Naval Postgraduate School
Fall 2008
Wed Nov 5, 2008
Time and Timelines
TIMEX
TIMEX2
Timeline software
Reading
- A Brief Study of Time. Florian Buchholz and Brett Tjaden, DFRWS 2007, [slides]
- Timestamp evidence correlation by model based clock hypothesis testing, Svein Yngvar Willassen, Proceedings of the 1st international conference on Forensic applications and techniques in telecommunications, information, and multimedia and workshop, 2008, Adelaide, Australia January 21 - 23, 2008
Lab
We will expirement with the timline viewing commands in SleuthKit and other systems