Performing an APT Investigation: Using People-Process-Technology-Strategy Model in Digital Triage Forensics
A framework for identifying associations in digital evidence using metadata