<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="https://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="https://www.loc.gov/MARC21/slim https://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="https://www.loc.gov/MARC21/slim">

  <leader>01183nam a2200217   4500</leader>
  <controlfield tag="001">377733</controlfield>
  <datafield tag="090" ind1=" " ind2=" ">
    <subfield code="a">377733</subfield>
  </datafield>
  <datafield tag="100" ind1=" " ind2=" ">
    <subfield code="a">20200925u           y0pory50      ba</subfield>
  </datafield>
  <datafield tag="101" ind1=" " ind2=" ">
    <subfield code="a">eng</subfield>
  </datafield>
  <datafield tag="200" ind1=" " ind2=" ">
    <subfield code="a">USB storage device forensics for Windows 10</subfield>
    <subfield code="b">Recurso eletr&#xF3;nico</subfield>
    <subfield code="f">Ayesha Arshad, Waseem Iqbal, Haider Abbas</subfield>
  </datafield>
  <datafield tag="311" ind1=" " ind2=" ">
    <subfield code="a">Ficheiro de 325 KB em formato PDF.</subfield>
  </datafield>
  <datafield tag="330" ind1=" " ind2=" ">
    <subfield code="a">Technical background and prior work. MSC, PTP and MTP. Registry hives. Setupapi.dev log. Event log. Prior work. Methodology. Test environment. Software requirements. Experimental setup. Forensic artifacts gathering. Results gathered from MSC-enabled USB devices. Analysis and the comparison of the results with other operating systems. Comparison of previous OS versions&#x2014;MSC devices. Comparison of previous OS versions&#x2014;MTP and PTP devices. Conclusion.</subfield>
  </datafield>
  <datafield tag="461" ind1=" " ind2=" ">
    <subfield code="d">May 2018</subfield>
    <subfield code="v">Vol. 63, n. 3</subfield>
    <subfield code="t">Journal of Forensic Sciences</subfield>
    <subfield code="x">0022-1198</subfield>
    <subfield code="p">p. 856-867</subfield>
  </datafield>
  <datafield tag="606" ind1=" " ind2=" ">
    <subfield code="a">INFORM&#xC1;TICA FORENSE</subfield>
  </datafield>
  <datafield tag="606" ind1=" " ind2=" ">
    <subfield code="a">SOFTWARE</subfield>
  </datafield>
  <datafield tag="606" ind1=" " ind2=" ">
    <subfield code="a">SEGURAN&#xC7;A DE DADOS</subfield>
  </datafield>
  <datafield tag="700" ind1=" " ind2=" ">
    <subfield code="a">ARSHAD</subfield>
    <subfield code="b">Ayesha</subfield>
  </datafield>
  <datafield tag="701" ind1=" " ind2=" ">
    <subfield code="a">IQBAL</subfield>
    <subfield code="b">Waseem</subfield>
  </datafield>
  <datafield tag="701" ind1=" " ind2=" ">
    <subfield code="a">ABBAS</subfield>
    <subfield code="b">Haider</subfield>
  </datafield>
  <datafield tag="995" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="4">PJCD_292_000000000000000</subfield>
    <subfield code="5">2022-06-06</subfield>
    <subfield code="9">405514</subfield>
    <subfield code="a">PJ</subfield>
    <subfield code="c">PJ</subfield>
    <subfield code="k">PJCD 292</subfield>
    <subfield code="n">2022-06-06</subfield>
    <subfield code="o">0</subfield>
    <subfield code="r">AP</subfield>
  </datafield>
</record>
