Symon, C. Enhanced event time-lining for digital forensic systems. (Thesis). Edinburgh Napier University. Retrieved from http://researchrepository.napier.ac.uk/id/eprint/4028