Finding Anomalous and Suspicious Files from Directory Metadata on a Large Corpus
Automating Disk Forensic Processing with SleuthKit, XML and Python