The DOI matches its Crossref record; 13 of the 14 references it cites were found in a registry or an index.
Guide to integrating forensic techniques into incident response
Open accessAbstract
Reports on Computer Systems TechnologyThe Information Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation's measurement and standards infrastructure.ITL develops tests, test methods, reference data, proof of concept implementations, and technical analysis to advance the development and productive use of information technology.ITL's responsibilities include the development of technical, physical, administrative, and management standards and guidelines for the cost-effective security and privacy of sensitive unclassified information in Federal computer systems.This Special Publication 800-series reports on ITL's research, guidance, and outreach efforts in computer security and its collaborative activities with industry, government, and academic organizations.Certain commercial entities, equipment, or materials may be identified in this document in order to describe an experimental procedure or concept adequately.Such identification is not intended to imply recommendation or endorsement by the National Institute of Standards and Technology, nor is it intended to imply that the entities, materials, or equipment are necessarily the best available for the purpose.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“A single undetected modification can invalidate an entire chain of evidence and compromise legal admissibility (Kent et al., 2006; International Organization for Standardization, 2012; Stoyanova et al., 2020).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent et al., 2006
Experimental — accuracy not yet measuredThe source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“When these logs serve as evidence in forensic investigations, compliance audits, or incident-response workflows, their integrity is not merely desirable; it is a hard prerequisite (Kebande and Venter, 2017; Cichonski et al., 2012; Kent et al., 2006; International Organization for Standardization, 2012).”
From Lightweight Tamper-Evident Log Integrity Verification for IoT Edge Environments: A Merkle Tree Pipeline with Adaptive Chunking (2026) · cites this paper as Kent et al., 2006
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Carrier, B. D. (2005) · Cited by 568
Computer Forensics: Incident Response Essentials
Kruse, W. G., & Heiser, J. G. (2001) · Cited by 361
Digital Evidence and Computer Crime
Casey, E. (2000) · International Linear Collider · Cited by 298
Digital Evidence and Computer Crime
Kizza, J. M., & Kizza, F. M. (2011) · IGI Global eBooks · doi:10.4018/9781599043791.ch015 · Cited by 219
The Tao Of Network Security Monitoring: Beyond Intrusion Detection
Bejtlich, R. (2004) · Virtual Defense Library (Ministerio de Defensa) · Cited by 133
Farmer, D., & Venema, W. (2004) · Cited by 121
Handbook of Computer Crime Investigation : Forensic Tools and Technology
Casey, E. (2001) · Cited by 95
Real Digital Forensics: Computer Security and Incident Response
Jones, K. J., Bejtlich, R., & Rose, C. W. (2005) · Cited by 82
Silence on the wire: a field guide to passive reconnaissance and indirect attacks
(2005) · Choice Reviews Online · doi:10.5860/choice.43-0996 · Cited by 47
Incident Response: Computer Forensics Toolkit
Schweitzer, D. (2003) · Cited by 35
Flagged first, then by citations
1 of the 14 references couldn’t be matched to a known paper.
Research works printed but not linked: 2
- Honeynet Project. Know Your Enemy: Learning about Security Threats, Second Edition.
- Prosise, Chris, et al. Incident Response and Computer Forensics, Second Edition. McGraw-Hill Osborne Media, 2003.
