Yuandong Zhu

Signature Based Detection of User Events for Post-mortem Forensic Analysis

Joshua James, Pavel Gladyshev, Yuandong Zhu, 2010, ICDF2C.

Temporal Analysis of Windows MRU Registry Keys

Joshua James, Pavel Gladyshev, Yuandong Zhu, 2009, IFIP Int. Conf. Digital Forensics.

Using shellbag information to reconstruct user activities

Pavel Gladyshev, Joshua I. James, Yuandong Zhu, 2009, Digit. Investig..

A comparative methodology for the reconstruction of digital events using windows restore points

Joshua James, Pavel Gladyshev, Yuandong Zhu, 2009, Digit. Investig..

Analysis of Evidence Using Formal Event Reconstruction pdf

Joshua James, Mohd Taufik Abdullah, Pavel Gladyshev, 2009, ICDF2C.

A Consistency Study of the Windows Registry

Joshua James, Pavel Gladyshev, Yuandong Zhu, 2010, IFIP Int. Conf. Digital Forensics.