1. Live forensics: diagnosing your system without killing it first;Adelstein;Commun ACM,2006
2. A five-year study of file-system metadata;Agrawal;ACM Trans Storage (TOS),2007
3. Why there is no undo option in IDA Pro;Bachaalany,2011
4. Redeye: a digital library for forensic document triage;Bogen,2013
5. Benchmarking hard disk duplication performance in forensic applications;Botchek,2008