Cited by
Sorted by citations
Items 501–591 of 591
Visualisation of PF firewall logs using open source
Coetzee, D. (2015)
Forensic Analysis of Dropbox Data Remnants on Windows 10
Buyu, W., & Abade, E. O. (2020) · International Journal of Computer Applications · doi:10.5120/ijca2020920546
Implementación de disponibilidad forense para la continuidad digital
Tugnarelli, M. D. (2020) · doi:10.35537/10915/97968
ضيف, ع. ا. ت. (2016) · مجلة البحوث المحاسبية · doi:10.21608/abj.2016.127518
Leveraging Machine Learning in Financial Fraud Forensics in the Age of Cybersecurity
Haque, M. A., & Shetty, S. S. (2021) · Advances in digital crime, forensics, and cyber terrorism book series · doi:10.4018/978-1-7998-8386-9.ch010
Digital Forensics in Internet of Things
Abdel‐Basset, M., Moustafa, N., Hawash, H., & Ding, W. (2021) · Studies in computational intelligence · doi:10.1007/978-3-030-89025-4_4
A survey on issues in cloud forensics with an experiment on time consumption
Hettige, K. H. A., & Fernando, M. S. D. (2022) · International Journal of ADVANCED AND APPLIED SCIENCES · doi:10.21833/ijaas.2022.03.003
Abrianto, S. K., & Riadi, I. (2022) · International Journal of Computer Applications · doi:10.5120/ijca2022921863
Investigation Framework for Cloud Forensics using Dynamic Genetic-based Clustering
AlKhanafseh, M., Qatawneh, M., & Almobaideen, W. A. (2022) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2022.01301100
Årnes, A., Flaglien, A. O., Sunde, I. M., Dilijonaite, A., Hamm, J., Sandvik, J. P., Bjelland, P., Franke, K., & Axelsson, S. (2017) · doi:10.1002/9781119262442.refs
Detection Protocol of Possible Crime Scenes Using Internet of Things (IoT)
Alohali, B. A. (2019) · IGI Global eBooks · doi:10.4018/978-1-5225-9866-4.ch038
Cyber Security - Incident Response and Management
Malik, M. S. (2019) · International Journal for Electronic Crime Investigation · doi:10.54692/ijeci.2019.030337
Prasad, R., & Rohokale, V. M. (2019) · Springer series in wireless technology · doi:10.1007/978-3-030-31703-4_7
Ricci, J., Baggili, I., & Breitinger, F. (2018) · IGI Global eBooks · doi:10.4018/978-1-5225-5484-4.ch067
Internet of Things (IoT) Forensic Science
Al‐Masri, E. (2020) · Springer eBooks · doi:10.1007/978-3-319-32903-1_352-1
A Study of Forensic Imaging to Evaluate “Unsanitized” Destination Storage Media
Carlton, G. H., & Kessler, G. C. (2020) · IGI Global eBooks · doi:10.4018/978-1-7998-3025-2.ch023
Digital Forensics of Cybercrimes and the Use of Cyber Forensics Tools to Obtain Digital Evidence
(2020) · Advances in digital crime, forensics, and cyber terrorism book series · doi:10.4018/978-1-7998-4162-3.ch003
Cybersecurity: Incident Response
Maras, M. (2021) · Springer eBooks · doi:10.1007/978-3-319-70488-3_301
Novel First Responder Digital Forensics Tool as a Support to Law Enforcement
Bogdanoski, M., Stoilkovski, M., & Risteski, A. (2019) · IGI Global eBooks · doi:10.4018/978-1-7998-2535-7.ch011
A Forensic Analysis Visualization Tool for Mobile Instant Messaging Apps
Ong, W. S., & Rahman, N. H. A. (2020) · International Journal on Information and Communication Technology (IJoICT) · doi:10.21108/ijoict.2020.62.530
Reedy, P., Diplock, B., & Dunlop, M. (2010) · Taylor & Francis eBooks · doi:10.1201/ebk1439826584-c9
(2013) · Elsevier eBooks · doi:10.1016/b978-0-12-409507-6.00013-3
The State of the Art Forensic Techniques in Mobile Cloud Environment
Faheem, M., Kechadi, T., & Le‐Khac, N. (2015) · IGI Global eBooks · doi:10.4018/978-1-4666-9466-8.ch103
Internet of Things (IoT) Forensic Science
Al‐Masri, E. (2020) · Springer eBooks · doi:10.1007/978-3-319-78262-1_352
Towards Development of a Cloud-Connected IoT Forensic ModelPreprint
Almolhis, N. A. (2022) · Research Square · doi:10.21203/rs.3.rs-2145086/v1
The Comparison of Web History Forensic Tools with ISO and NIST Standards
