Problem
In digital forensics, timelines of computer usage and file accesses can be valuable sources of computer evidence. The times and dates when files were created, last accessed, or modified can make or break a case.
What is an example of something that can be identified or proven only through timeline analysis?