Titlebook: Digital Forensics and Cyber Crime; Third International Pavel Gladyshev,Marcus K. Rogers Conference proceedings 2012 ICST Institute for Com

Pillory

CLOUT

纯朴

不可比拟

Finding Anomalous and Suspicious Files from Directory Metadata on a Large Corpusected given the corpus). Cluster comparison performed best at providing useful information for an investigator, but the other methods provided unique additional information albeit with a significant number of false alarms.