":"Whiffin","@sequence":"additional","given_name":"Ian","@contributor_role":"author"}]},"publication_date":{"day":"24","year":"2021","month":"06","@media_type":"online"},"@publication_type":"full_text"},"journal_metadata":{"doi_data":{"doi":"10.21428/b0ac9c28","resource":{"#text":"https://dfir.pubpub.org"},"timestamp":1627560797184},"@language":"en","full_title":"DFIR Review"}}},"head":{"depositor":{"email_address":"crossref@pubpub.org","depositor_name":"PubPub"},"timestamp":1627560797184,"registrant":"PubPub","doi_batch_id":"1627560797184_b0ac9c28"},"@xmlns":"http://www.crossref.org/schema/4.4.1","@version":"4.4.1","@xmlns:xsi":"http://www.w3.org/2001/XMLSchema-instance","@xsi:schemaLocation":"http://www.crossref.org/schema/4.4.1 http://www.crossref.org/schema/deposit/crossref4.4.1.xsd"}},"timestamp":1627560797184},"createdAt":"2021-07-29T12:13:17.763Z","updatedAt":"2021-07-29T12:13:17.763Z"},"scopeSummary":{"id":"3ff64d25-81b3-4c7d-87cf-65942efecc47","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:36.765Z","updatedAt":"2021-04-26T16:48:36.765Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"15ce7006-b81f-4cbe-932e-d617fce1a6f3","noteContent":null,"noteText":null,"pubId":"9fc29261-ba7f-47d1-8e8e-795cfcd031c5","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"4dd16291-948d-4fb2-9db5-70c1493e32cd","historyKey":1356,"historyKeyMissing":false,"createdAt":"2021-06-24T12:35:28.584Z","updatedAt":"2021-06-24T12:35:28.584Z"}],"attributions":[{"id":"1083ee12-e5e4-4ddc-bb23-85d5e506fc83","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"e9e3775b-6200-4b1a-b592-fccfad817588","pubId":"9fc29261-ba7f-47d1-8e8e-795cfcd031c5","createdAt":"2021-02-25T19:47:39.751Z","updatedAt":"2021-02-25T19:47:39.751Z","user":{"id":"e9e3775b-6200-4b1a-b592-fccfad817588","firstName":"Heather","lastName":"Mahalik","fullName":"Heather Mahalik","avatar":"https://assets.pubpub.org/q90obbww/21554293116796.jpg","slug":"heather-mahalik","initials":"HM","title":"","orcid":""}},{"id":"f496248e-861f-41c4-9a5b-b31f81a0336c","name":null,"avatar":null,"title":null,"order":0.625,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"44f7be84-6aed-45c4-ac7a-5458357d14f5","pubId":"9fc29261-ba7f-47d1-8e8e-795cfcd031c5","createdAt":"2021-02-25T19:47:53.942Z","updatedAt":"2021-02-25T19:47:56.469Z","user":{"id":"44f7be84-6aed-45c4-ac7a-5458357d14f5","firstName":"Ian","lastName":"Whiffin","fullName":"Ian Whiffin","avatar":"https://assets.pubpub.org/y3g7d095/21580966062045.jpg","slug":"ian-whiffin","initials":"IW","title":"DoubleBlak","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"0336a13d-f5f0-4229-bdba-c3bcc03c8ec3":{"id":"0336a13d-f5f0-4229-bdba-c3bcc03c8ec3","slug":"gqqxl93l","title":"Extracting and Decrypting iOS Keychain: Physical, Logical and Cloud Options Explored","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-01-07T16:56:01.457Z","updatedAt":"2022-11-17T22:53:38.751Z","members":[{"id":"35a02920-ad15-4c1e-9299-28781b7d3869","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"0336a13d-f5f0-4229-bdba-c3bcc03c8ec3","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-01-07T16:56:01.464Z","updatedAt":"2021-01-07T16:56:01.464Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"5147ca33-a743-4753-a823-23d0f9550ecb","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:22.717Z","updatedAt":"2021-04-26T16:48:22.717Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"c623e9b0-44c5-4571-828f-6f16ed4d4a6d","noteContent":null,"noteText":null,"pubId":"0336a13d-f5f0-4229-bdba-c3bcc03c8ec3","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"158cb1de-f31a-4e79-9c89-90e943954014","historyKey":512,"historyKeyMissing":false,"createdAt":"2021-02-04T20:59:40.165Z","updatedAt":"2021-02-04T20:59:40.165Z"}],"attributions":[{"id":"6a34b761-1275-49b7-8f84-1859493f8a4b","name":"Vladimir Katalov","avatar":null,"title":null,"order":0.75,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"0336a13d-f5f0-4229-bdba-c3bcc03c8ec3","createdAt":"2021-02-04T14:23:22.255Z","updatedAt":"2021-02-04T14:23:22.255Z","user":{"isShadowUser":true,"id":"6a34b761-1275-49b7-8f84-1859493f8a4b","initials":"VK","fullName":"Vladimir Katalov","firstName":"Vladimir","lastName":"Katalov","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"7ab640d0-f71d-4bec-af45-e0a2c6b005d5":{"id":"7ab640d0-f71d-4bec-af45-e0a2c6b005d5","slug":"v19rksyf","title":"Using Photos.sqlite to Show the Relationships Between Photos and the Application they were Created with?","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2021-01-07T16:55:26.098Z","updatedAt":"2022-11-17T22:53:38.779Z","members":[{"id":"82d34fe9-3a38-4b8a-8d5e-c0cb0bd9327a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"7ab640d0-f71d-4bec-af45-e0a2c6b005d5","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2021-01-07T16:55:26.107Z","updatedAt":"2021-01-07T16:55:26.107Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"1451d962-f554-4b45-b008-e6001bd9ce36","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:22.715Z","updatedAt":"2021-04-26T16:48:22.715Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"2ebb3a7e-518a-4222-9e53-d3ffc9885e2a","noteContent":null,"noteText":null,"pubId":"7ab640d0-f71d-4bec-af45-e0a2c6b005d5","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"0a85d47e-730b-4347-b0a2-1c02a124abb0","historyKey":694,"historyKeyMissing":false,"createdAt":"2021-02-04T21:22:33.797Z","updatedAt":"2021-02-04T21:22:33.797Z"}],"attributions":[{"id":"3883a0d7-75bf-4bf2-a18f-5626eae78209","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"2b028128-c5e1-47da-8c59-af7b26d83970","pubId":"7ab640d0-f71d-4bec-af45-e0a2c6b005d5","createdAt":"2021-01-12T00:36:56.649Z","updatedAt":"2021-01-12T00:36:56.649Z","user":{"id":"2b028128-c5e1-47da-8c59-af7b26d83970","firstName":"Scott","lastName":"Koenig","fullName":"Scott