%%%%%%%%%Lit_review_Shellbags 

@article{Sh1_reconst,
title = {Using shellbag information to reconstruct user activities},
journal = {Digital Investigation},
volume = {6},
pages = {S69-S77},
year = {2009},
note = {The Proceedings of the Ninth Annual DFRWS Conference},
issn = {1742-2876},
doi = {https://doi.org/10.1016/j.diin.2009.06.009},
url = {https://www.sciencedirect.com/science/article/pii/S1742287609000413},
author = {Zhu, Yuandong and Gladyshev, Pavel and James, Joshua }
}

@techreport{Sh2_shell_win7,
author = {Duncan, Daniel A.},
institution = {East Tennessee State University},
title = {{Exploring the Uses of ShellBag Data within the Windows 7 Registry.}},
type = {Honors Thesis - Open Access},
publisher = {Undergraduate Honors Theses}, 
url = {https://dc.etsu.edu/honors/136},
number = {P-136},
year = {2012}
}

@phdthesis{Sh3_shell_Reg,
author = {Mbatha, Mutinda Peter},
title = {{Windows Registry Forensic Artifacts; Shellbags for Computer Security}},
school = {University of Nairobi},
year = {2016}
}

@INPROCEEDINGS{Sh6_win10_art,
author = {Duranec, A. and Topolcic, D. and Hausknecht, K. and Delija, D.},
booktitle={2019 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)}, 
title={{Investigating file use and knowledge with Windows 10 Artifacts}}, 
year={2019},
volume={},
number={},
pages={1213-1218},
doi={10.23919/MIPRO.2019.8756877}
}

@phdthesis{Sh8_shell_time,
title={Analysis of Shellbags Date Time Update Conditions},
  author={Sanker, Amy},
  year={2020},
  school={Utica College}
}

%%%%%%%%%%WEBSITE REFERENCE IN SHELLBAGS BIB FILE%%%%%%%%%%

@misc{sh9_shellbags_analysis,
author = {Chris Eastwood},
title={{Shellbags Analysis}},
howpublished = {Available at \url{https://medium.com/ce-digital-forensics/shellbag-analysis-18c9b2e87ac7}},
year = {Nov. 17, 2020}
}

@misc{sh10_fors_inv_shell,
author = {Raj Chandel},
title={{Forensic Investigation: Shellbags}},
howpublished = {Available at \url{https://www.hackingarticles.in/forensic-investigation-shellbags/}},
year= {Oct. 26, 2020}
}

@misc{sh11_win_shellbags_fors,
author = {{LiFars}},
title={{Windows ShellBags Forensics, Investigative Value of Windows ShellBags}},
howpublished = {Available at \url{https://lifars.com/knowledge-center/windows-shellbags-forensics-investigative-value-of-windows-shellbags/}},
year={Apr. 2, 2020}
}

@misc{sh12_magnet_win_shellbags_fors,
author = {Jamie McQuaid},
title={{Forensic Analysis of Windows Shellbags}},
howpublished = {Available at \url{https://www.magnetforensics.com/blog/forensic-analysis-of-windows-shellbags/}},
year={Aug. 17, 2014}
}

@misc{sh13_4nk_shellbags_fors,
author = {},
title={{Shellbags Forensics: Addressing a Misconception}},
howpublished = {Available at \url{https://www.4n6k.com/2013/12/shellbags-forensics-addressing.html}},
year={Dec. 4, 2013}
}

@misc{sh14_shehack_shellbags_1,
author = {Stella Magana},
title={{Windows ShellBags (Part 1)}},
howpublished = {Available at \url{https://shehackske.medium.com/windows-shellbags-part-1-9aae3cfaf17}},
year={Jul. 14, 2021}
}

@misc{sh15_shehack_shellbags_2,
author = {Stella Magana},
title={{Windows ShellBags from an Offline Hive(Part 2)}},
howpublished = {Available at \url{https://shehackske.medium.com/windows-shellbags-from-an-offline-hive-9465de1407ac}},
year={Jul. 21, 2021}
}

@misc{sh16_win_reg_hives,
author = {Steven White and Kent Sharkey and Michael Satran},
title={{Registry Hives}},
howpublished = {Available at \url{https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-hives}},
year={Jan. 1, 2021}
}

%%%%%%%%%%%%TOOLS USED WEBSITE%%%%%%%%%%%%

@Manual{sh17_osf,
title		 = {OSForensics v9},
author       = {{PassMark Software}},
organization = {PassMark Software Inc.},
address      = {Redwood City, CA, USA},
year		 = {2022},
url 		 = {{https://www.osforensics.com/}},
}

@Manual{sh18_shellbags_explorer,
title		= {{ShellBags Explorer}},
author      = {{Eric Zimmerman}},
address		= {Indianapolis, IN, USA},
url 		= {https://ericzimmerman.github.io/#!index.md},
year		= {2022}
}

@Manual{sh19_shellbagsview,
title		 = {{Shellbags View}},
author       = {{Nir Sofer}},
organization = {NirSoft},
address		 = {USA},
url			 = {{https://www.nirsoft.net/utils/shell_bags_view.html}},
year		 = {2020}
}

%%%%%%%%%%TOOL MENTIONED IN SHELLBAGS ACKNOWLEDGMENT%%%%%%%%%%
@Manual{sh20_inspector,
title		 = {{Cellebrite Inspector}},
author       = {{Cellebrite}},
organization = {Cellebrite USA Corporation},
address		 = {Vienna, VA, USA},
url			 = {{https://cellebrite.com/en/home}},
year		 = {2022}
}

@Manual{sh21_oxygen,
title={{Oxygen Forensics Detective}},
author       = {{Oxygen Forensics}},
organization = {Oxygen Forensics, Inc.},
address		 = {Alexandria, VA, USA},
url 		 = {{https://www.oxygen-forensic.com/en/products/oxygen-forensic-detective}},
year		 = {2022}
}
@Manual{sh22_magnet,
title={{Magnet AXIOM}},
author       = {{Magnet Forensics}},
organization = {Magnet Forensics USA Inc.},
address		 = {Herndon, VA USA},
url			 = {https://www.magnetforensics.com/products/magnet-axiom-cyber/}},
year		 = {2022}
}

@Manual{sh23_belka,
title		 = {{Belkasoft Evidence Center}},
author       = {{Belkasoft}},
organization = {Belkasoft LLC},
address		 = {Sunnyvale CA, USA},
url 		 = {https://belkasoft.com/es/ec}},
year		 = {2022}
}