Forensic Zero-Knowledge Event Reconstruction on Filesystem Metadata.
Digital forensics research: The next 10 years