Time for Truth: Forensic Analysis of NTFS Timestamps. - Michael Galhuber; Robert Luh (ARES, 2021)

Timestamp Patterns in Windows Forensics. - Robert Luh; Michael Galhuber (ERCIM News, 2022)

Timestamp-based Application Fingerprinting in NTFS. - Michael Galhuber; Robert Luh (ARES, 2024)