Finding Anomalous and Suspicious Files from Directory Metadata on a Large Corpus
on the role of file system metadata in digital forensics .