@article{paperid:1072830, author = {Soltani, Somayeh and Hosseini Seno, Seyed Amin and Sadoghi Yazdi, Hadi}, title = {Event reconstruction using temporal pattern of file system modification}, journal = {IET Information Security}, year = {2019}, volume = {10}, number = {10}, month = {January}, issn = {1751-8709}, pages = {1--11}, numpages = {10}, keywords = {forensic; event Reconstruction; NTFS}, }