Janloy, K., & Boonyopakorn, P. (2022) · International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) · doi:10.1109/itc-cscc55581.2022.9894903
Anti-Forensics with Steganographic File Embedding in Digital Image Using Genetic Algorithm
Purnacandra, A. P., & Subektiningsih, S. (2022) · Jurnal Ilmiah Teknik Elektro Komputer dan Informatika · doi:10.26555/jiteki.v8i2.24208
DETECTION AND IMPLEMENTATION OF ALTERNATE DATA STREAMS IN THE COMPUTER AND NETWORK SYSTEMS
Boyanov, P. (2015) · Journal Scientific and Applied Research · doi:10.46687/jsar.v7i1.163
Kolosov, O. (2022) · KELM (Knowledge Education Law Management) · doi:10.51647/kelm.2022.8.29
GENERAL THEORETICAL ISSUES RELATED TO ELECTRONIC OR DIGITAL EVIDENCE: PROBLEM AND SOLUTION
Khamidov, B. (2022) · Criminology and Criminal Justice · doi:10.51788/tsul.ccj.1.1./pcpb3884
Etin-Osa, D. (2023) · Caucasian Journal of Science · doi:10.48138/cjo.1179082
Royadi, D., Asfi, M., & Sevtiana, A. (2023) · LOFIAN Jurnal Teknologi Informasi dan Komunikasi · doi:10.58918/lofian.v3i1.216
Marlena, D., Nanta, B. R. M., & Clarissa, D. (2023) · Info Kripto · doi:10.56706/ik.v17i2.75
The GPT tool for an in-depth analysis on Hawkeye trojan incident
Nugroho, S. A., & Hakim, A. R. (2023) · AIP conference proceedings · doi:10.1063/5.0126841
Disaster Forensics of Infrastructure Systems
Kwasinski, A., Kwasinski, A., & Krishnamurthy, V. (2023) · Cambridge University Press eBooks · doi:10.1017/9781108648899.006
Implementasi Model Digital Forensik Procces Untuk Sosial Media Investigation Dengan Tools Hunchly
Jum'ah, M. N. A., Wijaya, H., & Ismail, R. R. (2024) · Cyber Security dan Forensik Digital · doi:10.14421/csecurity.2023.6.2.4265
Рақамли далилларнинг ҳуқуқий мақомини белгилашга доир айрим масалалар
Хамидов, Б. (2023) · Общество и инновации · doi:10.47689/2181-1415-vol4-iss7/s-pp107-116
Hamid, N., Kuswanto, J., Nurani, D., Putra, A. D., Puri, F. M., & Ramadhani, S. T. A. (2024) · JTECS Jurnal Sistem Telekomunikasi Elektronika Sistem Kontrol Power Sistem dan Komputer · doi:10.32503/jtecs.v4i1.4676
Magalingam, P., Maarop, N. B., Samy, G. N., & Marzuki, M. H. (2020) · Malaysian Journal of Information and Communication Technology (MyJICT) · doi:10.53840/myjict5-2-132
LOCKED IOS DEVICE: DATA AVAILABILITY ON BEFORE FIRST UNLOCK (BFU) STATES EXTRACTION
Kurnia, A. G., & Harwahyu, R. (2024) · Indian Journal of Computer Science and Engineering · doi:10.21817/indjcse/2024/v15i3/241503045
Grigollo, F. V., & Fernandes, R. F. (2024) · Revista de Gestão Social e Ambiental · doi:10.24857/rgsa.v18n8-168
Handling Data Security in Education
Imeri-Saiti, D., Hamiti, M., & Asani, J. (2024) · International journal of education & well-being. · doi:10.62416/ijwb-41
A Jurisprudence for Pakistan’s Digital Forensic Investigation Framework Regarding Cybersecurity
Haque, E. U., & Abbasi, W. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-77620-5_25
Beuran, R. (2025) · Springer eBooks · doi:10.1007/978-981-96-0555-2_5
Iipumbu, E. (2024) · Zimbabwe Conference of Information and Communication Technologies (ZCICT) · doi:10.1109/zcict63770.2024.10958374
COMPARATIVE ANALYSIS OF FORENSIC TOOLS: ENCASE AND FTK IMAGER
Shalgynbayeva, A. R. (2025) · Bulletin of Shakarim University Technical Sciences · doi:10.53360/2788-7995-2025-1(17)-11
Creating a Triage Tool to Streamline Digital Forensics Investigation
Prof. Senthilnathan, S. (2025) · International Journal for Research in Applied Science and Engineering Technology · doi:10.22214/ijraset.2025.69325
Investigação criminal sobre meios digitais
Nhamitambo, R. D. M. B. J. (2025) · RCMOS - Revista Científica Multidisciplinar O Saber · doi:10.51473/rcmos.v1i1.2025.991
Ayobami, U. (2025) · International Journal of Research Publication and Reviews · doi:10.55248/gengpi.6.0625.2177
Kamzari, M. A., & Mir, F. A. (2025) · Sustainable landscape planning and natural resources management · doi:10.1007/978-3-031-82419-7_13
İnsan Sağlamlığına Yönəlmiş Kibertəhlükələr və Onların Rəqəmsal Ekspertizası
