1. Time and date issues in forensic computing – a case study;Boyd;Digital Investigation,2004
2. File system forensic analysis;Carrier,2005
3. Uncertainty and loss in digital evidence;Casey;International Journal of Digital Evidence,2002
4. An analysis of NTFS journal file for a computer forensic;Cho;Digital Forensic Research,2009
5. “The rules of time on NTFS file system”, SADFE '07;Chow,2007