Analysis of Evidence Using Formal Event Reconstruction. - Joshua James; Pavel Gladyshev; Mohd Taufik Abdullah; Yuandong Zhu (ICDF2C, 2009)

Temporal Analysis of Windows MRU Registry Keys. - Yuandong Zhu; Pavel Gladyshev; Joshua James (IFIP Int. Conf. Digital Forensics, 2009)

Using shellbag information to reconstruct user activities. - Yuandong Zhu; Pavel Gladyshev; Joshua James (Digit. Investig., 2009)

A comparative methodology for the reconstruction of digital events using windows restore points. - Yuandong Zhu; Joshua James; Pavel Gladyshev (Digit. Investig., 2009)

Signature Based Detection of User Events for Post-mortem Forensic Analysis. - Joshua James; Pavel Gladyshev; Yuandong Zhu (ICDF2C, 2010)

A Consistency Study of the Windows Registry. - Yuandong Zhu; Joshua James; Pavel Gladyshev (IFIP Int. Conf. Digital Forensics, 2010)

Research of Air Combat Situation Assessment Method. - Li Fu; Feihu Chang; Jin Xu; Yuandong Zhu (ICDMA, 2012)