Chris Hargreaves

SoK: Timeline based event reconstruction for digital forensics: Terminology, methodology, and current challenges

2025 · Forensic Science International Digital Investigation

Event reconstruction is a technique that examiners can use to attempt to infer past activities by analyzing digital artifacts. Despite its significance, the field suffers from fragmented research, with studies often focusing narrowly on aspects …