An Ontology for Digital Forensics in IT Security Incidents - OPUS

BIBLIOGRAPHY 89
[Schuster, 2006] Schuster, A. (2006). Searching for processes and threads in
microsoft windows memory dumps. Digit. Investig., 3:1016. 4.3.2
[Sentinel Chicken Networks, 2010] Sentinel Chicken Networks (2010). RegLookup.
http://projects.sentinelchicken.org/reglookup/. [last
accessed:17.02.2013]. 4.3.3
[Stanford Center for Biomedical Informatics Research, 2013] Stanford Center
for Biomedical Informatics Research (2013). The protégé ontology editor
and knowledge acquisition system. http://protege.stanford.edu/.
[last accessed:17.02.2013]. 5.2.2
[Tang and Daniels, 2005] Tang, Y. and Daniels, T. (2005). A simple
framework for distributed forensics. In Distributed Computing Systems
Workshops, 2005. 25th IEEE International Conference on, pages 163
169. 1
[The Associated Press, 2012] The Associated Press (2012). Computer disk
may have cracked btk case - us news - crime & courts | nbc news. http:
//www.nbcnews.com/id/6988048/. [last accessed: 17.02.2013]. 4.1.1
[The GNOME Project, 2011] The GNOME Project (2011). dconf - gnome
live! https://live.gnome.org/dconf. [last accessed:17.02.2013]. 4.2.3.1
[Tissieres and Oechslin, 2013] Tissieres, C. and Oechslin, P. (2013).
ophcrack - browse /samdump2 at sourceforge.net. http://sourceforge.
net/projects/ophcrack/files/samdump2. [last accessed: 17.02.2013].
4.3.4
[Van Baar et al., 2008] Van Baar, R. B., Alink, W., and Van Ballegooij,
A. R. (2008). Forensic memory analysis: Files mapped in memory. Digit.
Investig., 5:S52S57. 4.3.2
[Vidas, 2007] Vidas, T. (2007). The acquisition and analysis of random access
memory. Journal of Digital Forensic Practice, 1(4):315323. 4.1.2,
4.1.2.2
[Volatile Systems, 2012a] Volatile Systems (2012a). Commandreference21 -
volatility - example usage cases and output for volatility 2.1 commands -
an advanced memory forensics framework - google project hosting. http:
//code.google.com/p/volatility/wiki/CommandReference21. [last accessed:17.02.2013].
4.3.2
[Volatile Systems, 2012b] Volatile Systems (2012b). The volatility
framework: Volatile memory artifact extraction utility framework.
https://www.volatilesystems.com/default/volatility. [last accessed:17.02.2013].
4.3.2