1. FTK imager;Access Data,2011
2. Apple Remote Desktop: how to disable build_hd_index;Apple Computer,2012
3. Multimedia forensics is not computer forensics;Böhme,2009
4. Casey E. Confronting encryption in computer investigations: practical lessons. In: Proceedings of the 2002 DFRWS conference; 2002.
5. Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow;Cohen,2009