1. Automated recognition of event scenarios for digital forensics;Abbott,2006
2. Maintaining knowledge about temporal intervals;Allen;Commun ACM,1983
3. Cyber observable expression (cybox) use cases;Barnum,2011
4. The enhanced digital investigation process model;Baryamureeba,2004
5. Design and implementation of zeitline: a forensic timeline;Buchholz,2005