@inproceedings{good:hal-01716392,
  TITLE = {{Automated Collection and Correlation of File Provenance Information}},
  AUTHOR = {Good, Ryan and Peterson, Gilbert},
  URL = {https://inria.hal.science/hal-01716392},
  NOTE = {Part 7: Forensic Techniques},
  BOOKTITLE = {{13th IFIP International Conference on Digital Forensics (DigitalForensics)}},
  ADDRESS = {Orlando, FL, United States},
  EDITOR = {Gilbert Peterson and Sujeet Shenoi},
  PUBLISHER = {{Springer International Publishing}},
  SERIES = {Advances in Digital Forensics XIII},
  VOLUME = {AICT-511},
  PAGES = {269-284},
  YEAR = {2017},
  MONTH = Jan,
  DOI = {10.1007/978-3-319-67208-3\_15},
  KEYWORDS = {File provenance ; Windows operating systems ; Forensic timelines},
  PDF = {https://inria.hal.science/hal-01716392/file/456364_1_En_15_Chapter.pdf},
  HAL_ID = {hal-01716392},
  HAL_VERSION = {v1},
}