When forensic investigators study the computer, they’re not just scouring through files; they’re retracing the events. Every login, downloaded file web browser session deleted file