14-826: Event Reconstruction and Correlation
newusb_image.dd
USB image for generating a timeline