A Technique for Measuring Data Persistence Using the Ext4 File System Journal
A general strategy for differential forensic analysis