Ascription

In computer forensics, ascription is the process of attributing the identity of a person or program that resulted in some piece of data being created or changed.

For example, Drive ascription means taking a hard drive and determining its previous owners.