Forensic Schedule Analysis