Forensic Application-Fingerprinting Based on File System Metadata
Automating Disk Forensic Processing with SleuthKit, XML and Python