Koenig","avatar":"https://assets.pubpub.org/f088ur44/01599601723720.jpg","slug":"scott-koenig","initials":"SK","title":"DFIR Examiner","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"4350222a-3f34-4b22-b133-3ae70e5e4d8b":{"id":"4350222a-3f34-4b22-b133-3ae70e5e4d8b","slug":"nm5b39ae","title":"Can You Track Processes Accessing the Camera and Microphone on Windows 10?","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-10-19T00:34:11.274Z","updatedAt":"2022-11-17T22:55:05.756Z","members":[{"id":"2b707c41-07c9-4174-b906-7522cbb2a0e8","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"4350222a-3f34-4b22-b133-3ae70e5e4d8b","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-10-19T00:34:11.287Z","updatedAt":"2020-10-19T00:34:11.287Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"913db14a-5859-4d52-b014-c8ec7fe0fcc6","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:12.131Z","updatedAt":"2021-04-26T16:48:12.131Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"6dc8b59c-b3c1-47be-9b1e-8ab21a7566ad","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"rqufk3jt4u","class":null}}]},"noteText":"","pubId":"4350222a-3f34-4b22-b133-3ae70e5e4d8b","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"05d7f08d-340d-42f7-b626-6868fba362ed","historyKey":1247,"historyKeyMissing":false,"createdAt":"2020-11-19T20:02:43.100Z","updatedAt":"2020-12-22T18:27:18.950Z"}],"attributions":[{"id":"b513c7b1-a7ba-43c2-afba-7f8b4dad2b47","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"047e37a5-e9c6-426e-80f7-7f01cdc4586e","pubId":"4350222a-3f34-4b22-b133-3ae70e5e4d8b","createdAt":"2020-11-19T20:04:05.711Z","updatedAt":"2020-11-19T20:04:05.711Z","user":{"id":"047e37a5-e9c6-426e-80f7-7f01cdc4586e","firstName":"Zachary","lastName":"Stanford","fullName":"Zachary Stanford","avatar":null,"slug":"zachary-stanford","initials":"ZS","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"a5994a5f-7f28-458c-a2bc-38face718a0d":{"id":"a5994a5f-7f28-458c-a2bc-38face718a0d","slug":"frknihlg","title":"How to Use iOS Bluetooth Connections to Solve Crimes Faster","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":"10.21428/b0ac9c28.a5994a5f","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-10-19T00:33:51.181Z","updatedAt":"2022-11-17T22:55:05.756Z","members":[{"id":"a9bb0c5f-00a7-4ca6-b6b7-736cf0c671b2","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"a5994a5f-7f28-458c-a2bc-38face718a0d","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-10-19T00:33:51.196Z","updatedAt":"2020-10-19T00:33:51.196Z"}],"draft":null,"crossrefDepositRecord":{"id":"369e0845-53d3-4f40-9f40-68ffa3da7151","depositJson":{"dois":{"pub":"10.21428/b0ac9c28.a5994a5f","community":"10.21428/b0ac9c28"},"deposit":{"doi_batch":{"body":{"journal":{"journal_article":{"titles":{"title":"How to Use iOS Bluetooth Connections to Solve Crimes Faster"},"doi_data":{"doi":"10.21428/b0ac9c28.a5994a5f","resource":{"#text":"https://dfir.pubpub.org/pub/frknihlg","@content_version":"vor"},"timestamp":1616702999543},"@xmlns:rel":"http://www.crossref.org/relations.xsd","contributors":{"person_name":[{"surname":"Mahalik","@sequence":"first","given_name":"Heather","@contributor_role":"author"},{"surname":"Goeckel","@sequence":"additional","given_name":"Matt","@contributor_role":"author"}]},"publication_date":{"day":"16","year":"2020","month":"11","@media_type":"online"},"@publication_type":"full_text"},"journal_metadata":{"doi_data":{"doi":"10.21428/b0ac9c28","resource":{"#text":"https://dfir.pubpub.org"},"timestamp":1616702999543},"@language":"en","full_title":"DFIR Review"}}},"head":{"depositor":{"email_address":"crossref@pubpub.org","depositor_name":"PubPub"},"timestamp":1616702999543,"registrant":"PubPub","doi_batch_id":"1616702999543_b0ac9c28"},"@xmlns":"http://www.crossref.org/schema/4.4.1","@version":"4.4.1","@xmlns:xsi":"http://www.w3.org/2001/XMLSchema-instance","@xsi:schemaLocation":"http://www.crossref.org/schema/4.4.1 http://www.crossref.org/schema/deposit/crossref4.4.1.xsd"}},"timestamp":1616702999543},"createdAt":"2021-03-25T20:10:00.476Z","updatedAt":"2021-03-25T20:10:00.476Z"},"scopeSummary":{"id":"2c8a8726-cc5f-4d73-a6d9-42ddc0194673","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:12.130Z","updatedAt":"2021-04-26T16:48:12.130Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"9ce504e1-e5b6-46e3-8196-a160111600cb","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"2uacfpvli2","class":null}}]},"noteText":"","pubId":"a5994a5f-7f28-458c-a2bc-38face718a0d","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"5e2a4143-c4e3-437a-a493-bac4130fb5c1","historyKey":1333,"historyKeyMissing":false,"createdAt":"2020-11-16T21:39:00.844Z","updatedAt":"2020-12-22T18:27:18.941Z"}],"attributions":[{"id":"bb1e5da5-ca7e-4550-ae13-ae83813fa7fe","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"e9e3775b-6200-4b1a-b592-fccfad817588","pubId":"a5994a5f-7f28-458c-a2bc-38face718a0d","createdAt":"2020-11-04T22:11:31.377Z","updatedAt":"2020-11-04T22:11:31.377Z","user":{"id":"e9e3775b-6200-4b1a-b592-fccfad817588","firstName":"Heather","lastName":"Mahalik","fullName":"Heather