Enhanced event time-lining for digital forensic systems
(2009)
Thesis
Symon, C. Enhanced event time-lining for digital forensic systems. (Thesis). Edinburgh Napier University. Retrieved from http://researchrepository.napier.ac.uk/id/eprint/4028
In a digital forensics investigation, log files can be used as a form of evidence by reconstructing timelines of the computer system events recorded in log files. Log files can come from a variety of sources, each of which may make use of proprietary... Read More about Enhanced event time-lining for digital forensic systems.