@misc{indiciae59adce8df203, title = {Signature Based Detection of User Events for Post-Mortem Forensic Analysis}, author = {Joshua I. James and Pavel Gladyshev and Yuandong Zhu}, year = {2013}, doi = {10.1007/978-3-642-19513-6\_8}, url = {https://arxiv.org/abs/1302.2395}, note = {Source identifier: 1302.2395} }