@inproceedings{BJMA23,
  title         = {Reconstructing timelines: from {NTFS} timestamps to file histories},
  author        = {Bouma, Jelle and Jonker, Hugo and van der Meer, Vincent and van den Aker, Eddy},
  booktitle     = {Proc.\ 18th International Conference on Availability, Reliability and Security (ARES'23)},
  publisher     = {{ACM}},
  year          = {2023},
  note          = {Best paper award at ARES-WSDF},
  doi           = {10.1145/3600160.3605027}
}