Mahalik","avatar":"https://assets.pubpub.org/q90obbww/21554293116796.jpg","slug":"heather-mahalik","initials":"HM","title":"","orcid":""}},{"id":"13668fc4-6f5a-4a8e-99cb-22e6e428dfa3","name":"Matt Goeckel","avatar":null,"title":null,"order":0.625,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"a5994a5f-7f28-458c-a2bc-38face718a0d","createdAt":"2020-11-04T22:11:45.252Z","updatedAt":"2020-11-04T22:11:50.824Z","user":{"isShadowUser":true,"id":"13668fc4-6f5a-4a8e-99cb-22e6e428dfa3","initials":"MG","fullName":"Matt Goeckel","firstName":"Matt","lastName":"Goeckel","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"8b7c261a-6c15-481b-b6ae-e578e39754b5":{"id":"8b7c261a-6c15-481b-b6ae-e578e39754b5","slug":"d39u7lg1","title":"Can Google Takeout Location Data Be Trusted?","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-10-19T00:33:28.091Z","updatedAt":"2022-11-17T22:55:05.786Z","members":[{"id":"090e19da-bbd2-41b4-92ac-d3fa6ab3169c","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"8b7c261a-6c15-481b-b6ae-e578e39754b5","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-10-19T00:33:28.108Z","updatedAt":"2020-10-19T00:33:28.108Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"ce1eab06-ad09-448d-99e5-05cc872f6650","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:12.119Z","updatedAt":"2021-04-26T16:48:12.119Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"9f041736-12a8-43f0-854c-60a460693c7c","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"hit300c71c","class":null}}]},"noteText":"","pubId":"8b7c261a-6c15-481b-b6ae-e578e39754b5","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"99202d49-e01b-482e-a5fe-1ddffa644c59","historyKey":1370,"historyKeyMissing":false,"createdAt":"2020-11-02T13:51:48.232Z","updatedAt":"2020-12-22T18:27:18.941Z"}],"attributions":[{"id":"41322a52-5f20-41e5-954c-6d582b60764c","name":"Ross Donnelly","avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"8b7c261a-6c15-481b-b6ae-e578e39754b5","createdAt":"2020-11-02T13:40:15.343Z","updatedAt":"2020-11-02T13:40:15.343Z","user":{"isShadowUser":true,"id":"41322a52-5f20-41e5-954c-6d582b60764c","initials":"RD","fullName":"Ross Donnelly","firstName":"Ross","lastName":"Donnelly","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"056d3cf2-eb71-422c-b295-ee4e401e13fe":{"id":"056d3cf2-eb71-422c-b295-ee4e401e13fe","slug":"6ysxvhvc","title":"How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":"10.21428/b0ac9c28.056d3cf2","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-09-25T12:56:19.224Z","updatedAt":"2022-11-17T22:55:45.206Z","members":[{"id":"8ee2c1c1-1410-4bf7-80a5-623f711560f9","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"056d3cf2-eb71-422c-b295-ee4e401e13fe","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-09-25T12:56:19.233Z","updatedAt":"2020-09-25T12:56:19.233Z"}],"draft":null,"crossrefDepositRecord":{"id":"c1092d5c-4372-4206-8d55-890284dbe1da","depositJson":{"dois":{"pub":"10.21428/b0ac9c28.056d3cf2","community":"10.21428/b0ac9c28"},"deposit":{"doi_batch":{"body":{"journal":{"journal_article":{"titles":{"title":"How Android Bluetooth Connections Can Determine if a Driver had Their Hands on the Wheel During an Accident"},"doi_data":{"doi":"10.21428/b0ac9c28.056d3cf2","resource":{"#text":"https://dfir.pubpub.org/pub/6ysxvhvc","@content_version":"vor"},"timestamp":1616703069544},"@xmlns:rel":"http://www.crossref.org/relations.xsd","contributors":{"person_name":[{"surname":"Mahalik","@sequence":"first","given_name":"Heather","@contributor_role":"author"}]},"publication_date":{"day":"05","year":"2020","month":"11","@media_type":"online"},"@publication_type":"full_text"},"journal_metadata":{"doi_data":{"doi":"10.21428/b0ac9c28","resource":{"#text":"https://dfir.pubpub.org"},"timestamp":1616703069544},"@language":"en","full_title":"DFIR Review"}}},"head":{"depositor":{"email_address":"crossref@pubpub.org","depositor_name":"PubPub"},"timestamp":1616703069544,"registrant":"PubPub","doi_batch_id":"1616703069544_b0ac9c28"},"@xmlns":"http://www.crossref.org/schema/4.4.1","@version":"4.4.1","@xmlns:xsi":"http://www.w3.org/2001/XMLSchema-instance","@xsi:schemaLocation":"http://www.crossref.org/schema/4.4.1 http://www.crossref.org/schema/deposit/crossref4.4.1.xsd"}},"timestamp":1616703069544},"createdAt":"2021-03-25T20:11:09.776Z","updatedAt":"2021-03-25T20:11:09.776Z"},"scopeSummary":{"id":"e95303c4-9cee-48c3-97a6-c767b6dd76d8","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:07.561Z","updatedAt":"2021-04-26T16:48:07.561Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"68c7e8f3-7efe-4fb7-917a-84a9e69aa30f","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"id":"n39mu74j27","class":null}}]},"noteText":"","pubId":"056d3cf2-eb71-422c-b295-ee4e401e13fe","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"cfe12cb2-6b55-44dd-b8f5-518c4e3125c3","historyKey":1309,"historyKeyMissing":false,"createdAt":"2020-11-05T13:45:04.193Z","updatedAt":"2020-12-22T18:24:33.753Z"}],"attributions":[{"id":"dc85477f-4599-4c2b-94e9-ad1d64a45aa7","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"e9e3775b-6200-4b1a-b592-fccfad817588","pubId":"056d3cf2-eb71-422c-b295-ee4e401e13fe","createdAt":"2020-11-02T04:49:44.465Z","updatedAt":"2020-11-02T04:49:44.465Z","user":{"id":"e9e3775b-6200-4b1a-b592-fccfad817588","firstName":"Heather","lastName":"Mahalik","fullName":"Heather