| http://www.w3.org/ns/prov#value | - That way you could point the tool to the directory where you either have the mounted image, or the files that you have extracted using other methods and only look for certain types of files (whether that be IIS logs, Event Logs or what ever fits your type of investigation).
|