%%%%%%%%%Lit_review_BootCKCL.etl%%%%%%%%%

%@inproceedings{B1_boot_browser,
%author = {Ohana, Donny Jacob and Shashidhar, Narasimha},
%booktitle = {Proceedings - IEEE CS Security and Privacy Workshops, SPW 2013},
%doi = {10.1109/SPW.2013.18},
%title = {{Do private and portable web browsers leave incriminating evidence? A forensic analysis of residual artifacts from private and portable web browsing sessions}},
%year = {2013}
%}

@misc{boot_ibrahim,
author = {Ibrahim, Nicole},
booktitle = {Hacking Exposed Computer Forensics Blog},
title = {{ETW Event Tracing for Windows and ETL Files - Hacking Exposed Computer Forensics Blog}},
url = {https://www.hecfblog.com/2018/06/etw-event-tracing-for-windows-and-etl.html},
urldate = {2022-05-01},
year = {2018}
}

@misc{boot_gajewski,
author = {Gajewski, Krzysztof},
booktitle = {CYBERDEFNERD Krzysztof Gajewski's blog},
mendeley-groups = {7. BootCKCL.etl Forensics},
month = {apr},
title = {{Artifacts that you have never analyzed before{\ldots} namely ETL files. – CyberDefNerd}},
url = {https://cyberdefnerd.com/2022/04/27/artifacts-that-you-have-never-analyzed-before-namely-etl-files/},
urldate = {2022-05-01},
year = {2022}
}