Mahalik","avatar":"https://assets.pubpub.org/q90obbww/21554293116796.jpg","slug":"heather-mahalik","initials":"HM","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"fcc2b9c2-da0a-4e06-ad78-615d4d492736":{"id":"fcc2b9c2-da0a-4e06-ad78-615d4d492736","slug":"9llea7yp","title":"Tinkering with TikTok Timestamps","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-09-25T12:53:21.282Z","updatedAt":"2022-11-17T22:55:45.240Z","members":[{"id":"43bd547a-2201-481f-911d-3bb058398563","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"fcc2b9c2-da0a-4e06-ad78-615d4d492736","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-09-25T12:53:21.307Z","updatedAt":"2020-09-25T12:53:21.307Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"dc47e655-0239-4c7b-a864-10c55a88e3a0","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:07.559Z","updatedAt":"2021-04-26T16:48:07.559Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"49a5313d-0ce6-4bc8-987e-e78dd0261ddd","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"fcc2b9c2-da0a-4e06-ad78-615d4d492736","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"1304925f-02ff-4285-bf9e-c489906a8c91","historyKey":738,"historyKeyMissing":false,"createdAt":"2020-09-25T16:02:49.405Z","updatedAt":"2020-12-22T18:24:32.848Z"}],"attributions":[{"id":"d2b7a8ba-26ab-43a0-9794-253263bb3125","name":"Ryan Benson","avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"fcc2b9c2-da0a-4e06-ad78-615d4d492736","createdAt":"2020-09-25T12:56:04.952Z","updatedAt":"2020-09-25T12:56:04.952Z","user":{"isShadowUser":true,"id":"d2b7a8ba-26ab-43a0-9794-253263bb3125","initials":"RB","fullName":"Ryan Benson","firstName":"Ryan","lastName":"Benson","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"92ca3973-ba8a-465f-9e59-39e91897d140":{"id":"92ca3973-ba8a-465f-9e59-39e91897d140","slug":"wfuxlu9v","title":"Windows 10 Jump List and Link File Artifacts - Saved, Copied and Moved","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":"10.21428/b0ac9c28.92ca3973","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-08-31T16:11:38.555Z","updatedAt":"2022-11-17T22:56:10.901Z","members":[{"id":"6cf5e328-6786-4726-aa3c-38f5956da26a","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"758de370-9254-4bae-952f-b1791c9d1d24","pubId":"92ca3973-ba8a-465f-9e59-39e91897d140","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-08-31T16:11:38.591Z","updatedAt":"2020-08-31T16:11:38.591Z"}],"draft":null,"crossrefDepositRecord":{"id":"59d45ea2-bd3d-43a2-9d9a-ef1e25c3bc93","depositJson":{"dois":{"pub":"10.21428/b0ac9c28.92ca3973","community":"10.21428/b0ac9c28"},"deposit":{"doi_batch":{"body":{"journal":{"journal_article":{"titles":{"title":"Windows 10 Jump List and Link File Artifacts - Saved, Copied and Moved"},"doi_data":{"doi":"10.21428/b0ac9c28.92ca3973","resource":{"#text":"https://dfir.pubpub.org/pub/wfuxlu9v","@content_version":"vor"},"timestamp":1616703157850},"@xmlns:rel":"http://www.crossref.org/relations.xsd","contributors":{"person_name":[{"surname":"Jones","@sequence":"first","given_name":"Larry","@contributor_role":"author"}]},"publication_date":{"day":"25","year":"2020","month":"09","@media_type":"online"},"@publication_type":"full_text"},"journal_metadata":{"doi_data":{"doi":"10.21428/b0ac9c28","resource":{"#text":"https://dfir.pubpub.org"},"timestamp":1616703157850},"@language":"en","full_title":"DFIR Review"}}},"head":{"depositor":{"email_address":"crossref@pubpub.org","depositor_name":"PubPub"},"timestamp":1616703157850,"registrant":"PubPub","doi_batch_id":"1616703157850_b0ac9c28"},"@xmlns":"http://www.crossref.org/schema/4.4.1","@version":"4.4.1","@xmlns:xsi":"http://www.w3.org/2001/XMLSchema-instance","@xsi:schemaLocation":"http://www.crossref.org/schema/4.4.1 http://www.crossref.org/schema/deposit/crossref4.4.1.xsd"}},"timestamp":1616703157850},"createdAt":"2021-03-25T20:12:37.933Z","updatedAt":"2021-03-25T20:12:37.933Z"},"scopeSummary":{"id":"3f4ec719-10a7-4bde-be38-023800edcf87","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:04.582Z","updatedAt":"2025-03-18T02:21:15.858Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"cb69d12c-f571-48f0-842a-333491e76f4e","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"92ca3973-ba8a-465f-9e59-39e91897d140","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"5a10c67c-efeb-452c-b51a-5c5821c35afd","historyKey":1520,"historyKeyMissing":false,"createdAt":"2020-09-25T18:33:17.718Z","updatedAt":"2020-12-22T18:22:40.650Z"}],"attributions":[{"id":"3f7dbdd1-937c-41b0-b4bd-4a3104b599f5","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"7c3c62b8-06cf-4afe-98bf-5ae0e0685cf0","pubId":"92ca3973-ba8a-465f-9e59-39e91897d140","createdAt":"2020-09-14T13:22:02.878Z","updatedAt":"2020-09-14T13:22:02.878Z","user":{"id":"7c3c62b8-06cf-4afe-98bf-5ae0e0685cf0","firstName":"Larry","lastName":"Jones","fullName":"Larry Jones","avatar":null,"slug":"larry-jones","initials":"LJ","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"8b3978af-85d6-4527-98cf-9f6294df76f1":{"id":"8b3978af-85d6-4527-98cf-9f6294df76f1","slug":"xbvsrjt5","title":"Parsing Google’s Now Playing History on Pixel