1. A non-transitory computer-readable storage medium having stored thereon computer-executable instructions that, when executed by a computer system, cause the computer system to perform a method, the method comprising: identifying a first plurality of access events previously performed on a file, wherein said file is associated with a directory of related files; identifying a second plurality of access events previously performed on said related files within said directory, wherein access events in said first and second plurality of access events occur within a time period; determining a pool of users that have accessed the file and the related files within said directory within said time period; determining a type of each of the first plurality of access events and the second plurality of access events, the type of each of the first plurality of access events indicating an operation performed on the file and the type of each of the second plurality of access events indicating an operation performed on the related files; and selecting a user from said pool of users as an inferred owner of said file based on access metrics related to said first and second plurality of access events and the determined type of each of the first plurality of access events and the second plurality of access events.