Determining the Origin of Downloaded Files Using Metadata Associations
pyflag - an advanced network forensic framework .