Windows Event Forensic Process. - Quang Do; Ben Martini; Jonathan Looi; Yu Wang 017; Kim-Kwang Raymond Choo (IFIP Int. Conf. Digital Forensics, 2014)