ETN İnformasiya Texnologiyaları İnstitutu, B., & Vəlizadə, S. (2025) · Rəqəmsal tibb 4.0: problemlər, imkanlar və perspektivlər Respublika Elmi-Praktiki Konfransı · doi:10.25045/spcdh4.0.2025.28
Making Sense of Temporal Metadata: A Digital Forensic Expert Use Case StudyPreprint
Todd, M. C., & Peterson, G. L. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5369537
Reconstructing File Versions and Timestamps: Challenges and Guidelines in Network Forensics
Mahr, A., Hilgert, J.-N., & Lambertz, M. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-00635-6_2
TADFICS: A Threat-Aware Digital Forensics Data Model for ICS
Karagiozidis, A., & Gergeleit, M. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-00630-1_9
Digital Forensic Investigation of Wearable Android Fitness Applications
Shetty, A. A., & Trevorrow, P. (2025) · Journal of Applied Security Research · doi:10.1080/19361610.2025.2562398
IŞIK, B. K. (2025) · Muhasebe ve Finans İncelemeleri Dergisi · doi:10.32951/mufider.1758340
Automated Timeline-Based Forensic Report Generation with Anomaly Detection and LLM-Based CTI Mapping
Kim, Y., Jun, S., Jang, J., & Kim, H. K. (2025) · IEEE Pacific Rim International Symposium on Dependable Computing (PRDC) · doi:10.1109/prdc67299.2025.00031
A Game-Theoretic Approach for Quantification of Strategic Behaviors in Digital Forensic Readiness
Vaseghipanah, M., Jabbehdari, S., & Navidi, H. (2025) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp5040105
Mobil Cihaz Adli Analizi Sistematik Literatür Taraması
Dönmez, M. B., & Doğru, İ. A. (2025) · AJIT-e Academic Journal of Information Technology · doi:10.5824/ajite.2025.04.008.x
GENOSIS: A Generalized Ontology for Social Media Investigation Support
Pardede, S. L., Wiharja, K. R. S., & Cahyani, N. D. W. (2025) · International Conference on Software Engineering and Information Technology (ICoSEIT) · doi:10.1109/icoseit67010.2025.11291042
A Digital Forensic Model Based on the Generated Fuzzy Number Using FCM Clustering
Yang, S., Son, Y., & Chung, M. (2013) · Lecture notes in electrical engineering · doi:10.1007/978-3-642-41671-2_74
Ramadhan, M. F., Ramadhani, E., Luthfi, A., & Halim, M. Y. (2025) · International Conference on Information Technology and Digital Applications (ICITDA) · doi:10.1109/icitda68167.2025.11332272
Digital Evidence and Procedural Enforcement of Noise Pollution in the UAE
Ibrahim, E. K., Rousan, E. A., badr, A., & Sarhan, M. I. (2026) · IGI Global eBooks · doi:10.4018/979-8-3373-7961-6.ch010
Taxonomy of Tools and Techniques for Cyber Forensic Investigations
Guwor, B., Rajagopal, S., & Priscila, S. S. (2026) · Communications in computer and information science · doi:10.1007/978-3-032-17843-5_1
Comprehensive Forensic Analysis of a Spoofed Microsoft Email: A NIST Incident Response Approach
Osamor, J., Akerele, I., Lawal, A., Osisami, D., Aniekwe, C., Omoleye, D., Adedamola, A., Olakunle, R., Love, A. D., & Christopher, D. (2026) · International Conference on Signal Analysis for Smart Systems (SIGNASS) · doi:10.1109/signass67826.2026.11480014
Digital forensics: Tools and techniques Used in Cybercrime Investigation in Electronic Devices
Vashisth, A., Kaur, G., & Kaur, B. (2026) · International Conference on Advancing Sustainable Solutions through Technologies (ICASST) · doi:10.1109/icasst68917.2026.11484501
Artificial Intelligence and Crime on Social Media Platforms
Herke, C., & Szabó, B. (2026) · IntechOpen eBooks · doi:10.5772/intechopen.1015388 · Cited by 1
Gobernanza del cibercrimen y admisibilidad de prueba digital transfronteriza
Andrade-Gonzalez, J. X. (2026) · Revista Científica Ciencia y Método · doi:10.55813/gaea/rcym/v4/n2/194
Siber Suçlar ve Kadınların Hedef Olma Riskleri: Kriminoloji ve Kriminalistik Açısından Değerlendirme
Akıncıoğlu, N. U. (2026) · KADEM Kadın Araştırmaları Dergisi · doi:10.21798/kadem.2026.212