Devices","htmlTitle":null,"description":"","htmlDescription":null,"labels":null,"avatar":null,"doi":"10.21428/b0ac9c28.8b3978af","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-08-29T16:46:08.751Z","updatedAt":"2022-11-17T22:56:12.495Z","members":[{"id":"dafe0aec-1dba-4570-bdec-87f0463f6140","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"8b3978af-85d6-4527-98cf-9f6294df76f1","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-08-29T16:46:08.766Z","updatedAt":"2020-08-29T16:46:08.766Z"}],"draft":null,"crossrefDepositRecord":{"id":"c37da627-909a-46b2-b8b3-3d31def34352","depositJson":{"dois":{"pub":"10.21428/b0ac9c28.8b3978af","community":"10.21428/b0ac9c28"},"deposit":{"doi_batch":{"body":{"journal":{"journal_article":{"titles":{"title":"Parsing Google’s Now Playing History on Pixel Devices"},"doi_data":{"doi":"10.21428/b0ac9c28.8b3978af","resource":{"#text":"https://dfir.pubpub.org/pub/xbvsrjt5"},"timestamp":1598888317448},"@xmlns:rel":"http://www.crossref.org/relations.xsd","contributors":{"person_name":[{"surname":"Pagano","@sequence":"first","given_name":"Kevin","@contributor_role":"author"}]},"publication_date":{"day":"31","year":"2020","month":"08","@media_type":"online"},"@publication_type":"full_text"},"journal_metadata":{"doi_data":{"doi":"10.21428/b0ac9c28","resource":{"#text":"https://dfir.pubpub.org"},"timestamp":1598888317448},"@language":"en","full_title":"DFIR Review"}}},"head":{"depositor":{"email_address":"crossref@pubpub.org","depositor_name":"PubPub"},"timestamp":1598888317448,"registrant":"PubPub","doi_batch_id":"1598888317448_b0ac9c28"},"@xmlns":"http://www.crossref.org/schema/4.4.1","@version":"4.4.1","@xmlns:xsi":"http://www.w3.org/2001/XMLSchema-instance","@xsi:schemaLocation":"http://www.crossref.org/schema/4.4.1 http://www.crossref.org/schema/deposit/crossref4.4.1.xsd"}},"timestamp":1598888317448},"createdAt":"2020-08-31T15:38:37.699Z","updatedAt":"2020-08-31T15:38:37.699Z"},"scopeSummary":{"id":"d53e61ad-b1ea-4543-ad2d-19acb0ae2b04","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:48:04.371Z","updatedAt":"2021-04-26T16:48:04.371Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"d313a14c-e20a-48b8-ac56-ff938b11febf","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"8b3978af-85d6-4527-98cf-9f6294df76f1","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"3bae397f-82a5-4a2f-9eb1-86681853af00","historyKey":1899,"historyKeyMissing":false,"createdAt":"2020-08-31T03:12:35.596Z","updatedAt":"2020-12-22T18:22:33.993Z"}],"attributions":[{"id":"6727cdd6-8576-44ec-9765-aca919e7400e","name":"Kevin Pagano","avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"8b3978af-85d6-4527-98cf-9f6294df76f1","createdAt":"2020-08-29T16:48:01.941Z","updatedAt":"2020-08-29T16:48:01.941Z","user":{"isShadowUser":true,"id":"6727cdd6-8576-44ec-9765-aca919e7400e","initials":"KP","fullName":"Kevin Pagano","firstName":"Kevin","lastName":"Pagano","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8":{"id":"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","slug":"inkjsqrh","title":"Chromebook Forensic Acquisition","htmlTitle":null,"description":"","htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-05-22T17:40:21.001Z","updatedAt":"2022-11-17T22:59:13.891Z","members":[{"id":"dd478372-0926-4d88-9783-ff31a293e3e1","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-05-22T17:40:21.014Z","updatedAt":"2020-05-22T17:40:21.014Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"8c20bd1d-30fd-4d2e-9bf9-f18920346ef9","collections":0,"pubs":0,"discussions":1,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:43.638Z","updatedAt":"2023-06-26T20:57:26.946Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"c5bd05c6-8f46-44ec-b896-7497c20b8193","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","userId":"758de370-9254-4bae-952f-b1791c9d1d24","docId":"e99fd117-1c1a-4368-bc1f-943ba581e633","historyKey":2465,"historyKeyMissing":false,"createdAt":"2020-05-26T16:04:11.890Z","updatedAt":"2020-12-22T18:10:47.465Z"},{"id":"ddea2829-996e-49a4-9dad-c825fd15d55f","noteContent":null,"noteText":null,"pubId":"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","userId":"30aa145b-85e3-45f0-af37-2431daffd78a","docId":"83783d14-ab70-4b6c-90be-519bcd0f862b","historyKey":2982,"historyKeyMissing":false,"createdAt":"2021-06-07T13:52:19.216Z","updatedAt":"2021-06-07T13:52:19.216Z"}],"attributions":[{"id":"5bd753d5-580f-4efc-bfad-31fd1ddce229","name":"Daniel Dickerman","avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":null,"pubId":"3e8c8ab3-f14d-4ceb-b67c-1038c22e2cb8","createdAt":"2020-05-22T17:40:44.438Z","updatedAt":"2020-05-22T17:40:44.438Z","user":{"isShadowUser":true,"id":"5bd753d5-580f-4efc-bfad-31fd1ddce229","initials":"DD","fullName":"Daniel Dickerman","firstName":"Daniel","lastName":"Dickerman","avatar":null,"title":null,"orcid":null}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":2},"4203ab16-ac19-47f1-b612-b15feb137a8c":{"id":"4203ab16-ac19-47f1-b612-b15feb137a8c","slug":"jxjn4j8a","title":"OK Computer...er...Google. Dissecting Google Assistant (Part