Effective whitelisting for filesystem forensics | IEEE Conference Publication | IEEE Xplore