TY  - RPRT
TI  - Signature Based Detection of User Events for Post-Mortem Forensic Analysis
AU  - Joshua I. James
AU  - Pavel Gladyshev
AU  - Yuandong Zhu
PY  - 2013
DO  - 10.1007/978-3-642-19513-6_8
UR  - https://arxiv.org/abs/1302.2395
ID  - 1302.2395
ER  -