Deux)","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-05-19T21:06:56.833Z","updatedAt":"2022-11-17T22:59:18.225Z","members":[{"id":"8c115f14-d9fc-4e32-8eda-b5e3ea8c6cd7","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"4203ab16-ac19-47f1-b612-b15feb137a8c","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-05-19T21:06:56.845Z","updatedAt":"2020-05-19T21:06:56.845Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"030b7802-7a93-4310-b809-884586b75d7c","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:43.156Z","updatedAt":"2021-04-26T16:47:43.156Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"6157fa0c-4d28-4c50-ab5e-bc3365f62e40","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"4203ab16-ac19-47f1-b612-b15feb137a8c","userId":"758de370-9254-4bae-952f-b1791c9d1d24","docId":"b9b9c2c0-a27c-43ee-a562-366c4512492f","historyKey":1267,"historyKeyMissing":false,"createdAt":"2020-05-26T16:05:03.866Z","updatedAt":"2020-12-22T18:10:28.238Z"}],"attributions":[{"id":"32b5b7c1-7645-4646-9566-23cc2b26a29f","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"4203ab16-ac19-47f1-b612-b15feb137a8c","createdAt":"2020-05-19T21:07:20.838Z","updatedAt":"2020-05-19T21:07:23.888Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"d955f342-1de7-49e9-ab7b-3c9bf6e8b70d":{"id":"d955f342-1de7-49e9-ab7b-3c9bf6e8b70d","slug":"eivkytr1","title":"OK Computer...er...Google. Dissecting Google Assistant (Part 1)","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-05-19T21:05:24.806Z","updatedAt":"2022-11-17T22:59:18.462Z","members":[{"id":"2796059a-9c3d-474b-86a8-36c4bf7981ae","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"d955f342-1de7-49e9-ab7b-3c9bf6e8b70d","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-05-19T21:05:24.823Z","updatedAt":"2020-05-19T21:05:24.823Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"907f7ca8-8402-496a-a233-fb808fa4e268","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:43.154Z","updatedAt":"2021-04-26T16:47:43.154Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"12ed9da6-5aab-4b64-8eed-b86b99e60d7c","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"d955f342-1de7-49e9-ab7b-3c9bf6e8b70d","userId":"758de370-9254-4bae-952f-b1791c9d1d24","docId":"386a6082-e547-4ff9-b09f-52b5eb76ca9a","historyKey":878,"historyKeyMissing":false,"createdAt":"2020-05-26T16:08:02.023Z","updatedAt":"2020-12-22T18:10:27.952Z"}],"attributions":[{"id":"9446f770-dbc3-48a5-b9a9-b5f3c65029dc","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"d955f342-1de7-49e9-ab7b-3c9bf6e8b70d","createdAt":"2020-05-19T21:05:43.943Z","updatedAt":"2020-05-19T21:05:46.277Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"98a33939-bf39-42c2-a26c-fd6165a6105e":{"id":"98a33939-bf39-42c2-a26c-fd6165a6105e","slug":"wpbdig8l","title":"Google Search Bar & Search Term History - Are You Finding Everything?","htmlTitle":null,"description":null,"htmlDescription":null,"labels":null,"avatar":null,"doi":null,"communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2020-05-19T20:57:39.654Z","updatedAt":"2022-11-17T22:59:18.464Z","members":[{"id":"a8a43194-eeb4-49a9-ad1b-9c3aada36186","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"30aa145b-85e3-45f0-af37-2431daffd78a","pubId":"98a33939-bf39-42c2-a26c-fd6165a6105e","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2020-05-19T20:57:39.667Z","updatedAt":"2020-05-19T20:57:39.667Z"}],"draft":null,"crossrefDepositRecord":null,"scopeSummary":{"id":"348d823b-153e-446f-be7a-f9281d9104b1","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:43.148Z","updatedAt":"2021-04-26T16:47:43.148Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"30dcd554-5e9a-4fa1-8e09-9260e6661b8e","noteContent":{"type":"doc","attrs":{"meta":{}},"content":[{"type":"paragraph","attrs":{"class":null}}]},"noteText":"","pubId":"98a33939-bf39-42c2-a26c-fd6165a6105e","userId":"758de370-9254-4bae-952f-b1791c9d1d24","docId":"017924ba-514f-44ca-b760-4612af832137","historyKey":1309,"historyKeyMissing":false,"createdAt":"2020-05-26T16:16:51.299Z","updatedAt":"2020-12-22T18:10:27.873Z"}],"attributions":[{"id":"fc276d9c-316e-49bc-a80c-43bb9c3ad5ff","name":null,"avatar":null,"title":null,"order":0.25,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"98a33939-bf39-42c2-a26c-fd6165a6105e","createdAt":"2020-05-19T20:57:49.705Z","updatedAt":"2020-05-19T20:57:52.039Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":1},"482a8d7a-ba78-4f29-b7d0-6935e708fc04":{"id":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","slug":"716tlra7","title":"Ka-Chow!!! Driving Android Auto","htmlTitle":null,"description":"What information is recoverable from an Android device that is connected to a vehicle with using the Android Auto app?","htmlDescription":null,"labels":null,"avatar":"","doi":"10.21428/482a8d7a","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2019-03-31T14:14:26.883Z","updatedAt":"2022-11-17T23:02:38.824Z","members":[{"id":"b24e09e7-e1df-4c70-970e-96223b71e5b7","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"3153340e-6327-479b-a30d-ccbe0654d33d","pubId":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2019-03-31T14:14:26.894Z","updatedAt":"2019-03-31T14:14:26.894Z"}],"draft":null,"crossrefDepositRecord":{"id":"2b1e5994-4e72-4174-ae97-95729bf72368","depositJson":null,"createdAt":"2020-08-11T13:48:23.014Z","updatedAt":"2020-08-11T13:48:23.014Z"},"scopeSummary":{"id":"118af0c1-ffb1-463f-9176-4a79fae6b0f8","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:20.159Z","updatedAt":"2021-04-26T16:47:20.159Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"bfe84c36-d317-49af-85a8-0903d17f79a3","noteContent":null,"noteText