Machine Learning-Driven Intrusion Detection with Forensic Readiness in Cloud-Native IoT Environments
Idugboe, F., Okonkwo, H., Ejiyere, B., & Ugo, E. (2026) · American Journal of Electrical and Computer Engineering · doi:10.11648/j.ajece.20261001.11
ЦИФРЛЫҚ КРИМИНАЛИСТИКА: ҚАЗІРГІ ЗАМАНҒЫ ТЕРГЕУ МЕТОДИКАСЫНЫҢ ЕРЕКШЕЛІКТЕРІ
Т.Ш., Б., Bekbauova, A. A., & Л.А., М. (2026) · Научный журнал "Вестник Актюбинского регионального университета имени К Жубанова" · doi:10.70239/arsu.2026.t84.n2.47
Uthayasangar, S., Devesh, A., Hari Prasanth, D., Dharshini, S., & Yukthasri, S. (2026) · International Conference on System, Computation, Automation and Networking (ICSCAN) · doi:10.1109/icscan66520.2026.11588474
Farhan, K., Li, Y., & Xue, J. (2026) · Lecture notes in computer science · doi:10.1007/978-981-92-2859-1_1
Toward Structured Memory Forensics: A MITRE ATT&CK-Aligned Workflow For Malware Investigation
Rodríguez, R. J. (2026) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-032-22542-9_18
Pohoretskyi, M. M., & Метелев, О. П. (2026) · Herald of criminal justice · doi:10.59835/2413-5372.2026.2/101-121
Forensik Barang Bukti Promosi Judi Online Tiktok Live Gift Menggunakan NIST
Yuwono, K. F. H., & Fachri, F. (2026) · Indonesian Journal of Multidisciplinary on Social and Technology · doi:10.69693/ijmst.v4i3.12395
Kamath, D., Spoorthi, B. M., M, S. P., Challa, S. G., & Srilakshmi, M. (2026) · International Conference on Data Science for Cyber-Physical Systems Resilience using Advanced Applications (ICDCA) · doi:10.1109/icdca69396.2026.11620457
Morić, Z., Dakić, V., & Biškupić, I. O. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-25446-7_17
Intention Recognition for Digital Forensics: With Agentic AI
Kassa, Y. W., Belay, E. G., & James, J. I. (2026) · IEEE Access · doi:10.1109/access.2026.3727721
Nguyen, Q. H., Ngo, P. T., Nguyen, N. P. V., Tran, D. C., Ngoc Anh Thu, T. R. A. N., & Pham, P. K. U. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-27691-9_24
Architecting Trust in Heavy‐Vehicle Digital Evidence
Bumgarner, S., Rudder, S., & Daily, J. S. (2026) · INCOSE International Symposium · doi:10.1002/iis2.70193
Shagor, M. S. I. (2026) · Research Square · doi:10.21203/rs.3.rs-11073242/v1
Truong, X. H., Luong, T. D., Tran, A.-T., & Nguyen, A. K. (2026) · Lecture notes in computer science · doi:10.1007/978-981-92-5641-9_20
Kalarawi, A. T., Muhammad, S., & Bansal, M. (2026) · Research Square · doi:10.21203/rs.3.rs-11257589/v1
Mustapha Ibrahim Bello, A. K. S., & Dahiru, A. R. I. A. (2026) · International Journal of Advanced Research in Science Communication and Technology · doi:10.48175/ijarsct-38958
ODAGIU, I. (2026) · Legea şi Viaţa · doi:10.67457/lv26.2.02
An Interactive Mobile Learning Platform for Digital Forensics Education
Nongnuch, K., Leelawongsarote, S., Khunarsa, T., & Kasetratanachai, S. (2026) · International Journal of Interactive Mobile Technologies (iJIM) · doi:10.3991/ijim.v20i20.62646
Digital Evidence Generation in TLS-Protected Network Flows: An Experimental Evaluation
Berbecaru, D., & Cretone, S. (2026) · doi:10.1145/3847160.3848076
Metadata
- Authors
- Kent, K., Chevalier, S., Grance, T., & Dang, H.
- Affiliations
- National Institute of Standards and Technology (US)
- Published
- 2006
- OpenAlex
- W2628759714
- Cited by
- 590
- References
- 14
- Citations by year
- 2026: 33 · 2025: 32 · 2024: 31 · 2023: 36 · 2022: 34 · 2021: 37 · 2020: 52 · 2019: 49 · 2018: 35 · 2017: 40 · 2016: 39 · 2015: 38 · 2014: 38 · 2013: 43 · 2012: 24
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Licence
- public-domain
- Topics
- Physical Sciences › Computer Science › Information Systems › Digital and Cyber Forensics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Law › Education, Law, and Society
- Keywords
- forensic computing, digital forensics, incident response, digital evidence, cybersecurity
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review