File System Forensic Analysis- Creating an Initial Timeline
Windows Forensics Evidence of Execution