":null,"pubId":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"c8b568ae-cd23-46fe-83f1-c4686c9bbb98","historyKey":559,"historyKeyMissing":false,"createdAt":"2019-03-31T21:02:37.196Z","updatedAt":"2020-12-22T17:47:39.546Z"},{"id":"017d14fc-3e5e-46c0-84e6-eaa3fb7a4154","noteContent":null,"noteText":null,"pubId":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"bff0c8fb-8a04-49cf-910a-61c84bfb4974","historyKey":566,"historyKeyMissing":false,"createdAt":"2019-04-03T21:38:31.391Z","updatedAt":"2020-12-22T17:47:39.459Z"}],"attributions":[{"id":"6ff49e80-b0a4-46e1-9483-d57ba32146f3","name":null,"avatar":null,"title":null,"order":0.125,"isAuthor":false,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","createdAt":"2019-04-01T19:48:06.534Z","updatedAt":"2019-04-01T19:48:06.534Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}},{"id":"265c19c4-421a-414c-b425-de49c5409285","name":null,"avatar":null,"title":null,"order":0.125,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"de40ebe4-3314-444a-a92d-b81f663aaad3","pubId":"482a8d7a-ba78-4f29-b7d0-6935e708fc04","createdAt":"2019-04-01T19:48:37.922Z","updatedAt":"2019-04-01T19:48:42.061Z","user":{"id":"de40ebe4-3314-444a-a92d-b81f663aaad3","firstName":"Joshua","lastName":"Hickman","fullName":"Joshua Hickman","avatar":"https://assets.pubpub.org/xk2by9y2/61554140945751.jpg","slug":"josh-hickman","initials":"JH","title":"CFCE, DFCP, EnCE","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":2},"3296d349-123a-4b00-924b-5a4066fd4e2a":{"id":"3296d349-123a-4b00-924b-5a4066fd4e2a","slug":"httnwst7","title":"What was my IP? Ask DoSvc on Windows 10","htmlTitle":null,"description":"What was the public IP address of a Windows 10 device?","htmlDescription":null,"labels":null,"avatar":"","doi":"10.21428/3296d349","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2019-03-31T14:11:24.684Z","updatedAt":"2022-11-17T23:02:38.861Z","members":[{"id":"14840040-d9c8-4dfd-928a-69583d3bdde6","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"3153340e-6327-479b-a30d-ccbe0654d33d","pubId":"3296d349-123a-4b00-924b-5a4066fd4e2a","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2019-03-31T14:11:24.696Z","updatedAt":"2019-03-31T14:11:24.696Z"}],"draft":null,"crossrefDepositRecord":{"id":"dcf5664f-8329-4593-9e81-a177d886871e","depositJson":null,"createdAt":"2020-08-11T13:48:23.014Z","updatedAt":"2020-08-11T13:48:23.014Z"},"scopeSummary":{"id":"00602c00-1128-4250-aeac-c43e5092b23a","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:20.158Z","updatedAt":"2021-04-26T16:47:20.158Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"9d25dd00-278e-40fd-9983-d45a950b7503","noteContent":null,"noteText":null,"pubId":"3296d349-123a-4b00-924b-5a4066fd4e2a","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"80a1d4cf-00ac-46af-a8d9-167b9346ba7b","historyKey":1080,"historyKeyMissing":false,"createdAt":"2019-03-31T21:03:40.183Z","updatedAt":"2020-12-22T17:47:39.325Z"},{"id":"7df7908a-1d2a-4fe5-9eaa-7c4315bf3e33","noteContent":null,"noteText":null,"pubId":"3296d349-123a-4b00-924b-5a4066fd4e2a","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"ecee4b54-7a50-4ebc-855d-8d1c25dfbebf","historyKey":1082,"historyKeyMissing":false,"createdAt":"2019-04-02T17:13:37.631Z","updatedAt":"2020-12-22T17:47:39.325Z"},{"id":"8d4483e9-a789-4985-877e-86c0975a5f21","noteContent":null,"noteText":null,"pubId":"3296d349-123a-4b00-924b-5a4066fd4e2a","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"c35fb91e-a102-4e28-839b-a1098859b8b1","historyKey":1211,"historyKeyMissing":false,"createdAt":"2019-04-03T21:35:45.927Z","updatedAt":"2020-12-22T17:47:39.325Z"}],"attributions":[{"id":"4905c84e-d0b2-403e-9ede-af794604a8d0","name":null,"avatar":null,"title":null,"order":0.5,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"4bf57e44-f3a1-4d42-b52e-23880fee2c25","pubId":"3296d349-123a-4b00-924b-5a4066fd4e2a","createdAt":"2019-04-02T17:13:26.569Z","updatedAt":"2019-04-02T17:13:28.902Z","user":{"id":"4bf57e44-f3a1-4d42-b52e-23880fee2c25","firstName":"Gabriele","lastName":"Zambelli","fullName":"Gabriele Zambelli","avatar":"https://assets.pubpub.org/1qds58gn/01554224771640.jpg","slug":"gabriele-zambelli","initials":"GZ","title":"GCFE, GCIH, GCIA, GREM, GMOB","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":3},"9106d7d3-5d5f-482e-8cb3-44e2f00094c4":{"id":"9106d7d3-5d5f-482e-8cb3-44e2f00094c4","slug":"e5xlbw88","title":"iOS Mobile Installation Logs","htmlTitle":null,"description":"What applications were installed on an iOS device and when?","htmlDescription":null,"labels":null,"avatar":"","doi":"10.21428/9106d7d3","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2019-03-31T13:53:30.384Z","updatedAt":"2022-11-17T23:02:38.863Z","members":[{"id":"17c831f2-c898-4b19-b5a1-b66e1176c250","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"3153340e-6327-479b-a30d-ccbe0654d33d","pubId":"9106d7d3-5d5f-482e-8cb3-44e2f00094c4","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2019-03-31T13:53:30.408Z","updatedAt":"2019-03-31T13:53:30.408Z"}],"draft":null,"crossrefDepositRecord":{"id":"1d62452d-94bc-4ab4-ad91-dd56ef716d8d","depositJson":null,"createdAt":"2020-08-11T13:48:23.014Z","updatedAt":"2020-08-11T13:48:23.014Z"},"scopeSummary":{"id":"c35cbae6-bc70-4016-8253-d5973bc8ab29","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:20.155Z","updatedAt":"2021-04-26T16:47:20.155Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"c712a8b2-3061-43ed-8ef6-da787571a053","noteContent":null,"noteText":null,"pubId":"9106d7d3-5d5f-482e-8cb3-44e2f00094c4","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"b1385b7e-45ed-4e8c-8059-dcd48f4e141c","historyKey":520,"historyKeyMissing":false,"createdAt":"2019-03-31T21:15:04.152Z","updatedAt":"2020-12-22T17:47:39.324Z"},{"id":"69281b2d-7c66-4830-bab5-04393c4bd765","noteContent":null,"noteText":null,"pubId":"9106d7d3-5d5f-482e-8cb3-44e2f00094c4","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"12dc97c2-3c38-495e-881b-4223d010ffd9","historyKey":531,"historyKeyMissing":false,"createdAt":"2019-04-03T21:37:51.763Z","updatedAt":"2020-12-22T17:47:39.154Z"}],"attributions":[{"id":"98ec67e0-3c90-4a7a-840a-d2259d30c343","name":null,"avatar":null,"title":null,"order":0.0625,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","pubId":"9106d7d3-5d5f-482e-8cb3-44e2f00094c4","createdAt":"2019-04-02T09:50:07.211Z","updatedAt":"2019-04-02T09:50:11.410Z","user":{"id":"3f4b01c5-c3b7-4b4e-b1b2-d2253b1f7304","firstName":"Alexis","lastName":"Brignoni","fullName":"Alexis Brignoni","avatar":"https://assets.pubpub.org/qebcv99n/51554174323314.jpg","slug":"alexis-brignoni","initials":"AB","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":2},"103135b6-e47d-44ab-9aaa-de82517e353b":{"id":"103135b6-e47d-44ab-9aaa-de82517e353b","slug":"2q177smo","title":"How was an iPhone set up?","htmlTitle":null,"description":"Was an iPhone restored from iCloud, iTunes backup or started from scratch?","htmlDescription":null,"labels":null,"avatar":"","doi":"10.21428/103135b6","communityId":"b0ac9c28-479a-496c-884c-7ae8fc26e385","customPublishedAt":null,"createdAt":"2019-03-30T18:12:02.485Z","updatedAt":"2022-11-17T23:02:38.910Z","members":[{"id":"0b384194-f2d8-4bde-8e5c-56b1dceba887","permissions":"manage","isOwner":true,"subscribedToActivityDigest":false,"userId":"3153340e-6327-479b-a30d-ccbe0654d33d","pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","collectionId":null,"communityId":null,"organizationId":null,"createdAt":"2019-03-30T18:12:02.496Z","updatedAt":"2019-03-30T18:12:02.496Z"}],"draft":null,"crossrefDepositRecord":{"id":"ba578fc2-f428-4619-953a-f3e67a61dabb","depositJson":null,"createdAt":"2020-08-11T13:48:23.014Z","updatedAt":"2020-08-11T13:48:23.014Z"},"scopeSummary":{"id":"ab33395a-b23d-4662-80bf-91d74023656a","collections":0,"pubs":0,"discussions":0,"reviews":0,"submissions":0,"createdAt":"2021-04-26T16:47:20.147Z","updatedAt":"2021-04-26T16:47:20.147Z"},"reviews":[],"outboundEdges":[],"inboundEdges":[],"releases":[{"id":"8b0c1df8-b766-4612-bdc6-d137d38d6882","noteContent":null,"noteText":null,"pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"d81c5a8a-b9f6-4da2-92ee-ce9ca206cd13","historyKey":744,"historyKeyMissing":false,"createdAt":"2019-03-31T21:15:43.618Z","updatedAt":"2020-12-22T17:47:39.014Z"},{"id":"802e9e0f-404f-4ee0-a04b-30a94e8ad2c4","noteContent":null,"noteText":null,"pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"a2a8d63c-e818-4ec7-ba34-224646230539","historyKey":891,"historyKeyMissing":false,"createdAt":"2019-04-03T21:20:33.461Z","updatedAt":"2020-12-22T17:47:39.148Z"},{"id":"cdf7e652-42dc-45e7-998b-3936add08a88","noteContent":null,"noteText":null,"pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"a99a5538-5104-4e32-ba67-57b03cef6441","historyKey":920,"historyKeyMissing":false,"createdAt":"2019-04-03T21:24:59.132Z","updatedAt":"2020-12-22T17:47:39.148Z"},{"id":"f3511c81-8e88-435f-a297-7270e7c0e76d","noteContent":null,"noteText":null,"pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"6e502da3-351a-4d44-9b12-584cf042a606","historyKey":923,"historyKeyMissing":false,"createdAt":"2019-04-03T21:27:40.050Z","updatedAt":"2020-12-22T17:47:39.150Z"},{"id":"07c4164f-a1b0-420e-a0cb-b7354d7aa5bb","noteContent":null,"noteText":null,"pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","userId":"b242f616-7aaa-479c-8ee5-3933dcf70859","docId":"9d3bdfe4-2c38-4d2c-afdc-8652822295b1","historyKey":934,"historyKeyMissing":false,"createdAt":"2019-04-03T21:36:38.541Z","updatedAt":"2020-12-22T17:47:39.150Z"}],"attributions":[{"id":"13814525-edcf-460b-9534-198ac3939ec1","name":null,"avatar":null,"title":null,"order":0.0625,"isAuthor":true,"roles":null,"affiliation":null,"orcid":null,"userId":"e9e3775b-6200-4b1a-b592-fccfad817588","pubId":"103135b6-e47d-44ab-9aaa-de82517e353b","createdAt":"2019-04-03T18:40:51.229Z","updatedAt":"2019-04-03T18:40:55.970Z","user":{"id":"e9e3775b-6200-4b1a-b592-fccfad817588","firstName":"Heather","lastName":"Mahalik","fullName":"Heather Mahalik","avatar":"https://assets.pubpub.org/q90obbww/21554293116796.jpg","slug":"heather-mahalik","initials":"HM","title":"","orcid":""}}],"viewHash":null,"editHash":null,"commentHash":null,"reviewHash":null,"submission":null,"collectionPubs":[],"isRelease":true,"releaseNumber":5}}}}}"></script><script id="chunk-name" type="text/plain" data-json=""Page""></script><script src="/dist/vendor.0257e546351f036bbd7d.bundle.js"></script><script src="/dist/main.0543ebefe1cf4d13c7ba.js"></script><script>(function(){function c(){var b=a.contentDocument||a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'92e0994f99b48228',t:'MTc0NDI3MDg1NS4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script></body></html>

CINXE.COM

DFIR Review